last executing test programs: 17m57.854185645s ago: executing program 32 (id=10): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 17m52.322740541s ago: executing program 33 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 17m52.236365717s ago: executing program 34 (id=14): getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f00000002c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) writev(r3, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16m30.053422537s ago: executing program 35 (id=93): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010004) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 14m54.667598427s ago: executing program 36 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 13m57.073686022s ago: executing program 37 (id=189): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x18) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mlockall(0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='1-6:'], 0x31) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0xe0f}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000002fc0)) write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\x00\x00\x00\x00\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) 11m48.771350972s ago: executing program 38 (id=405): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0xf, 0x20203243, 0x3, [0x2], [0x80ffff, 0x0, 0x2, 0xfffffffe], [0x0, 0x0, 0x0, 0x3], [0xfff]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x105101, 0x95) socket$nl_generic(0x10, 0x3, 0x10) 11m19.707647209s ago: executing program 9 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r4, 0x0, 0x0, 0x80800) 11m18.196467061s ago: executing program 9 (id=468): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000053c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m14.26897147s ago: executing program 9 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m13.018918591s ago: executing program 9 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005540)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0xc0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r6 = io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) socket(0x25, 0x1, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x4, {0x2}, 0xfe}, 0x18) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES32=r8], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5db, 0x10}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004804) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11m9.770172883s ago: executing program 9 (id=478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x7f, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 11m5.820393837s ago: executing program 9 (id=486): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) name_to_handle_at(r7, &(0x7f0000002140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000078870470b900000100000000004ff5ca9063b74387d477a09023487413703326f48b84455172b07171f673"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000280)="2c4a2fc0ebf673e79655fa41e9c1cc2bed1fcd4dae44b16de91a9a3382d5fdb45c89be01459053e64062c342ddef71cd90dd253d37e50fe3b8c86c72302aa247ef1d1c200f95ac60dd67b2a81c610d31024fdfde68983d25aa95d52a45c1498e848529c3009b1574171b30dcdbbeb8f5a81d9216609817a394cb8199a055e36003558a6dc5955661fc05c5d07d6fbe5e1a470701eb9085dc7a1c6748042e3a2104940fa6ba2c1f35f3fe7b9c14d92802bdfe6b1eac16d15b9f2c6585cd365c86b40ee66395898da8f807c3628ff65e5357384d77144f912bb70360c811b7911cc85107cba61c296b8e1d427339cb7bb31ffb", 0xf2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 10m50.489107029s ago: executing program 39 (id=486): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) name_to_handle_at(r7, &(0x7f0000002140)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x600) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000078870470b900000100000000004ff5ca9063b74387d477a09023487413703326f48b84455172b07171f673"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000280)="2c4a2fc0ebf673e79655fa41e9c1cc2bed1fcd4dae44b16de91a9a3382d5fdb45c89be01459053e64062c342ddef71cd90dd253d37e50fe3b8c86c72302aa247ef1d1c200f95ac60dd67b2a81c610d31024fdfde68983d25aa95d52a45c1498e848529c3009b1574171b30dcdbbeb8f5a81d9216609817a394cb8199a055e36003558a6dc5955661fc05c5d07d6fbe5e1a470701eb9085dc7a1c6748042e3a2104940fa6ba2c1f35f3fe7b9c14d92802bdfe6b1eac16d15b9f2c6585cd365c86b40ee66395898da8f807c3628ff65e5357384d77144f912bb70360c811b7911cc85107cba61c296b8e1d427339cb7bb31ffb", 0xf2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 3m5.083588566s ago: executing program 6 (id=1237): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xff4e, &(0x7f0000000c40)=ANY=[], 0x0) 3m3.012501365s ago: executing program 6 (id=1244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x3, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x2, 0x84, 0x8, 0x4, 0x9}, 0x14) 3m2.087197087s ago: executing program 6 (id=1256): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32], 0x48) 3m1.937312613s ago: executing program 6 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf28a6d69e9b5e9c2f1330d", "6a3a05b9", "12772541f8eb02bb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 3m1.191875777s ago: executing program 4 (id=1265): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a3100000000090001"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES64, @ANYBLOB="01022dbd7000ffdbdf25210000005841ef5335278df61a859c3fae7015da09001f0070687931000000000500200000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0xa}, 0x18) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r8, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x26}, 0x28) 3m0.85500574s ago: executing program 4 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 3m0.724355729s ago: executing program 6 (id=1269): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3m0.456137901s ago: executing program 4 (id=1272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000480)=0x1df9, 0x4) 3m0.349467648s ago: executing program 0 (id=1273): syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[], 0x0) 3m0.186055413s ago: executing program 4 (id=1274): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m0.142409164s ago: executing program 6 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4cf30aff22329273708b7da72e9179721f02", 0x2c}], 0x2) 3m0.139310531s ago: executing program 0 (id=1276): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0xd000000}}}, {0x8, 0x22eb, 0x200002, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3m0.050853107s ago: executing program 4 (id=1277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r0, 0x7ac87000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4067, 0xfe3, 0x0, 0x0}, &(0x7f0000000400)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40) 2m59.923669819s ago: executing program 4 (id=1279): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80004, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4010086) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m59.865281232s ago: executing program 0 (id=1280): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r0, 0x0, 0x0) accept(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004816}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) close(r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m59.685233188s ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) 2m59.476107036s ago: executing program 0 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 2m59.416400069s ago: executing program 0 (id=1285): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) 2m45.113387416s ago: executing program 40 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4cf30aff22329273708b7da72e9179721f02", 0x2c}], 0x2) 2m44.137911309s ago: executing program 41 (id=1285): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) 2m44.078946469s ago: executing program 42 (id=1279): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80004, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4010086) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m18.271433386s ago: executing program 5 (id=1349): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x10000002}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0xb, 0x4, 0x0, 0x4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xf, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x7fff, 0xf9, &(0x7f0000000600)=""/249, 0x61680, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0xde, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfa00}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x1843}, 0x18) r7 = socket$inet6(0xa, 0x802, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0xc3a, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) syz_emit_ethernet(0xbe, 0x0, 0x0) 2m16.990402021s ago: executing program 5 (id=1352): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0xfffffffe}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2m16.338364126s ago: executing program 5 (id=1353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) 2m16.337823291s ago: executing program 5 (id=1354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112380000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m16.285224284s ago: executing program 5 (id=1355): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd133816000000000000", @ANYRES32=0x0, @ANYBLOB="08000500040000000500530001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0xf, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r7, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x1c, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000010) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2m15.884082336s ago: executing program 5 (id=1358): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m0.564250919s ago: executing program 43 (id=1358): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 12.937786842s ago: executing program 7 (id=1914): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000002000000c02000000000000000000000d0000000000"], 0x0, 0x35}, 0x28) 12.832536335s ago: executing program 7 (id=1917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 12.728319917s ago: executing program 7 (id=1919): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e0300020000", 0x44}], 0x1) 12.498375074s ago: executing program 7 (id=1923): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x8000000000, 0x1, 0x400000000000, 0x5, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7fffffff, 0xffffffff}, 0x0, 0x0) 11.561767175s ago: executing program 7 (id=1926): socket(0x1d, 0x2, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 10.897236149s ago: executing program 7 (id=1935): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3.745653541s ago: executing program 3 (id=2001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x401, 0x8c, 0x936}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5d444137, 0x1, 0xfa4c, 0x6c, 0x1d6, 0x80000001}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x10000}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.180543921s ago: executing program 8 (id=2005): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d4046"], 0x6c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d", 0xc4}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c7", 0x4f}, {0x0}, {&(0x7f0000000300)}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.178841225s ago: executing program 2 (id=2006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) 2.996516284s ago: executing program 8 (id=2007): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) 2.958007637s ago: executing program 2 (id=2008): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x8000000000, 0x1, 0x400000000000, 0x5, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7fffffff, 0xffffffff}, 0x0, 0x0) 2.683808465s ago: executing program 1 (id=2009): unshare(0x24060400) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff3) 2.635839233s ago: executing program 3 (id=2010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 2.598543424s ago: executing program 8 (id=2011): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0xd000000}}}, {0x8, 0x22eb, 0x200002, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 2.504262416s ago: executing program 3 (id=2012): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) 2.407659889s ago: executing program 1 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xe4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x81, 0x91, "72715d50b0170eaaf730c2b6b73050397db61dc4531a25c7874e1a79771fe87891eea4ce96126e2c4b7eef1fe717fe798a53163aa7e2d44913e6ae42740dd95a6eb755ea58ded7187009c6bfdbd489905e179055583cf5e2c6b991cc1c5c071776f7d0935172f9ed6b50640afb5416f2fe9943ba8393d6e8d8b3c61450"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe4}}, 0x0) 2.24898537s ago: executing program 8 (id=2014): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 2.037768412s ago: executing program 2 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r3, 0x0, 0x9}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 1.914833394s ago: executing program 1 (id=2016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.757430569s ago: executing program 3 (id=2017): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xd}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0x4041080) 1.749199811s ago: executing program 1 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) 1.481473642s ago: executing program 3 (id=2019): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.398846633s ago: executing program 1 (id=2020): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 1.195148933s ago: executing program 2 (id=2021): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) 669.508639ms ago: executing program 8 (id=2022): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 608.514636ms ago: executing program 3 (id=2023): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0xfffffffe}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) 607.529384ms ago: executing program 2 (id=2024): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x0, 0x0, {0x14, 0x4, 0x2, 0x5, 0x2, 0x66, 0x330, 0x2, 0x1, 0x81, @multicast1, @multicast2, {[@rr={0x7, 0xf, 0xa6, [@multicast2, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x1f, 0xfd, [@dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0x11, [@local, @rand_addr=0x64010101]}]}}}}}}}, 0x0) 411.153108ms ago: executing program 8 (id=2025): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x8000000000, 0x1, 0x400000000000, 0x5, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x6, 0x7fffffff, 0xffffffff}, 0x0, 0x0) 403.929912ms ago: executing program 2 (id=2026): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x3, 0x99acf6043ef01bba}, 0xc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) unshare(0x26020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x19}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3d1a}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='GPL\x00', 0x80, 0xdb, &(0x7f0000000380)=""/219, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@socket3={{0x28}, 0x2}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0x8}}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x2, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x9, 0x8, 0xfffffff8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x4008050) sendfile(r6, r7, 0x0, 0x4216) close(r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021008a0400000000000800108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r8}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 1 (id=2027): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) kernel console output (not intermixed with test programs): e hsr debugfs directory [ 807.480413][ T7982] usb 6-1: config 0 descriptor?? [ 807.571058][T10329] chnl_net:caif_netlink_parms(): no params data found [ 807.709382][ T7982] usbhid 6-1:0.0: can't add hid device: -71 [ 807.709499][ T7982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 