last executing test programs: 28m37.003175032s ago: executing program 32 (id=646): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000180)='(', 0x1, 0x5}]) (fail_nth: 2) 22m18.426972941s ago: executing program 3 (id=3333): openat$tun(0xffffffffffffff9c, 0x0, 0x4180, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000040), 0x0) 22m18.250412689s ago: executing program 3 (id=3335): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) inotify_init() 22m18.069528509s ago: executing program 3 (id=3336): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a40ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 22m17.814420354s ago: executing program 3 (id=3337): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 22m17.491796674s ago: executing program 3 (id=3338): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) statfs(0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000001) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 22m11.716058134s ago: executing program 3 (id=3363): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/204, 0xcc, 0x100000000000000, 0x0) 22m11.489457626s ago: executing program 33 (id=3363): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/204, 0xcc, 0x100000000000000, 0x0) 21m44.559774537s ago: executing program 4 (id=3519): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20044081}, 0x4044) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) 21m44.478610415s ago: executing program 4 (id=3520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r1 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000002c0), 0x0) 21m44.23521675s ago: executing program 4 (id=3523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setreuid(0xee01, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000780), 0x3ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r0}, 0x38) 21m42.925407284s ago: executing program 4 (id=3527): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 21m42.618883032s ago: executing program 4 (id=3533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$nci(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) 21m42.583342975s ago: executing program 6 (id=3364): openat$tun(0xffffffffffffff9c, 0x0, 0x4180, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000040), 0x0) 21m42.400033746s ago: executing program 6 (id=3537): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21m42.275686843s ago: executing program 6 (id=3538): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) close(r0) 21m40.481455263s ago: executing program 6 (id=3542): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 21m40.389077401s ago: executing program 6 (id=3543): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 21m40.007315253s ago: executing program 4 (id=3545): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[8V\x89\xeb}\f\xc1\x9f\xcfp\x8a\x01\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\x900\x10\xaf\x1f\x02Bl\x93\xcb\xf83S\xaf`]\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xbb\x13\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v', &(0x7f0000000640)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9ew\xc2A\xd6WP@O<\xf4s\x85~X\x85\xdc\xa3\xad\xe5`\xfd\x03p\xaeS^\x04\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc87\xaaV\xd88\x93\xd3\x85\x9a?\x8fY\xd1\x1a@;\x1a=@\x7f.7\x00\xc7\xf0\x97\xfe\xa1\xba\x80\xbb\xdas\x1c\x10\xac\xbf\x05\x9f\x86\v\x17\x82;s>#\xa7\xdb\xca\xabY\x87$Ug\xf0\x91\x86\x19\xd8\x886\xd0Y\xbf~\xf2\xd9@\x0f\xc5\xb4\xdb\x15\xa7\xee\xc3H<(\x95\xaa1y\xbf\x10\x1fq**', 0x0) close(r3) 21m39.725286546s ago: executing program 34 (id=3545): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[8V\x89\xeb}\f\xc1\x9f\xcfp\x8a\x01\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\x900\x10\xaf\x1f\x02Bl\x93\xcb\xf83S\xaf`]\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xbb\x13\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v', &(0x7f0000000640)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9ew\xc2A\xd6WP@O<\xf4s\x85~X\x85\xdc\xa3\xad\xe5`\xfd\x03p\xaeS^\x04\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc87\xaaV\xd88\x93\xd3\x85\x9a?\x8fY\xd1\x1a@;\x1a=@\x7f.7\x00\xc7\xf0\x97\xfe\xa1\xba\x80\xbb\xdas\x1c\x10\xac\xbf\x05\x9f\x86\v\x17\x82;s>#\xa7\xdb\xca\xabY\x87$Ug\xf0\x91\x86\x19\xd8\x886\xd0Y\xbf~\xf2\xd9@\x0f\xc5\xb4\xdb\x15\xa7\xee\xc3H<(\x95\xaa1y\xbf\x10\x1fq**', 0x0) close(r3) 21m38.294152883s ago: executing program 1 (id=3549): r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) close(0x3) r3 = syz_pidfd_open(r0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 21m38.236825171s ago: executing program 1 (id=3550): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="23022abd7000fbdbdf25030000002900070073797374656d5f753a6f626a6563345f723a7574656d70746572"], 0x64}, 0x1, 0x0, 0x0, 0x20044081}, 0x4044) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) 21m38.192986822s ago: executing program 1 (id=3551): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@empty, @remote, @remote, 0x6, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r2}) 