807.742302][ T7982] usb 6-1: USB disconnect, device number 18 [ 809.022058][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.022129][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.531539][T10439] input: syz0 as /devices/virtual/input/input38 [ 810.653299][ T7982] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 810.905462][T10449] input: syz0 as /devices/virtual/input/input39 [ 811.734272][ T7982] usb 6-1: device descriptor read/64, error -71 [ 811.757502][T10449] batadv_slave_1: entered promiscuous mode [ 811.758019][T10450] batadv_slave_1: left promiscuous mode [ 811.758306][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.758427][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.758612][T10329] bridge_slave_0: entered allmulticast mode [ 811.760609][T10329] bridge_slave_0: entered promiscuous mode [ 811.791858][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.792002][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.792179][T10329] bridge_slave_1: entered allmulticast mode [ 811.798721][T10329] bridge_slave_1: entered promiscuous mode [ 811.976954][ T7982] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 812.107029][ T7982] usb 6-1: device descriptor read/64, error -71 [ 812.217170][ T7982] usb usb6-port1: attempt power cycle [ 812.228773][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.258833][ T5804] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 812.343250][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.439272][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.439301][ T5804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.439313][ T5804] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 812.439350][ T5804] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.439363][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.442980][ T5804] usb 7-1: config 0 descriptor?? [ 812.566827][ T7982] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 812.587762][ T7982] usb 6-1: device descriptor read/8, error -71 [ 812.837718][ T7982] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 812.863775][ T5804] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 812.878971][ T7982] usb 6-1: device descriptor read/8, error -71 [ 812.883202][T10329] team0: Port device team_slave_0 added [ 812.897938][ T5804] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 812.974992][T10329] team0: Port device team_slave_1 added [ 812.987197][ T7982] usb usb6-port1: unable to enumerate USB device [ 813.065153][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.065681][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.129804][ T5956] usb 7-1: USB disconnect, device number 25 [ 813.427972][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.427989][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.428016][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.430357][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.430370][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.430405][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.131474][T10288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 817.160792][T10470] input: syz0 as /devices/virtual/input/input41 [ 817.470303][T10329] hsr_slave_0: entered promiscuous mode [ 817.471633][T10329] hsr_slave_1: entered promiscuous mode [ 817.472550][T10329] debugfs: 'hsr0' already exists in 'hsr' [ 817.472574][T10329] Cannot create hsr debugfs directory [ 817.472884][T10473] batadv_slave_1: entered promiscuous mode [ 817.474101][T10288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 817.748609][T10465] batadv_slave_1: left promiscuous mode [ 817.800128][T10288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 817.950995][T10288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 820.077156][ T1213] bridge_slave_1: left allmulticast mode [ 820.077179][ T1213] bridge_slave_1: left promiscuous mode [ 820.077345][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.196404][ T1213] bridge_slave_0: left allmulticast mode [ 820.196426][ T1213] bridge_slave_0: left promiscuous mode [ 820.196600][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.316229][ T1213] bridge_slave_1: left allmulticast mode [ 820.316250][ T1213] bridge_slave_1: left promiscuous mode [ 820.316402][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.389060][ T1213] bridge_slave_0: left allmulticast mode [ 820.389090][ T1213] bridge_slave_0: left promiscuous mode [ 820.389327][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.529927][ T1213] bridge_slave_1: left allmulticast mode [ 820.529957][ T1213] bridge_slave_1: left promiscuous mode [ 820.530220][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.615257][ T1213] bridge_slave_0: left allmulticast mode [ 820.615287][ T1213] bridge_slave_0: left promiscuous mode [ 820.615535][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.125817][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.379166][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.460112][ T1213] bond0 (unregistering): Released all slaves [ 823.687551][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.934525][T10511] input: syz0 as /devices/virtual/input/input42 [ 824.597599][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.639324][ T1213] bond0 (unregistering): Released all slaves [ 824.837491][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.918356][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.978825][ T1213] bond0 (unregistering): Released all slaves [ 824.997378][T10512] batadv_slave_1: entered promiscuous mode [ 824.997905][T10513] batadv_slave_1: left promiscuous mode [ 829.330938][T10538] input: syz0 as /devices/virtual/input/input43 [ 830.147396][ T1213] hsr_slave_0: left promiscuous mode [ 830.167225][ T1213] hsr_slave_1: left promiscuous mode [ 830.168223][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.422942][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.626879][ T1213] hsr_slave_0: left promiscuous mode [ 832.666981][ T1213] hsr_slave_1: left promiscuous mode [ 832.667976][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.717898][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.074094][ T1213] hsr_slave_0: left promiscuous mode [ 833.092310][ T1213] hsr_slave_1: left promiscuous mode [ 833.093130][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.110846][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.507523][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 834.637408][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 835.248297][T10565] option changes via remount are deprecated (pid=10564 comm=syz.5.904) [ 835.686559][T10569] input: syz0 as /devices/virtual/input/input44 [ 837.615266][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 837.777994][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 838.777350][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 838.917691][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 840.629253][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.885867][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.934476][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.934650][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.976693][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.976875][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.029599][T10600] pim6reg: entered allmulticast mode [ 842.044096][T10600] pim6reg: left allmulticast mode [ 842.954968][T10606] input: syz0 as /devices/virtual/input/input45 [ 846.302262][ T9898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.304978][ T9898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.306477][ T9898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.360652][T10288] syz-executor (10288) used greatest stack depth: 17624 bytes left [ 846.403867][ T9898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.503853][ T9898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 848.452846][T10633] lo speed is unknown, defaulting to 1000 [ 848.576751][T10329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 848.666807][ T5822] Bluetooth: hci1: command tx timeout [ 848.705370][T10329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 848.806531][ T9898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.827542][ T9898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.829897][ T9898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.832982][ T9898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.833711][ T9898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.848922][T10329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 849.057247][T10329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 850.566341][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.920'. [ 850.627320][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.920'. [ 850.765325][ T9898] Bluetooth: hci1: command tx timeout [ 850.897575][T10329] kthread_run failed with err -4 [ 850.934462][T10674] macvtap2: entered promiscuous mode [ 850.934660][T10674] macvtap2: entered allmulticast mode [ 850.935725][T10674] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 850.936502][T10676] macvtap2: left promiscuous mode [ 850.943918][T10676] macvtap2: left allmulticast mode [ 850.986824][ T9898] Bluetooth: hci5: command tx timeout [ 851.019431][T10651] lo speed is unknown, defaulting to 1000 [ 851.623779][ T7136] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 852.016477][T10695] input: syz0 as /devices/virtual/input/input46 [ 852.456312][ T7136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.456348][ T7136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.456371][ T7136] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 852.456412][ T7136] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.456442][ T7136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.528552][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.540321][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.542325][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.543770][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.544528][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 852.692196][ T7136] usb 6-1: config 0 descriptor?? [ 852.826797][ T5822] Bluetooth: hci1: command tx timeout [ 853.144019][ T5822] Bluetooth: hci5: command tx timeout [ 853.785339][ T7136] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 853.848017][ T7136] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 854.007728][T10687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.008250][T10687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.254514][ T7136] usb 6-1: USB disconnect, device number 23 [ 854.587104][ T5822] Bluetooth: hci2: command tx timeout [ 854.727204][T10633] chnl_net:caif_netlink_parms(): no params data found [ 854.749422][T10713] pim6reg: entered allmulticast mode [ 854.750073][T10714] pim6reg: left allmulticast mode [ 854.965941][ T5822] Bluetooth: hci1: command tx timeout [ 855.036233][T10693] lo speed is unknown, defaulting to 1000 [ 855.227391][ T5822] Bluetooth: hci5: command tx timeout [ 855.326863][T10730] loop6: detected capacity change from 0 to 7 [ 855.341993][T10730] Dev loop6: unable to read RDB block 7 [ 855.342325][T10730] loop6: unable to read partition table [ 855.343788][T10730] loop6: partition table beyond EOD, truncated [ 855.343852][T10730] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.667152][ T5822] Bluetooth: hci2: command tx timeout [ 856.715082][T10737] pim6reg: entered allmulticast mode [ 857.008387][T10744] input: syz0 as /devices/virtual/input/input48 [ 857.588421][ T5822] Bluetooth: hci5: command tx timeout [ 857.802150][T10740] pim6reg: left allmulticast mode [ 858.249234][T10757] loop6: detected capacity change from 0 to 7 [ 858.285322][T10757] Dev loop6: unable to read RDB block 7 [ 858.285533][T10757] loop6: unable to read partition table [ 858.287173][T10757] loop6: partition table beyond EOD, truncated [ 858.287504][T10757] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 858.747727][ T5822] Bluetooth: hci2: command tx timeout [ 859.944385][T10774] serio: Serial port ptm0 [ 860.066549][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.067295][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.067520][T10633] bridge_slave_0: entered allmulticast mode [ 860.071032][T10633] bridge_slave_0: entered promiscuous mode [ 860.119790][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.119996][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.121339][T10633] bridge_slave_1: entered allmulticast mode [ 860.137189][T10633] bridge_slave_1: entered promiscuous mode [ 860.197681][T10774] serio: Serial port ptm0 [ 860.288888][T10783] usb usb5: usbfs: process 10783 (syz.6.940) did not claim interface 0 before use [ 860.503881][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.505997][T10651] chnl_net:caif_netlink_parms(): no params data found [ 860.526453][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.827126][ T5822] Bluetooth: hci2: command tx timeout [ 861.073900][T10798] input: syz0 as /devices/virtual/input/input49 [ 861.409113][T10799] batadv_slave_1: entered promiscuous mode [ 861.678025][T10792] batadv_slave_1: left promiscuous mode [ 863.143177][T10818] netlink: 56 bytes leftover after parsing attributes in process `syz.6.945'. [ 863.300867][T10633] team0: Port device team_slave_0 added [ 863.432487][T10633] team0: Port device team_slave_1 added [ 863.951028][T10830] input: syz0 as /devices/virtual/input/input50 [ 864.996967][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.996984][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.997017][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.064947][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.064966][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.064993][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.969784][T10693] chnl_net:caif_netlink_parms(): no params data found [ 865.990640][T10651] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.990779][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.990945][T10651] bridge_slave_0: entered allmulticast mode [ 865.992375][T10651] bridge_slave_0: entered promiscuous mode [ 866.238111][T10651] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.238500][T10651] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.238713][T10651] bridge_slave_1: entered allmulticast mode [ 866.241624][T10651] bridge_slave_1: entered promiscuous mode [ 866.651176][T10633] hsr_slave_0: entered promiscuous mode [ 866.652746][T10633] hsr_slave_1: entered promiscuous mode [ 866.820201][T10651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.914079][T10651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.446498][T10915] serio: Serial port ptm0 [ 868.576456][T10915] serio: Serial port ptm0 [ 868.902598][T10651] team0: Port device team_slave_0 added [ 868.904643][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.904835][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.905023][T10693] bridge_slave_0: entered allmulticast mode [ 868.918031][T10693] bridge_slave_0: entered promiscuous mode [ 869.767024][T10651] team0: Port device team_slave_1 added [ 869.777060][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.777197][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.777429][T10693] bridge_slave_1: entered allmulticast mode [ 869.780180][T10693] bridge_slave_1: entered promiscuous mode [ 870.205096][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.205169][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.301142][T10943] pim6reg: entered allmulticast mode [ 871.301308][T10944] pim6reg: left allmulticast mode [ 871.487989][T10651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.488012][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.488041][T10651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.493228][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.555108][T10952] usb usb5: usbfs: process 10952 (syz.6.962) did not claim interface 0 before use [ 871.618814][T10651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.618831][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.618857][T10651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.623124][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.505654][T10693] team0: Port device team_slave_0 added [ 872.689176][T10693] team0: Port device team_slave_1 added [ 873.770910][T10651] hsr_slave_0: entered promiscuous mode [ 873.771709][T10651] hsr_slave_1: entered promiscuous mode [ 873.772253][T10651] debugfs: 'hsr0' already exists in 'hsr' [ 873.772282][T10651] Cannot create hsr debugfs directory [ 876.091801][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.091814][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.091829][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.285761][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.285774][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.285789][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.719870][T10693] hsr_slave_0: entered promiscuous mode [ 881.720745][T10693] hsr_slave_1: entered promiscuous mode [ 881.721277][T10693] debugfs: 'hsr0' already exists in 'hsr' [ 881.721292][T10693] Cannot create hsr debugfs directory [ 881.916982][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 882.069699][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.071871][ T31] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 882.071898][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.071916][ T31] usb 6-1: Product: syz [ 882.071929][ T31] usb 6-1: Manufacturer: syz [ 882.071942][ T31] usb 6-1: SerialNumber: syz [ 882.132701][ T31] usb 6-1: config 0 descriptor?? [ 882.359546][ T7852] usb 6-1: USB disconnect, device number 24 [ 882.427927][ T1213] bridge_slave_1: left allmulticast mode [ 882.427956][ T1213] bridge_slave_1: left promiscuous mode [ 882.428205][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.668798][ T1213] bridge_slave_0: left allmulticast mode [ 882.668828][ T1213] bridge_slave_0: left promiscuous mode [ 882.669110][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.603577][ T1213] bridge_slave_1: left allmulticast mode [ 883.603612][ T1213] bridge_slave_1: left promiscuous mode [ 883.604048][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.659213][ T1213] bridge_slave_0: left allmulticast mode [ 883.659243][ T1213] bridge_slave_0: left promiscuous mode [ 883.659478][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.839901][ T1213] bridge_slave_1: left allmulticast mode [ 883.839921][ T1213] bridge_slave_1: left promiscuous mode [ 883.840067][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.171082][ T1213] bridge_slave_0: left allmulticast mode [ 885.171112][ T1213] bridge_slave_0: left promiscuous mode [ 885.171350][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.465681][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'. [ 886.329877][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.868298][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.222637][ T1213] bond0 (unregistering): Released all slaves [ 888.557483][T11073] CIFS mount error: No usable UNC path provided in device string! [ 888.557483][T11073] [ 888.557678][T11073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 888.849599][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.992'. [ 888.902368][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.280892][T11080] input: syz0 as /devices/virtual/input/input51 [ 889.850477][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.907995][ T1213] bond0 (unregistering): Released all slaves [ 892.547309][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.587647][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.610000][ T1213] bond0 (unregistering): Released all slaves [ 892.637178][T11079] batadv_slave_1: entered promiscuous mode [ 892.637718][T11080] batadv_slave_1: left promiscuous mode [ 893.426900][T10633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.568940][T10633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 894.645803][T10633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 894.968704][T10633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 895.237837][ T7136] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 895.420031][ T7136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.420064][ T7136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.421190][ T7136] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 895.421216][ T7136] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 895.421229][ T7136] usb 7-1: Manufacturer: syz [ 895.424698][ T7136] usb 7-1: config 0 descriptor?? [ 895.479388][ T1213] hsr_slave_0: left promiscuous mode [ 895.526857][ T1213] hsr_slave_1: left promiscuous mode [ 895.531247][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.671314][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.832900][ T7136] usbhid 7-1:0.0: can't add hid device: -71 [ 895.833020][ T7136] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 895.854936][ T7136] usb 7-1: USB disconnect, device number 26 [ 895.887033][ T1213] hsr_slave_0: left promiscuous mode [ 895.908515][ T1213] hsr_slave_1: left promiscuous mode [ 895.909501][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.959267][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.307072][ T1213] hsr_slave_0: left promiscuous mode [ 896.347006][ T1213] hsr_slave_1: left promiscuous mode [ 896.350007][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.377833][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.123213][T11134] input: syz0 as /devices/virtual/input/input52 [ 898.327497][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 898.457403][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 899.467668][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 899.587970][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 900.807235][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 901.047224][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 903.108568][T11135] batadv_slave_1: entered promiscuous mode [ 903.109092][T11136] batadv_slave_1: left promiscuous mode [ 903.600142][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.663973][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.761115][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.761327][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.775326][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.775472][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.247486][T10633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 906.497525][T11202] input: syz0 as /devices/virtual/input/input53 [ 907.171146][ T9898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 907.185338][ T9898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 907.199934][ T9898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 907.201667][ T9898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 907.202499][ T9898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.736413][T11204] lo speed is unknown, defaulting to 1000 [ 908.407781][ T7136] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 908.549262][T11204] chnl_net:caif_netlink_parms(): no params data found [ 908.566260][ T9898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.579069][ T9898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.583327][ T9898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.591246][ T7136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.591276][ T7136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.594320][ T7136] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 908.594347][ T7136] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 908.594365][ T7136] usb 6-1: Manufacturer: syz [ 908.614040][ T9898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.614927][ T9898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 908.706771][ T7136] usb 6-1: config 0 descriptor?? [ 908.929039][ T7136] usbhid 6-1:0.0: can't add hid device: -71 [ 908.929164][ T7136] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 908.952810][ T7136] usb 6-1: USB disconnect, device number 25 [ 910.187187][ T5822] Bluetooth: hci0: command tx timeout [ 910.708106][T11233] lo speed is unknown, defaulting to 1000 [ 910.746809][ T5822] Bluetooth: hci1: command tx timeout [ 910.890733][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.890942][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.891176][T11204] bridge_slave_0: entered allmulticast mode [ 910.894465][T11204] bridge_slave_0: entered promiscuous mode [ 910.978131][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.978235][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.978399][T11204] bridge_slave_1: entered allmulticast mode [ 910.979799][T11204] bridge_slave_1: entered promiscuous mode [ 912.270527][ T5822] Bluetooth: hci0: command tx timeout [ 912.836735][ T5822] Bluetooth: hci1: command tx timeout [ 913.239574][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.351268][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.503004][ T9898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 913.514494][ T9898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 913.523393][ T9898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 913.525552][ T9898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 913.526295][ T9898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 913.738750][T11204] team0: Port device team_slave_0 added [ 913.750145][T11204] team0: Port device team_slave_1 added [ 913.860579][T11283] serio: Serial port ptm0 [ 913.959837][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.959854][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.959879][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.017733][T11283] serio: Serial port ptm0 [ 914.230798][T11280] lo speed is unknown, defaulting to 1000 [ 914.235552][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.235564][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.235578][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.514752][ T5822] Bluetooth: hci0: command tx timeout [ 914.839329][T11294] input: syz0 as /devices/virtual/input/input54 [ 915.367782][ T5822] Bluetooth: hci1: command tx timeout [ 915.532490][T11295] batadv_slave_1: entered promiscuous mode [ 915.533130][T11294] batadv_slave_1: left promiscuous mode [ 915.626948][ T5822] Bluetooth: hci5: command tx timeout [ 916.291396][T11204] hsr_slave_0: entered promiscuous mode [ 916.292809][T11204] hsr_slave_1: entered promiscuous mode [ 916.293378][T11204] debugfs: 'hsr0' already exists in 'hsr' [ 916.293394][T11204] Cannot create hsr debugfs directory [ 916.610146][ T5822] Bluetooth: hci0: command tx timeout [ 916.611914][T11306] 9p: Bad value for 'wfdno' [ 916.949313][T11233] chnl_net:caif_netlink_parms(): no params data found [ 917.386710][ T5822] Bluetooth: hci1: command tx timeout [ 917.710093][ T5822] Bluetooth: hci5: command tx timeout [ 918.111630][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.120380][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.120685][T11233] bridge_slave_0: entered allmulticast mode [ 918.124464][T11233] bridge_slave_0: entered promiscuous mode [ 918.172425][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.172573][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.172808][T11233] bridge_slave_1: entered allmulticast mode [ 918.213950][T11233] bridge_slave_1: entered promiscuous mode [ 919.341535][T11334] 9p: Bad value for 'wfdno' [ 919.418116][T11336] IPv6: Can't replace route, no match found [ 919.788867][ T5822] Bluetooth: hci5: command tx timeout [ 920.253785][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.254197][T11280] chnl_net:caif_netlink_parms(): no params data found [ 920.806106][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.866903][ T5822] Bluetooth: hci5: command tx timeout [ 922.420818][T11356] CIFS mount error: No usable UNC path provided in device string! [ 922.420818][T11356] [ 922.420835][T11356] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 922.761602][T11233] team0: Port device team_slave_0 added [ 922.804859][T11233] team0: Port device team_slave_1 added [ 923.537627][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.537644][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.537670][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.722559][T11363] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 923.750683][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.750695][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.750716][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.751229][ T1213] bridge_slave_1: left allmulticast mode [ 923.751251][ T1213] bridge_slave_1: left promiscuous mode [ 923.751499][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.868468][ T1213] bridge_slave_0: left allmulticast mode [ 923.868488][ T1213] bridge_slave_0: left promiscuous mode [ 923.868661][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.944767][ T1213] bridge_slave_1: left allmulticast mode [ 923.944788][ T1213] bridge_slave_1: left promiscuous mode [ 923.944930][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.039488][ T1213] bridge_slave_0: left allmulticast mode [ 924.039507][ T1213] bridge_slave_0: left promiscuous mode [ 924.039805][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.547980][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.639742][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.712123][ T1213] bond0 (unregistering): Released all slaves [ 926.071291][T11368] IPv6: Can't replace route, no match found [ 926.872659][T11370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 926.872677][T11370] IPv6: NLM_F_CREATE should be set when creating new route [ 926.872734][T11370] IPv6: NLM_F_CREATE should be set when creating new route [ 926.872764][T11370] IPv6: NLM_F_CREATE should be set when creating new route [ 930.807480][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.867702][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.891198][ T1213] bond0 (unregistering): Released all slaves [ 930.967376][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.967518][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.967770][T11280] bridge_slave_0: entered allmulticast mode [ 930.970422][T11280] bridge_slave_0: entered promiscuous mode [ 931.066887][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.067025][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.067236][T11280] bridge_slave_1: entered allmulticast mode [ 931.077163][T11280] bridge_slave_1: entered promiscuous mode [ 932.437138][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.437214][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.649760][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1054'. [ 933.302756][T11397] input: syz0 as /devices/virtual/input/input55 [ 933.683379][T11398] batadv_slave_1: entered promiscuous mode [ 933.951930][T11389] batadv_slave_1: left promiscuous mode [ 933.958471][T11394] pimreg: entered allmulticast mode [ 933.963016][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.003688][T11400] udevd[11400]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 934.161490][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.228137][T11233] hsr_slave_0: entered promiscuous mode [ 934.229568][T11233] hsr_slave_1: entered promiscuous mode [ 934.230776][T11233] debugfs: 'hsr0' already exists in 'hsr' [ 934.230802][T11233] Cannot create hsr debugfs directory [ 937.936925][ T1213] hsr_slave_0: left promiscuous mode [ 937.977811][ T1213] hsr_slave_1: left promiscuous mode [ 937.979426][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.007345][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.166925][ T1213] hsr_slave_0: left promiscuous mode [ 938.188529][ T1213] hsr_slave_1: left promiscuous mode [ 938.189181][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.227548][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.786289][T11417] loop6: detected capacity change from 0 to 7 [ 938.806754][T11417] Dev loop6: unable to read RDB block 7 [ 938.807025][T11417] loop6: unable to read partition table [ 938.808728][T11417] loop6: partition table beyond EOD, truncated [ 938.808788][T11417] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 938.843294][T11417] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1062'. [ 940.057903][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 940.207902][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 941.547955][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 941.802300][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 944.148576][T11280] team0: Port device team_slave_0 added [ 944.412928][T11280] team0: Port device team_slave_1 added [ 945.244601][T11431] 9p: Bad value for 'rfdno' [ 945.496826][T11204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.650754][T11204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.964036][T11204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 947.939760][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.939804][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.939856][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.985875][T11204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 948.972945][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.972962][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.972984][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.413385][T11433] infiniband syû: set active [ 949.413406][T11433] infiniband syû: added bond_slave_0 [ 949.444919][T11433] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 949.451975][T11433] infiniband syû: Couldn't open port 1 [ 949.843655][T11453] input: syz0 as /devices/virtual/input/input56 [ 950.509044][T11433] RDS/IB: syû: added [ 950.510128][T11433] smc: adding ib device syû with port count 1 [ 950.510526][T11433] smc: ib device syû port 1 has no pnetid [ 950.571894][T11454] batadv_slave_1: entered promiscuous mode [ 950.572668][T11455] batadv_slave_1: left promiscuous mode [ 950.871336][T11280] hsr_slave_0: entered promiscuous mode [ 950.872654][T11280] hsr_slave_1: entered promiscuous mode [ 953.361803][T11475] usb usb5: usbfs: process 11475 (syz.5.1076) did not claim interface 0 before use [ 953.904540][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.219357][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.297308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.297527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.414180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.414323][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.496734][ T7266] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 954.653820][ T7266] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 954.653850][ T7266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.653870][ T7266] usb 6-1: Product: syz [ 954.653884][ T7266] usb 6-1: Manufacturer: syz [ 954.653897][ T7266] usb 6-1: SerialNumber: syz [ 954.727819][ T7266] usb 6-1: config 0 descriptor?? [ 955.003449][ T5971] usb 6-1: USB disconnect, device number 26 [ 955.268002][T11496] loop6: detected capacity change from 0 to 7 [ 955.325769][T11496] Dev loop6: unable to read RDB block 7 [ 955.326076][T11496] loop6: unable to read partition table [ 955.328711][T11496] loop6: partition table beyond EOD, truncated [ 955.328898][T11496] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 955.369708][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 956.392775][ T1213] bridge_slave_1: left allmulticast mode [ 956.392805][ T1213] bridge_slave_1: left promiscuous mode [ 956.393052][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.538661][ T1213] bridge_slave_0: left allmulticast mode [ 956.538690][ T1213] bridge_slave_0: left promiscuous mode [ 956.538962][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.589112][T11499] serio: Serial port ptm0 [ 956.707520][T11499] serio: Serial port ptm0 [ 956.867602][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.928362][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.128836][ T1213] bond0 (unregistering): Released all slaves [ 957.281070][T11233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 957.363360][T11233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 957.435391][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.449858][T11233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.501283][T11233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.896168][ T1213] hsr_slave_0: left promiscuous mode [ 957.936911][ T1213] hsr_slave_1: left promiscuous mode [ 957.938147][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.967229][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.677899][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 958.998220][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 960.033747][T11520] 9p: Bad value for 'rfdno' [ 960.386747][ T805] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 960.603390][T11280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 960.725237][ T805] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 960.725264][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.725283][ T805] usb 7-1: Product: syz [ 960.725296][ T805] usb 7-1: Manufacturer: syz [ 960.725310][ T805] usb 7-1: SerialNumber: syz [ 960.732995][ T805] usb 7-1: config 0 descriptor?? [ 961.584128][T11280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 961.721440][ T7136] usb 7-1: USB disconnect, device number 27 [ 961.845976][T11280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 961.934402][T11280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 962.547155][T11204] veth0_vlan: entered promiscuous mode [ 962.655355][T11204] veth1_vlan: entered promiscuous mode [ 962.899214][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.905274][T11204] veth0_macvtap: entered promiscuous mode [ 963.021587][T11204] veth1_macvtap: entered promiscuous mode [ 963.144110][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.159597][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.185546][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.185704][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.205104][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.259014][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.259414][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.261869][ T7519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.266347][T11280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.271408][ T7519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.274736][ T7519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.285596][ T7519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.461258][T11280] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.555027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.555209][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.728799][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.728909][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.804483][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.804504][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.061382][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.061403][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.535207][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.569142][T11563] 9p: Bad value for 'wfdno' [ 964.646463][T11567] 9p: Bad value for 'rfdno' [ 964.836478][T11233] veth0_vlan: entered promiscuous mode [ 964.896074][T11233] veth1_vlan: entered promiscuous mode [ 965.013286][T11280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.085131][T11233] veth0_macvtap: entered promiscuous mode [ 965.123322][T11233] veth1_macvtap: entered promiscuous mode [ 965.601746][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.628089][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.665507][ T8429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.720796][ T8429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.720904][ T8429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.720941][ T8429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.989301][T11596] serio: Serial port ptm0 [ 966.255551][ T7379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.255572][ T7379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.292507][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.210'. [ 966.377927][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 966.441205][ T7379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.441226][ T7379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.866337][T11280] veth0_vlan: entered promiscuous mode [ 966.914286][T11280] veth1_vlan: entered promiscuous mode [ 967.060537][T11280] veth0_macvtap: entered promiscuous mode [ 967.065615][T11280] veth1_macvtap: entered promiscuous mode [ 967.138468][T11280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.169123][T11280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.217609][ T7379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.218424][ T7379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.230337][ T7379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.267617][ T7379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.443335][T11624] 9p: Bad value for 'rfdno' [ 967.909855][ T7379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.909877][ T7379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.472517][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.472539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.398487][T11656] IPv6: Can't replace route, no match found [ 970.637405][T11679] input: syz0 as /devices/virtual/input/input57 [ 970.848856][T11679] batadv_slave_1: entered promiscuous mode [ 971.364426][T11665] batadv_slave_1: left promiscuous mode [ 974.484562][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1130'. [ 974.955778][T11736] pimreg: entered allmulticast mode [ 980.168931][T11787] IPv6: Can't replace route, no match found [ 980.464343][T11793] CIFS mount error: No usable UNC path provided in device string! [ 980.464343][T11793] [ 980.464365][T11793] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 982.304170][T11799] input: syz0 as /devices/virtual/input/input58 [ 989.262668][T11874] input: syz0 as /devices/virtual/input/input59 [ 992.244418][T11901] input: syz0 as /devices/virtual/input/input60 [ 993.122360][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.122431][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.290221][T11919] bridge0: port 3(gretap0) entered blocking state [ 994.291035][T11919] bridge0: port 3(gretap0) entered disabled state [ 994.292423][T11919] gretap0: entered allmulticast mode [ 994.310186][T11919] gretap0: entered promiscuous mode [ 994.316908][T11919] bridge0: port 3(gretap0) entered blocking state [ 994.317037][T11919] bridge0: port 3(gretap0) entered forwarding state [ 995.376707][ T5930] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 996.019908][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.019930][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.021524][ T5930] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 996.021541][ T5930] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 996.021551][ T5930] usb 6-1: Manufacturer: syz [ 996.031496][ T5930] usb 6-1: config 0 descriptor?? [ 998.233445][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.233511][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.238047][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.307118][T11954] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 998.325757][T11955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.405305][T11955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.550843][T11955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.550874][T11955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.913910][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.956806][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.960354][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.963716][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.996105][T11954] virt_wifi0 speed is unknown, defaulting to 1000 [ 1000.107547][T11980] gretap0: left allmulticast mode [ 1000.107568][T11980] gretap0: left promiscuous mode [ 1000.107777][T11980] bridge0: port 3(gretap0) entered disabled state [ 1000.232399][T11980] bridge_slave_0: left allmulticast mode [ 1000.232429][T11980] bridge_slave_0: left promiscuous mode [ 1000.232848][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.341110][T11980] bridge_slave_1: left allmulticast mode [ 1000.341142][T11980] bridge_slave_1: left promiscuous mode [ 1000.341381][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.502518][T11980] bond0: (slave bond_slave_0): Releasing backup interface [ 1000.730534][T11980] bond0: (slave bond_slave_1): Releasing backup interface [ 1000.944293][ T5930] usbhid 6-1:0.0: can't add hid device: -71 [ 1000.944422][ T5930] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1000.969290][ T5930] usb 6-1: USB disconnect, device number 27 [ 1001.048563][T11980] team0: Port device team_slave_0 removed [ 1001.101020][T11980] team0: Port device team_slave_1 removed [ 1001.141027][T11980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1001.215023][T11982] team0: Mode changed to "loadbalance" [ 1001.889049][T12008] netlink: 'syz.5.1204': attribute type 6 has an invalid length. [ 1002.170629][T12024] netlink: 'syz.1.1206': attribute type 12 has an invalid length. [ 1002.343294][T11792] IPVS: starting estimator thread 0... [ 1002.428364][T12031] IPVS: using max 11 ests per chain, 26400 per kthread [ 1003.092470][T12040] Bluetooth: MGMT ver 1.23 [ 1003.520140][T12040] lo speed is unknown, defaulting to 1000 [ 1003.554174][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.559341][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.559876][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.560115][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.563852][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.564064][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.564272][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.569360][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.569609][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1003.569826][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 1004.059872][T12052] "syz.4.1214" (12052) uses obsolete ecb(arc4) skcipher [ 1004.364400][T12074] netlink: 'syz.5.1220': attribute type 1 has an invalid length. [ 1004.964699][T12040] virt_wifi0 speed is unknown, defaulting to 1000 [ 1005.146694][ T5822] Bluetooth: hci0: command tx timeout [ 1005.265567][T12102] syzkaller0: entered promiscuous mode [ 1005.265594][T12102] syzkaller0: entered allmulticast mode [ 1005.642986][T12102] tipc: Started in network mode [ 1005.643017][T12102] tipc: Node identity ae87ed7ac2b6, cluster identity 4711 [ 1005.670053][T12102] tipc: Enabled bearer , priority 0 [ 1007.937040][T12101] tipc: Resetting bearer [ 1008.070176][T12101] tipc: Disabling bearer [ 1008.306692][ T31] tipc: Node number set to 1815211386 [ 1009.286438][T12193] team_slave_0: entered promiscuous mode [ 1009.286477][T12193] team_slave_1: entered promiscuous mode [ 1009.289594][T12193] vlan2: entered promiscuous mode [ 1009.289614][T12193] team0: entered promiscuous mode [ 1009.650458][T12204] warning: `syz.5.1250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1009.698489][T12204] __nla_validate_parse: 26 callbacks suppressed [ 1009.698510][T12204] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1250'. [ 1010.410959][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1259'. [ 1010.935981][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 1011.493194][T12258] block nbd4: NBD_DISCONNECT [ 1011.710423][T12270] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1269'. [ 1012.090709][T12279] tipc: Started in network mode [ 1012.090740][T12279] tipc: Node identity ba6a7991b308, cluster identity 4711 [ 1012.114016][T12279] tipc: Enabled bearer , priority 0 [ 1012.244303][T12279] syzkaller0: entered promiscuous mode [ 1012.244324][T12279] syzkaller0: entered allmulticast mode [ 1012.244907][T12279] tipc: Resetting bearer [ 1012.277892][T12293] tipc: Enabling of bearer rejected, failed to enable media [ 1012.399161][T12278] tipc: Resetting bearer [ 1014.021714][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1294'. [ 1027.232033][ T9898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1027.252043][ T9898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1027.253443][ T9898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1027.290797][ T9898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1027.291527][ T9898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1027.684786][T12278] tipc: Disabling bearer [ 1027.784886][ T31] tipc: Node number set to 157448593 [ 1028.148448][T12351] lo speed is unknown, defaulting to 1000 [ 1028.522849][ T9898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.534960][ T9898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.537592][ T9898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.539997][ T9898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.540835][ T9898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1028.714993][ T9898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1028.738572][ T9898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1028.740083][ T9898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1028.741868][ T9898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1028.742794][ T9898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1029.091858][T12363] lo speed is unknown, defaulting to 1000 [ 1029.239840][T12369] lo speed is unknown, defaulting to 1000 [ 1029.400924][ T9898] Bluetooth: hci2: command tx timeout [ 1029.417136][T12375] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 1029.767484][T12381] netlink: 'syz.5.1304': attribute type 10 has an invalid length. [ 1029.823870][T12375] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1029.850294][T12351] virt_wifi0 speed is unknown, defaulting to 1000 [ 1029.904914][T12383] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 1030.342910][T12381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.345281][T12381] bond0: (slave team0): Enslaving as an active interface with an up link [ 1030.374497][T12363] virt_wifi0 speed is unknown, defaulting to 1000 [ 1030.515515][T12389] Driver unsupported XDP return value 0 on prog (id 359) dev N/A, expect packet loss! [ 1030.679397][ T9898] Bluetooth: hci6: command tx timeout [ 1030.837455][ T9898] Bluetooth: hci7: command tx timeout [ 1030.996995][ T9898] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.999761][ T9898] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.472863][ T5818] Bluetooth: hci2: command tx timeout [ 1031.499463][ T1483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.608190][T12369] virt_wifi0 speed is unknown, defaulting to 1000 [ 1031.859781][T12398] netlink: set zone limit has 4 unknown bytes [ 1032.371205][ T1483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.733374][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 1032.747210][ T5818] Bluetooth: hci6: command tx timeout [ 1032.753161][ T1483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.906724][ T5818] Bluetooth: hci7: command tx timeout [ 1033.176131][ T1483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.546749][ T5818] Bluetooth: hci2: command tx timeout [ 1034.003824][T12425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.063278][T12351] chnl_net:caif_netlink_parms(): no params data found [ 1034.439611][T12425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.671966][T12369] chnl_net:caif_netlink_parms(): no params data found [ 1034.690385][T12363] chnl_net:caif_netlink_parms(): no params data found [ 1034.826711][ T5818] Bluetooth: hci6: command tx timeout [ 1034.925901][T12425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.977099][ T1483] gretap0: left allmulticast mode [ 1034.977119][ T1483] gretap0: left promiscuous mode [ 1034.977312][ T1483] bridge0: port 3(gretap0) entered disabled state [ 1034.990291][ T5818] Bluetooth: hci7: command tx timeout [ 1035.051889][ T1483] bridge_slave_1: left allmulticast mode [ 1035.051910][ T1483] bridge_slave_1: left promiscuous mode [ 1035.052131][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.107630][ T1483] bridge_slave_0: left allmulticast mode [ 1035.107649][ T1483] bridge_slave_0: left promiscuous mode [ 1035.107834][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.631242][ T5818] Bluetooth: hci2: command tx timeout [ 1036.906721][ T5818] Bluetooth: hci6: command tx timeout [ 1037.076714][ T5818] Bluetooth: hci7: command tx timeout [ 1037.238624][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.297251][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.340208][ T1483] bond0 (unregistering): Released all slaves [ 1037.757688][ T1483] tipc: Left network mode [ 1037.931100][T12425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.011050][ T5971] syû: Port: 1 Link DOWN [ 1038.327895][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.328451][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.328662][T12351] bridge_slave_0: entered allmulticast mode [ 1038.338123][T12351] bridge_slave_0: entered promiscuous mode [ 1038.408572][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.408750][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.408990][T12351] bridge_slave_1: entered allmulticast mode [ 1038.440290][T12351] bridge_slave_1: entered promiscuous mode [ 1039.264447][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.267819][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.271008][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.271241][T12369] bridge_slave_0: entered allmulticast mode [ 1039.279470][T12369] bridge_slave_0: entered promiscuous mode [ 1039.281607][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.281719][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.281889][T12363] bridge_slave_0: entered allmulticast mode [ 1039.286133][T12363] bridge_slave_0: entered promiscuous mode [ 1039.341088][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.341373][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.341482][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.341661][T12369] bridge_slave_1: entered allmulticast mode [ 1039.344426][T12369] bridge_slave_1: entered promiscuous mode [ 1039.346106][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.346235][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.346405][T12363] bridge_slave_1: entered allmulticast mode [ 1039.368909][T12363] bridge_slave_1: entered promiscuous mode [ 1039.374535][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 1039.375835][ T7379] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.149364][ T44] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.401708][T12351] team0: Port device team_slave_0 added [ 1040.557161][ T1483] hsr_slave_0: left promiscuous mode [ 1040.576741][ T1483] hsr_slave_1: left promiscuous mode [ 1040.577706][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.577730][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.637841][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.637875][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.731625][ T1483] team0: left allmulticast mode [ 1040.731641][ T1483] team_slave_0: left allmulticast mode [ 1040.731651][ T1483] team_slave_1: left allmulticast mode [ 1040.731671][ T1483] team0: left promiscuous mode [ 1040.732049][ T1483] team_slave_0: left promiscuous mode [ 1040.732083][ T1483] team_slave_1: left promiscuous mode [ 1040.732172][ T1483] veth1_macvtap: left promiscuous mode [ 1040.732228][ T1483] veth0_macvtap: left promiscuous mode [ 1040.732363][ T1483] veth1_vlan: left promiscuous mode [ 1040.732455][ T1483] veth0_vlan: left promiscuous mode [ 1041.260349][ T1483] pimreg (unregistering): left allmulticast mode [ 1043.700144][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1043.957199][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1044.458281][ T1213] smc: removing ib device syû [ 1046.826405][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.830058][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.839541][T12351] team0: Port device team_slave_1 added [ 1046.854744][ T5810] lo speed is unknown, defaulting to 1000 [ 1046.854769][ T5810] infiniband syz2: ib_query_port failed (-19) [ 1046.858270][ T7373] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.104795][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.124345][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.597709][ T7190] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.604451][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.604468][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.604493][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.906220][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.906237][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.906263][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.986210][T12369] team0: Port device team_slave_0 added [ 1047.994983][T12363] team0: Port device team_slave_0 added [ 1048.058914][T12369] team0: Port device team_slave_1 added [ 1048.063659][T12363] team0: Port device team_slave_1 added [ 1048.185031][T12487] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1049.018691][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.018703][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.018718][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.019791][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.019804][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.019829][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.149979][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.149996][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.150022][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.151275][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.151289][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.151315][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.204454][T12351] hsr_slave_0: entered promiscuous mode [ 1049.205680][T12351] hsr_slave_1: entered promiscuous mode [ 1049.206524][T12351] debugfs: 'hsr0' already exists in 'hsr' [ 1049.234757][T12351] Cannot create hsr debugfs directory [ 1049.766156][T12369] hsr_slave_0: entered promiscuous mode [ 1049.768075][T12369] hsr_slave_1: entered promiscuous mode [ 1049.768980][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 1049.769002][T12369] Cannot create hsr debugfs directory [ 1049.801576][T12363] hsr_slave_0: entered promiscuous mode [ 1049.802378][T12363] hsr_slave_1: entered promiscuous mode [ 1049.802919][T12363] debugfs: 'hsr0' already exists in 'hsr' [ 1049.802935][T12363] Cannot create hsr debugfs directory [ 1051.143080][ T1483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.291974][T12504] virt_wifi0 speed is unknown, defaulting to 1000 [ 1051.453811][ T1483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.032272][ T1483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.443914][ T1483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.486935][T12514] netlink: 'syz.5.1336': attribute type 10 has an invalid length. [ 1053.101449][T12524] delete_channel: no stack [ 1053.101778][T12524] delete_channel: no stack [ 1053.282324][T12526] netlink: 'syz.5.1341': attribute type 10 has an invalid length. [ 1053.565935][ T1483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.841870][T12547] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1053.984115][ T1483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.012355][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 1054.359253][ T1483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.516887][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.516962][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.793307][ T1483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.517422][T12554] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 1055.704459][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.714649][T12554] bond0: (slave team0): Enslaving as an active interface with an up link [ 1055.771812][T12563] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1055.840420][T12563] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1355'. [ 1056.242093][ T1483] bridge_slave_1: left allmulticast mode [ 1056.242122][ T1483] bridge_slave_1: left promiscuous mode [ 1056.242377][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.328310][ T1483] bridge_slave_0: left allmulticast mode [ 1056.328339][ T1483] bridge_slave_0: left promiscuous mode [ 1056.328607][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.539403][ T1483] bond0 (unregistering): Released all slaves [ 1060.338213][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.397725][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.449869][ T1483] bond0 (unregistering): Released all slaves [ 1060.518296][T12570] virt_wifi0 speed is unknown, defaulting to 1000 [ 1061.876429][T12595] netlink: 'syz.1.1364': attribute type 10 has an invalid length. [ 1063.747007][ T1483] hsr_slave_0: left promiscuous mode [ 1063.762574][ T1483] hsr_slave_1: left promiscuous mode [ 1063.876973][ T1483] hsr_slave_0: left promiscuous mode [ 1063.897055][ T1483] hsr_slave_1: left promiscuous mode [ 1063.898016][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.898041][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.928745][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.928774][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.083092][ T1483] veth1_macvtap: left promiscuous mode [ 1064.083194][ T1483] veth0_macvtap: left promiscuous mode [ 1064.083338][ T1483] veth1_vlan: left promiscuous mode [ 1064.083430][ T1483] veth0_vlan: left promiscuous mode [ 1064.188021][ T1483] veth1_macvtap: left promiscuous mode [ 1064.188292][ T1483] veth0_macvtap: left promiscuous mode [ 1064.188551][ T1483] veth1_vlan: left promiscuous mode [ 1064.188725][ T1483] veth0_vlan: left promiscuous mode [ 1071.623286][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1071.640451][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1071.641704][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1071.643104][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1071.644399][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.687176][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1072.987310][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1073.706866][ T5818] Bluetooth: hci1: command tx timeout [ 1075.793263][ T5818] Bluetooth: hci1: command tx timeout [ 1076.621457][T12606] chnl_net:caif_netlink_parms(): no params data found [ 1076.741383][T12351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1076.947389][T12351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.054392][T12351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.141924][T12351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1077.808767][T12636] ªªªªªª: renamed from vlan0 (while UP) [ 1077.864428][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.864602][T12606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.864784][T12606] bridge_slave_0: entered allmulticast mode [ 1077.876654][ T5818] Bluetooth: hci1: command tx timeout [ 1077.907281][T12606] bridge_slave_0: entered promiscuous mode [ 1077.910162][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.910287][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.910482][T12606] bridge_slave_1: entered allmulticast mode [ 1077.913002][T12606] bridge_slave_1: entered promiscuous mode [ 1078.246155][T12369] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1078.312603][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.331449][T12369] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1078.381073][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.385843][T12369] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1078.543699][T12369] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1078.673244][ T1483] IPVS: stop unused estimator thread 0... [ 1078.695682][T12606] team0: Port device team_slave_0 added [ 1078.731325][T12606] team0: Port device team_slave_1 added [ 1079.017682][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.017695][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.017710][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.022957][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.022969][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.022983][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.100691][T12363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1079.200518][T12363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1079.527685][T12363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1079.642041][T12363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1079.704174][ T1483] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.829477][T12606] hsr_slave_0: entered promiscuous mode [ 1079.830253][T12606] hsr_slave_1: entered promiscuous mode [ 1079.869011][ T1483] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.947765][ T5818] Bluetooth: hci1: command tx timeout [ 1080.060709][ T1483] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.303698][ T1483] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.509485][T12660] syzkaller0: entered promiscuous mode [ 1080.509511][T12660] syzkaller0: entered allmulticast mode [ 1081.361866][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.466039][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.491948][ T1483] gretap0: left allmulticast mode [ 1081.491976][ T1483] gretap0: left promiscuous mode [ 1081.492248][ T1483] bridge0: port 3(gretap0) entered disabled state [ 1081.558067][ T1483] bridge_slave_1: left allmulticast mode [ 1081.558096][ T1483] bridge_slave_1: left promiscuous mode [ 1081.558351][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.657550][ T1483] bridge_slave_0: left allmulticast mode [ 1081.657570][ T1483] bridge_slave_0: left promiscuous mode [ 1081.657725][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.878823][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.937493][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.007283][ T1483] bond0 (unregistering): (slave team0): Releasing backup interface [ 1084.047874][ T1483] bond0 (unregistering): Released all slaves [ 1084.070689][T12351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.241292][ T1483] tipc: Left network mode [ 1084.254054][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.265631][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.265841][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.332506][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.332675][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.335086][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.335189][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.421599][T12692] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1390'. [ 1084.428471][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.428659][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.454096][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.268625][T12698] netlink: 'syz.1.1392': attribute type 12 has an invalid length. [ 1085.661917][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.983877][T12709] syzkaller0: entered promiscuous mode [ 1085.983894][T12709] syzkaller0: entered allmulticast mode [ 1086.260993][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.261134][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.348787][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.348930][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.467077][ T1483] hsr_slave_0: left promiscuous mode [ 1086.507507][ T1483] hsr_slave_1: left promiscuous mode [ 1086.509029][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.509054][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.571570][ T1483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.571597][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.700646][ T1483] veth1_macvtap: left promiscuous mode [ 1086.700752][ T1483] veth0_macvtap: left promiscuous mode [ 1086.701002][ T1483] veth1_vlan: left promiscuous mode [ 1086.701177][ T1483] veth0_vlan: left promiscuous mode [ 1087.111253][ T1483] pimreg (unregistering): left allmulticast mode [ 1088.391990][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1088.395455][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1088.409164][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1088.426235][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1088.428790][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1088.432710][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1088.463317][T12390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1088.466821][T12390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1088.468119][T12390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1088.507272][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1088.631214][ T7775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.633994][ T7775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1088.635172][ T7775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1088.641385][ T7775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1088.645800][ T7775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1089.727479][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1089.977079][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1090.586858][ T5818] Bluetooth: hci3: command tx timeout [ 1090.586866][ T7775] Bluetooth: hci4: command tx timeout [ 1090.746667][ T5818] Bluetooth: hci5: command tx timeout [ 1092.591018][T12723] netlink: 'syz.1.1399': attribute type 12 has an invalid length. [ 1092.666784][ T5818] Bluetooth: hci3: command tx timeout [ 1092.666792][ T7775] Bluetooth: hci4: command tx timeout [ 1092.836714][ T7775] Bluetooth: hci5: command tx timeout [ 1093.063458][T12606] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1093.250939][T12606] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1093.302196][T12738] netlink: set zone limit has 4 unknown bytes [ 1093.453710][T12606] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1093.584344][T12606] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1094.746691][ T7775] Bluetooth: hci4: command tx timeout [ 1094.746722][ T7775] Bluetooth: hci3: command tx timeout [ 1094.906740][ T5818] Bluetooth: hci5: command tx timeout [ 1095.191994][T12729] chnl_net:caif_netlink_parms(): no params data found [ 1095.259352][T12728] chnl_net:caif_netlink_parms(): no params data found [ 1095.459755][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 1095.938880][T12732] chnl_net:caif_netlink_parms(): no params data found [ 1096.826726][ T7775] Bluetooth: hci4: command tx timeout [ 1096.826772][ T5818] Bluetooth: hci3: command tx timeout [ 1096.986831][ T5818] Bluetooth: hci5: command tx timeout [ 1097.477255][T12793] wg1: entered promiscuous mode [ 1097.477282][T12793] wg1: entered allmulticast mode [ 1097.587548][T12797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'. [ 1097.708806][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.708933][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.709092][T12729] bridge_slave_0: entered allmulticast mode [ 1097.710601][T12729] bridge_slave_0: entered promiscuous mode [ 1097.903202][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.903337][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.903566][T12729] bridge_slave_1: entered allmulticast mode [ 1097.933421][T12729] bridge_slave_1: entered promiscuous mode [ 1097.935335][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.935456][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.935638][T12728] bridge_slave_0: entered allmulticast mode [ 1097.947476][T12728] bridge_slave_0: entered promiscuous mode [ 1098.045872][T12744] udevd[12744]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1098.072463][T12808] netlink: 'syz.1.1415': attribute type 10 has an invalid length. [ 1098.412407][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.412494][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.412667][T12728] bridge_slave_1: entered allmulticast mode [ 1098.414277][T12728] bridge_slave_1: entered promiscuous mode [ 1098.721532][T12729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.764725][T12812] netlink: 'syz.1.1417': attribute type 10 has an invalid length. [ 1099.033272][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.033430][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.033575][T12732] bridge_slave_0: entered allmulticast mode [ 1099.035460][T12732] bridge_slave_0: entered promiscuous mode [ 1099.040954][T12729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.113486][T12728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.188127][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.188526][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.188713][T12732] bridge_slave_1: entered allmulticast mode [ 1099.191354][T12732] bridge_slave_1: entered promiscuous mode [ 1099.223866][T12728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.404579][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 1099.455017][T12729] team0: Port device team_slave_0 added [ 1099.631146][T12729] team0: Port device team_slave_1 added [ 1099.651047][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.666235][T12728] team0: Port device team_slave_0 added [ 1099.739433][T12827] netlink: set zone limit has 4 unknown bytes [ 1099.839439][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.841671][T12728] team0: Port device team_slave_1 added [ 1100.098523][T12729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.098536][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.098550][T12729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.281036][T12606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.438908][T12729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.438920][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.438935][T12729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.444414][T12732] team0: Port device team_slave_0 added [ 1100.445344][T12728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.445357][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.445383][T12728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.515287][T12732] team0: Port device team_slave_1 added [ 1100.548246][T12728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.548258][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.548272][T12728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.861946][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.861961][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.861980][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.003667][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.003678][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.003692][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.108279][T12729] hsr_slave_0: entered promiscuous mode [ 1101.109179][T12729] hsr_slave_1: entered promiscuous mode [ 1101.109735][T12729] debugfs: 'hsr0' already exists in 'hsr' [ 1101.109758][T12729] Cannot create hsr debugfs directory [ 1101.484512][T12728] hsr_slave_0: entered promiscuous mode [ 1101.485370][T12728] hsr_slave_1: entered promiscuous mode [ 1101.485903][T12728] debugfs: 'hsr0' already exists in 'hsr' [ 1101.485917][T12728] Cannot create hsr debugfs directory [ 1101.500962][T12606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.185198][T12732] hsr_slave_0: entered promiscuous mode [ 1102.186088][T12732] hsr_slave_1: entered promiscuous mode [ 1102.187224][T12732] debugfs: 'hsr0' already exists in 'hsr' [ 1102.187247][T12732] Cannot create hsr debugfs directory [ 1102.227598][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.227719][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.559281][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.559391][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.003716][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.231409][ T1483] bridge_slave_1: left allmulticast mode [ 1105.231429][ T1483] bridge_slave_1: left promiscuous mode [ 1105.231596][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.308426][ T1483] bridge_slave_0: left allmulticast mode [ 1105.308455][ T1483] bridge_slave_0: left promiscuous mode [ 1105.308704][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.369375][ T1483] bridge_slave_1: left allmulticast mode [ 1105.369395][ T1483] bridge_slave_1: left promiscuous mode [ 1105.369533][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.457412][ T1483] bridge_slave_0: left allmulticast mode [ 1105.457431][ T1483] bridge_slave_0: left promiscuous mode [ 1105.457607][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.558870][ T1483] bridge_slave_1: left allmulticast mode [ 1105.558891][ T1483] bridge_slave_1: left promiscuous mode [ 1105.559031][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.637542][ T1483] bridge_slave_0: left allmulticast mode [ 1105.637562][ T1483] bridge_slave_0: left promiscuous mode [ 1105.637712][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.557425][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.617206][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.648953][ T1483] bond0 (unregistering): Released all slaves [ 1109.237262][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.317251][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.338986][ T1483] bond0 (unregistering): Released all slaves [ 1110.967881][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.047311][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.108516][ T1483] bond0 (unregistering): Released all slaves [ 1111.642814][T12606] veth0_vlan: entered promiscuous mode [ 1111.826805][T12873] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1433'. [ 1111.926760][ T1483] hsr_slave_0: left promiscuous mode [ 1111.947512][ T1483] hsr_slave_1: left promiscuous mode [ 1111.948134][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.007264][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.166708][ T1483] hsr_slave_0: left promiscuous mode [ 1112.206671][ T1483] hsr_slave_1: left promiscuous mode [ 1112.207938][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.247774][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.386740][ T1483] hsr_slave_0: left promiscuous mode [ 1112.406705][ T1483] hsr_slave_1: left promiscuous mode [ 1112.407385][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.447343][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.737860][T12879] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1435'. [ 1113.499115][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1113.757135][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1115.962812][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.962875][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.847268][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1117.098504][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1119.907419][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 1120.067096][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 1122.132680][T12606] veth1_vlan: entered promiscuous mode [ 1122.211024][T12606] veth0_macvtap: entered promiscuous mode [ 1122.216060][T12606] veth1_macvtap: entered promiscuous mode [ 1122.256081][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.462230][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.476265][ T1545] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.539234][ T1377] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.539862][ T1377] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.539910][ T1377] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.989737][ T7379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.989759][ T7379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.197825][ T7373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.197846][ T7373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.598952][T12902] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1440'. [ 1123.742120][T12904] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1441'. [ 1123.781893][T12729] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1123.813840][T12729] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1123.905147][T12729] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1124.028420][T12729] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.237271][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1443'. [ 1124.264252][T12918] vlan2: entered promiscuous mode [ 1124.264273][T12918] bond0: entered promiscuous mode [ 1124.264285][T12918] bond_slave_0: entered promiscuous mode [ 1124.264497][T12918] bond_slave_1: entered promiscuous mode [ 1124.284761][T12915] netlink: 212336 bytes leftover after parsing attributes in process `syz.8.1443'. [ 1124.339392][T12918] netlink: 'syz.8.1443': attribute type 10 has an invalid length. [ 1124.421500][T12728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1124.533843][T12728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1124.571783][T12728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1124.645103][T12728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1125.017499][T12732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1125.127322][T12732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1125.192848][T12732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1125.225412][T12732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1125.363313][T12729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.558880][T12729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.618362][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.619828][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.677571][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.677692][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.681984][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.774125][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.842558][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.842652][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.894867][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.905398][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.905590][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.960429][T12953] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1448'. [ 1126.179030][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.314962][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1450'. [ 1126.522117][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.522892][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.617158][T12964] netlink: 'syz.8.1451': attribute type 10 has an invalid length. [ 1126.706718][T12964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.714210][T12964] team0: entered promiscuous mode [ 1126.714225][T12964] team_slave_0: entered promiscuous mode [ 1126.714360][T12964] team_slave_1: entered promiscuous mode [ 1126.715125][T12964] bond0: (slave team0): Enslaving as an active interface with an up link [ 1126.759807][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.759885][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.171032][T12729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.329901][T12728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.581670][T12728] veth0_vlan: entered promiscuous mode [ 1127.671022][T12728] veth1_vlan: entered promiscuous mode [ 1127.782177][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.823187][T12728] veth0_macvtap: entered promiscuous mode [ 1127.840439][T12728] veth1_macvtap: entered promiscuous mode [ 1127.925146][T12729] veth0_vlan: entered promiscuous mode [ 1128.017955][T12728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.022327][T12729] veth1_vlan: entered promiscuous mode [ 1128.049637][T12728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.085162][T12732] veth0_vlan: entered promiscuous mode [ 1128.085503][ T3607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.102069][ T3607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.105802][ T3607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.112738][ T3607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.174421][T12996] netlink: 'syz.8.1457': attribute type 1 has an invalid length. [ 1128.195226][T12732] veth1_vlan: entered promiscuous mode [ 1128.392771][T12729] veth0_macvtap: entered promiscuous mode [ 1128.455010][T12729] veth1_macvtap: entered promiscuous mode [ 1128.551259][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.551279][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.698845][T13004] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 1128.747831][T12729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.748463][T12732] veth0_macvtap: entered promiscuous mode [ 1128.780309][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.780323][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.782141][T12729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.783211][T12732] veth1_macvtap: entered promiscuous mode [ 1128.896955][ T3607] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.902063][ T3607] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.905106][ T3607] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.909504][ T3607] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.106233][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.175794][T13017] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 1129.218319][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.222381][T13017] bond0: (slave team0): Enslaving as an active interface with an up link [ 1129.259125][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.421984][ T7373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.422607][ T7373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.422631][ T7373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.422649][ T7373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.586290][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.586304][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.646684][T13026] netlink: 'syz.8.1465': attribute type 1 has an invalid length. [ 1129.775170][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 1129.846366][T13028] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1466'. [ 1129.879522][T13028] netlink: 'syz.2.1466': attribute type 10 has an invalid length. [ 1129.893250][T13031] vlan2: entered promiscuous mode [ 1129.893273][T13031] bond0: entered promiscuous mode [ 1129.893286][T13031] bond_slave_0: entered promiscuous mode [ 1129.893493][T13031] bond_slave_1: entered promiscuous mode [ 1129.893684][T13031] team0: entered promiscuous mode [ 1129.893696][T13031] team_slave_0: entered promiscuous mode [ 1129.893893][T13031] team_slave_1: entered promiscuous mode [ 1129.945794][ T440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.945814][ T440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.061905][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.061925][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.351512][T13040] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 1130.378365][ T1562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.378387][ T1562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.424685][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1469'. [ 1130.755469][T13050] veth0: entered promiscuous mode [ 1130.811762][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1470'. [ 1131.116486][T13048] veth0: left promiscuous mode [ 1131.200252][T13066] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1131.630410][T13075] netlink: 'syz.7.1478': attribute type 1 has an invalid length. [ 1132.433543][T13085] netlink: 'syz.8.1481': attribute type 1 has an invalid length. [ 1133.047533][T13102] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1487'. [ 1133.191068][T13106] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1133.398909][T13115] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1133.401088][T13115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.440055][T13116] netlink: 'syz.8.1492': attribute type 1 has an invalid length. [ 1133.484937][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1494'. [ 1133.724437][T13115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.289952][T13139] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1499'. [ 1134.413748][T13144] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1501'. [ 1134.530409][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1503'. [ 1134.565923][T13150] vlan2: entered promiscuous mode [ 1134.565947][T13150] bond0: entered promiscuous mode [ 1134.565958][T13150] bond_slave_0: entered promiscuous mode [ 1134.566169][T13150] bond_slave_1: entered promiscuous mode [ 1134.616658][T13150] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.1503'. [ 1134.686673][T13156] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 1135.221546][T13167] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1135.446351][T13177] __nla_validate_parse: 1 callbacks suppressed [ 1135.446372][T13177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1135.609206][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'. [ 1135.661786][T13181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1514'. [ 1135.717419][T13187] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1518'. [ 1135.731366][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1516'. [ 1135.768883][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 1135.821364][T13189] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1517'. [ 1135.900857][T13198] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 1135.940838][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 1136.099967][T13207] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 1136.340851][T13213] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1524'. [ 1137.057390][T13227] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1137.325606][T13242] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 1137.334511][T13239] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1137.343952][ T5804] IPVS: starting estimator thread 0... [ 1137.426773][T13245] IPVS: using max 15 ests per chain, 36000 per kthread [ 1137.458298][T13253] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1138.373725][T13290] vlan2: entered promiscuous mode [ 1138.373748][T13290] bond0: entered promiscuous mode [ 1138.373761][T13290] bond_slave_0: entered promiscuous mode [ 1138.374005][T13290] bond_slave_1: entered promiscuous mode [ 1138.882631][T12884] block nbd64: NBD_DISCONNECT [ 1139.295661][T12884] udevd[12884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1140.713124][T13365] __nla_validate_parse: 13 callbacks suppressed [ 1140.713144][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 1140.791578][T13366] netlink: 'syz.1.1579': attribute type 12 has an invalid length. [ 1141.067693][T13369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1580'. [ 1141.307094][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1581'. [ 1141.590290][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1583'. [ 1141.653313][T13384] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.1583'. [ 1141.660033][T13384] netlink: 'syz.7.1583': attribute type 10 has an invalid length. [ 1142.000739][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1588'. [ 1142.506387][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'. [ 1142.608565][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 1143.008384][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 1143.060713][T13429] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.1599'. [ 1143.063097][T13429] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 1144.326210][T13479] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1144.494173][T12884] udevd[12884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1144.528272][T13483] netlink: 'syz.2.1613': attribute type 13 has an invalid length. [ 1145.000758][T13499] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1145.059160][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.062745][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.652036][T13483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.650441][T13501] __nla_validate_parse: 5 callbacks suppressed [ 1146.650462][T13501] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1619'. [ 1146.650684][ T44] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.654188][ T44] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.654274][ T44] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.654311][ T44] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.869984][T13517] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1625'. [ 1147.919232][T13536] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1632'. [ 1148.392045][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1636'. [ 1148.436280][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 1148.758985][T13557] netlink: 'syz.7.1638': attribute type 12 has an invalid length. [ 1149.164692][T13568] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1643'. [ 1149.566813][T13578] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1647'. [ 1149.673951][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 1150.426795][ T5818] Bluetooth: hci5: command tx timeout [ 1151.212748][T13622] netlink: 'syz.1.1666': attribute type 10 has an invalid length. [ 1151.561778][T13640] netlink: 'syz.8.1674': attribute type 1 has an invalid length. [ 1152.380903][T13667] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1684'. [ 1153.040322][T13687] netlink: 'syz.7.1691': attribute type 1 has an invalid length. [ 1153.753540][T13710] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1696'. [ 1153.948722][T13716] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1154.310946][T13731] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1701'. [ 1154.472303][T13736] "syz.2.1702" (13736) uses obsolete ecb(arc4) skcipher [ 1154.519922][T13736] Bluetooth: MGMT ver 1.23 [ 1154.775317][T13753] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1711'. [ 1155.827051][T13763] netlink: 'syz.8.1714': attribute type 12 has an invalid length. [ 1155.879288][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1155.932140][T13778] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1155.933601][T13778] netlink: 'syz.7.1718': attribute type 10 has an invalid length. [ 1156.381584][T13789] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1156.458964][T13793] netlink: 'syz.3.1724': attribute type 13 has an invalid length. [ 1156.729938][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 1157.071849][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.073003][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.607324][T13793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.615135][T13793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.707619][T13809] netlink: 'syz.1.1719': attribute type 5 has an invalid length. [ 1158.777578][T13822] netlink: 'syz.7.1732': attribute type 12 has an invalid length. [ 1158.850048][ T1545] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.337597][ T1545] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.338215][ T1545] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.338258][ T1545] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.463040][T13850] tipc: Started in network mode [ 1159.463073][T13850] tipc: Node identity 4241a014b9de, cluster identity 4711 [ 1159.463790][T13850] tipc: Enabled bearer , priority 0 [ 1159.464969][T13850] syzkaller0: entered promiscuous mode [ 1159.464992][T13850] syzkaller0: entered allmulticast mode [ 1159.574334][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1159.929898][T13855] tipc: Resetting bearer [ 1159.934001][T13864] netlink: 'syz.3.1745': attribute type 12 has an invalid length. [ 1159.979086][T13849] tipc: Resetting bearer [ 1160.233544][T13849] tipc: Disabling bearer [ 1160.635435][T13887] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1752'. [ 1160.830169][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 1161.084537][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1761'. [ 1161.324284][T13918] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 1161.763962][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 1161.815620][T13931] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 1161.820298][T13933] vlan0: entered promiscuous mode [ 1161.820320][T13933] bond0: entered promiscuous mode [ 1161.820333][T13933] bond_slave_0: entered promiscuous mode [ 1161.822947][T13933] bond_slave_1: entered promiscuous mode [ 1161.823146][T13933] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1162.051951][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1773'. [ 1162.159167][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 1163.673406][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1783'. [ 1163.693660][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1785'. [ 1163.906850][T13987] netlink: 'syz.8.1787': attribute type 1 has an invalid length. [ 1164.310714][T13995] syzkaller0: entered promiscuous mode [ 1164.310732][T13995] syzkaller0: entered allmulticast mode [ 1164.377793][T13993] tipc: Started in network mode [ 1164.377821][T13993] tipc: Node identity 761a34f50f8c, cluster identity 4711 [ 1164.378214][T13993] tipc: Enabled bearer , priority 0 [ 1164.436980][T13991] tipc: Resetting bearer [ 1164.558959][T13991] tipc: Disabling bearer [ 1165.117519][T14027] netlink: 'syz.7.1799': attribute type 1 has an invalid length. [ 1165.536156][T14043] ip6gretap0: entered promiscuous mode [ 1165.540768][T14043] vlan1: entered promiscuous mode [ 1165.561496][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 1165.613412][T14038] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1804'. [ 1165.614655][T14038] netlink: 'syz.3.1804': attribute type 10 has an invalid length. [ 1166.313283][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1166.313334][T14070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1166.473966][T14072] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1816'. [ 1166.507909][T14072] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1816'. [ 1166.732981][T14079] netlink: 'syz.1.1817': attribute type 12 has an invalid length. [ 1166.813092][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1820'. [ 1166.832000][T14087] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1820'. [ 1166.834700][T14087] netlink: 'syz.8.1820': attribute type 10 has an invalid length. [ 1168.326376][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1833'. [ 1168.352966][T14127] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1833'. [ 1168.354157][T14127] netlink: 'syz.8.1833': attribute type 10 has an invalid length. [ 1169.073203][T14139] netlink: 'syz.7.1839': attribute type 12 has an invalid length. [ 1169.491687][T14141] netlink: 'syz.2.1840': attribute type 12 has an invalid length. [ 1170.168647][ T31] IPVS: starting estimator thread 0... [ 1170.195267][T14148] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1170.269169][T14153] IPVS: using max 15 ests per chain, 36000 per kthread [ 1170.462074][T14162] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 1170.514238][T14169] netlink: 'syz.7.1851': attribute type 1 has an invalid length. [ 1170.693647][T14177] netlink: 'syz.8.1852': attribute type 1 has an invalid length. [ 1171.457675][T14204] __nla_validate_parse: 2 callbacks suppressed [ 1171.457705][T14204] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1861'. [ 1171.533523][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 1171.849223][T14221] netlink: 'syz.7.1865': attribute type 1 has an invalid length. [ 1172.121731][T14231] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1172.123348][T14231] netlink: 'syz.2.1869': attribute type 13 has an invalid length. [ 1172.569736][T14249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1875'. [ 1172.820532][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 1173.687643][T14259] netlink: 'syz.8.1878': attribute type 12 has an invalid length. [ 1173.687669][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1878'. [ 1173.876329][T14272] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1173.975044][T14276] netlink: 'syz.8.1883': attribute type 13 has an invalid length. [ 1174.549845][T14276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.551033][T14276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.005566][T14276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.016358][T14276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.053906][ T1377] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.066987][ T1377] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.158954][ T1377] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.170217][ T1377] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.211480][T14303] netlink: 'syz.7.1891': attribute type 1 has an invalid length. [ 1176.432924][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1176.857188][T14329] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 1177.012770][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1899'. [ 1177.397720][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.397791][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.405695][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1901'. [ 1177.633633][T14354] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1178.059444][T14359] tipc: Started in network mode [ 1178.059476][T14359] tipc: Node identity 721a5e230764, cluster identity 4711 [ 1178.059675][T14359] tipc: Enabled bearer , priority 0 [ 1178.060701][T14359] syzkaller0: entered promiscuous mode [ 1178.060725][T14359] syzkaller0: entered allmulticast mode [ 1178.151359][T14359] tipc: Resetting bearer [ 1178.357024][T14357] tipc: Resetting bearer [ 1178.508946][T14357] tipc: Disabling bearer [ 1178.642442][T14370] ip6gretap0: entered promiscuous mode [ 1178.642528][T14370] vlan3: entered promiscuous mode [ 1178.799579][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'. [ 1179.451534][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 1180.262157][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 1180.756437][T14426] vlan3: entered promiscuous mode [ 1181.260435][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 1181.269020][T14451] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1936'. [ 1181.286184][T14451] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 1181.433715][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 1183.670239][T11792] IPVS: starting estimator thread 0... [ 1183.756858][T14521] IPVS: using max 11 ests per chain, 26400 per kthread [ 1183.849436][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1965'. [ 1184.848524][T14547] tipc: Enabled bearer , priority 0 [ 1184.850015][T14547] syzkaller0: entered promiscuous mode [ 1184.850037][T14547] syzkaller0: entered allmulticast mode [ 1184.937268][T14547] tipc: Resetting bearer [ 1185.005514][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 1185.019509][T14546] tipc: Resetting bearer [ 1185.187184][T14546] tipc: Disabling bearer [ 1185.352916][T14557] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 1185.735734][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1186.305031][T14584] pim6reg: entered allmulticast mode [ 1186.408608][T14580] pim6reg: left allmulticast mode [ 1186.692644][T14590] netlink: 'syz.2.1986': attribute type 12 has an invalid length. [ 1187.182854][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 1187.321014][T14609] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1993'. [ 1187.446647][T14604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.624784][T14634] tipc: Started in network mode [ 1188.624814][T14634] tipc: Node identity cab17c55003a, cluster identity 4711 [ 1188.625193][T14634] tipc: Enabled bearer , priority 0 [ 1188.918416][T14635] syzkaller0: entered promiscuous mode [ 1188.918443][T14635] syzkaller0: entered allmulticast mode [ 1188.939855][T14645] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2006'. [ 1188.981517][T14628] tipc: Resetting bearer [ 1189.077494][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2007'. [ 1189.079521][T14628] tipc: Disabling bearer [ 1189.735597][T14663] veth0: entered promiscuous mode [ 1189.828962][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 1189.910524][T12883] udevd[12883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1190.175647][T14661] veth0: left promiscuous mode [ 1190.496742][T14688] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2018'. [ 1190.985269][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1191.320779][T12884] block nbd64: NBD_DISCONNECT [ 1191.814659][T12884] udevd[12884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1192.036994][T14719] veth0: entered promiscuous mode [ 1192.038857][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 1192.070317][T14717] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1192.070338][T14717] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14717, name: syz.2.2026 [ 1192.070356][T14717] preempt_count: 2, expected: 0 [ 1192.070366][T14717] RCU nest depth: 1, expected: 1 [ 1192.070382][T14717] 3 locks held by syz.2.2026/14717: [ 1192.070401][T14717] #0: ffff8880363198d8 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xd40 [ 1192.070619][T14717] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 1192.070705][T14717] #2: ffff8880b893fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 1192.070790][T14717] Preemption disabled at: [ 1192.070796][T14717] [] __slab_alloc+0xea/0x1f0 [ 1192.070843][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.2.2026 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1192.070870][T14717] Tainted: [L]=SOFTLOCKUP [ 1192.070878][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1192.070894][T14717] Call Trace: [ 1192.070904][T14717] [ 1192.070914][T14717] dump_stack_lvl+0xe8/0x150 [ 1192.070972][T14717] __might_resched+0x32a/0x480 [ 1192.071010][T14717] ? __slab_alloc+0xea/0x1f0 [ 1192.071034][T14717] rt_spin_lock+0xc7/0x3e0 [ 1192.071169][T14717] ? __pfx_rt_spin_lock+0x10/0x10 [ 1192.071194][T14717] ? __lock_acquire+0x6b6/0x2cf0 [ 1192.071227][T14717] ? __lock_acquire+0x6b6/0x2cf0 [ 1192.071254][T14717] ___slab_alloc+0x12f/0x13e0 [ 1192.071279][T14717] ? unwind_next_frame+0xa5/0x23d0 [ 1192.071314][T14717] ? lock_acquire+0x107/0x340 [ 1192.071336][T14717] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1192.071377][T14717] __slab_alloc+0xc6/0x1f0 [ 1192.071396][T14717] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1192.071427][T14717] kmalloc_nolock_noprof+0x1be/0x440 [ 1192.071454][T14717] ? __bpf_stream_push_str+0xa8/0x2b0 [ 1192.071486][T14717] __bpf_stream_push_str+0xa8/0x2b0 [ 1192.071512][T14717] ? __asan_memcpy+0x40/0x70 [ 1192.071547][T14717] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1192.071587][T14717] bpf_stream_stage_printk+0x14e/0x1c0 [ 1192.071613][T14717] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1192.071636][T14717] ? arch_bpf_stack_walk+0x112/0x170 [ 1192.071667][T14717] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 1192.071713][T14717] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1192.071744][T14717] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1192.071771][T14717] ? irqentry_exit+0x5e8/0x670 [ 1192.071799][T14717] ? trace_irq_disable+0x37/0x100 [ 1192.071823][T14717] ? read_tsc+0x9/0x20 [ 1192.071856][T14717] bpf_check_timed_may_goto+0xaa/0xb0 [ 1192.071887][T14717] arch_bpf_timed_may_goto+0x21/0x40 [ 1192.071912][T14717] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1192.071937][T14717] bpf_trace_run9+0x2de/0x510 [ 1192.071957][T14717] ? kasan_save_track+0x3e/0x80 [ 1192.071991][T14717] ? kmalloc_reserve+0xbd/0x290 [ 1192.072085][T14717] ? __alloc_skb+0x204/0x3a0 [ 1192.072104][T14717] ? bpf_trace_run9+0x1ec/0x510 [ 1192.072126][T14717] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1192.072144][T14717] ? __x64_sys_connect+0x7a/0x90 [ 1192.072217][T14717] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1192.072276][T14717] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1192.072308][T14717] ? kmalloc_reserve+0xbd/0x290 [ 1192.072328][T14717] ? kmem_cache_alloc_node_noprof+0x292/0x6f0 [ 1192.072362][T14717] ? sk_send_sigurg+0x111/0x2e0 [ 1192.072417][T14717] ? __alloc_skb+0x150/0x3a0 [ 1192.072438][T14717] ? __alloc_skb+0x27e/0x3a0 [ 1192.072460][T14717] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1192.072486][T14717] __traceiter_virtio_transport_alloc_pkt+0xc1/0x120 [ 1192.072519][T14717] virtio_transport_alloc_skb+0x10af/0x1110 [ 1192.072563][T14717] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1192.072586][T14717] ? __local_bh_enable+0x1e2/0x2f0 [ 1192.072618][T14717] virtio_transport_send_pkt_info+0x694/0x10b0 [ 1192.072660][T14717] virtio_transport_connect+0xa7/0x100 [ 1192.072681][T14717] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1192.072706][T14717] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1192.072733][T14717] ? vsock_assign_transport+0x672/0x7f0 [ 1192.072765][T14717] vsock_connect+0xaca/0xd40 [ 1192.072795][T14717] ? __might_fault+0xb0/0x130 [ 1192.072823][T14717] ? __might_fault+0xb0/0x130 [ 1192.072847][T14717] ? __pfx_vsock_connect+0x10/0x10 [ 1192.072873][T14717] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1192.072899][T14717] ? bpf_lsm_socket_connect+0x9/0x20 [ 1192.072921][T14717] __sys_connect+0x323/0x450 [ 1192.072941][T14717] ? __pfx___sys_connect+0x10/0x10 [ 1192.072978][T14717] ? rcu_is_watching+0x15/0xb0 [ 1192.073013][T14717] __x64_sys_connect+0x7a/0x90 [ 1192.073032][T14717] do_syscall_64+0xec/0xf80 [ 1192.073087][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.073114][T14717] ? trace_irq_disable+0x37/0x100 [ 1192.073130][T14717] ? clear_bhb_loop+0x60/0xb0 [ 1192.073150][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.073165][T14717] RIP: 0033:0x7fe49452f749 [ 1192.073181][T14717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.073195][T14717] RSP: 002b:00007fe492796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1192.073213][T14717] RAX: ffffffffffffffda RBX: 00007fe494785fa0 RCX: 00007fe49452f749 [ 1192.073226][T14717] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000000c [ 1192.073237][T14717] RBP: 00007fe4945b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1192.073248][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.073257][T14717] R13: 00007fe494786038 R14: 00007fe494785fa0 R15: 00007ffc70e38b18 [ 1192.073285][T14717] [ 1192.916921][T14718] veth0: left promiscuous mode [ 1194.826636][ T7775] Bluetooth: hci1: command 0x0406 tx timeout