21m38.139151628s ago: executing program 1 (id=3552): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 21m38.067161251s ago: executing program 1 (id=3553): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0xee01, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 21m37.87185896s ago: executing program 6 (id=3554): socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_complete(0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES16=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = inotify_init() r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 21m37.699894407s ago: executing program 35 (id=3554): socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_complete(0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES16=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = inotify_init() r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 21m37.06133872s ago: executing program 1 (id=3560): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 21m36.766674132s ago: executing program 36 (id=3560): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 20m18.411642976s ago: executing program 5 (id=3695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 20m18.290431892s ago: executing program 5 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014001540fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 20m18.179978932s ago: executing program 5 (id=3697): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20m17.998627172s ago: executing program 5 (id=3698): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 20m8.551491843s ago: executing program 5 (id=3699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 20m6.771683911s ago: executing program 5 (id=3700): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x898, 0x30, 0x12f, 0x20, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0x1, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffc, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x26, 0x9d, 0xf, 0x7, 0x6b3, 0x1, 0x1, 0x3, 0x1000000, 0x1, 0xdf0, 0x18000, 0xf, 0x2, 0x4, 0x7, 0x1, 0xfffffff8, 0x5, 0xfffffffb, 0x6, 0x4, 0x3, 0x2b2, 0x9, 0x6, 0x400, 0x5, 0x6, 0x3, 0x0, 0x8, 0x0, 0x100, 0x9, 0x9, 0x3, 0x6, 0x1, 0x9, 0x4, 0x6, 0x10001, 0xba3, 0xc88, 0xfffffff4, 0x5, 0xb, 0x5a, 0x8000, 0x7, 0x7, 0x7, 0x5, 0x7, 0x4fffdf8d, 0x0, 0x20, 0x8001, 0x2, 0x7, 0x4, 0x5, 0x0, 0x10000, 0x8, 0x2, 0x80000000, 0x10, 0x1000, 0x4, 0x70, 0x23, 0x1, 0x9, 0x4, 0x400, 0x6, 0x0, 0x34, 0x1bac, 0xff, 0x10, 0x2be48b4a, 0x91df, 0x5, 0x1b, 0x3, 0x6, 0x10000, 0x7, 0x800, 0x1, 0x3, 0x0, 0x800, 0x0, 0x8000, 0x3, 0xfffffffa, 0x1000, 0xffff, 0x44, 0x2, 0x2, 0x5, 0x9, 0x4, 0x5, 0x10001, 0xc, 0x1, 0xffffffff, 0x1af, 0x4, 0x9, 0xf82, 0x3, 0x2, 0x7, 0x10000, 0x4, 0x4, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0x3, 0x0, 0x2, 0x6, 0xcc7b, 0x100, 0x7, 0x0, 0x7fff, 0x2, 0x4, 0x11080000, 0x5, 0x8a, 0x1, 0x64, 0x43, 0x4, 0x5, 0x8000, 0x2, 0x3, 0x9, 0x7fffffff, 0x0, 0x35bc, 0x9, 0x0, 0x10001, 0x0, 0xd, 0x8, 0x0, 0x9, 0x4, 0x6, 0xc7, 0xb8b7, 0x5, 0xfff, 0x5, 0x2, 0x8001, 0xfff, 0x8, 0x1, 0x4, 0x9, 0x8, 0x4, 0x49ab, 0xffff, 0x5, 0x7fff, 0xfffffffc, 0x1, 0x9, 0x4, 0x6, 0x8d7, 0x5, 0x1, 0x4, 0xff9e, 0x0, 0x8, 0x8, 0xff, 0x6, 0x6, 0x8, 0x3, 0x10001, 0x7fffffff, 0x40, 0x2, 0x5, 0x4, 0x200, 0x10, 0xfffffffb, 0xc, 0x4, 0x1d66, 0x1, 0x101, 0xcb8, 0x4, 0x0, 0x2, 0x80, 0xc8, 0x100, 0x98600000, 0x5, 0x4, 0x71cb, 0x4, 0x4, 0xffff, 0x0, 0xc984, 0xd, 0x1, 0x1, 0x3, 0x3ff, 0xffffffff, 0x6, 0x401, 0x100, 0x9, 0x7, 0xfd2b, 0x8, 0x4, 0xb, 0x7, 0x2, 0x7, 0xd6, 0x8bb, 0x0, 0xffff0001, 0x3, 0x4c0a, 0x59]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x10) 19m51.452085543s ago: executing program 37 (id=3700): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x898, 0x30, 0x12f, 0x20, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0x1, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffc, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x26, 0x9d, 0xf, 0x7, 0x6b3, 0x1, 0x1, 0x3, 0x1000000, 0x1, 0xdf0, 0x18000, 0xf, 0x2, 0x4, 0x7, 0x1, 0xfffffff8, 0x5, 0xfffffffb, 0x6, 0x4, 0x3, 0x2b2, 0x9, 0x6, 0x400, 0x5, 0x6, 0x3, 0x0, 0x8, 0x0, 0x100, 0x9, 0x9, 0x3, 0x6, 0x1, 0x9, 0x4, 0x6, 0x10001, 0xba3, 0xc88, 0xfffffff4, 0x5, 0xb, 0x5a, 0x8000, 0x7, 0x7, 0x7, 0x5, 0x7, 0x4fffdf8d, 0x0, 0x20, 0x8001, 0x2, 0x7, 0x4, 0x5, 0x0, 0x10000, 0x8, 0x2, 0x80000000, 0x10, 0x1000, 0x4, 0x70, 0x23, 0x1, 0x9, 0x4, 0x400, 0x6, 0x0, 0x34, 0x1bac, 0xff, 0x10, 0x2be48b4a, 0x91df, 0x5, 0x1b, 0x3, 0x6, 0x10000, 0x7, 0x800, 0x1, 0x3, 0x0, 0x800, 0x0, 0x8000, 0x3, 0xfffffffa, 0x1000, 0xffff, 0x44, 0x2, 0x2, 0x5, 0x9, 0x4, 0x5, 0x10001, 0xc, 0x1, 0xffffffff, 0x1af, 0x4, 0x9, 0xf82, 0x3, 0x2, 0x7, 0x10000, 0x4, 0x4, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0x3, 0x0, 0x2, 0x6, 0xcc7b, 0x100, 0x7, 0x0, 0x7fff, 0x2, 0x4, 0x11080000, 0x5, 0x8a, 0x1, 0x64, 0x43, 0x4, 0x5, 0x8000, 0x2, 0x3, 0x9, 0x7fffffff, 0x0, 0x35bc, 0x9, 0x0, 0x10001, 0x0, 0xd, 0x8, 0x0, 0x9, 0x4, 0x6, 0xc7, 0xb8b7, 0x5, 0xfff, 0x5, 0x2, 0x8001, 0xfff, 0x8, 0x1, 0x4, 0x9, 0x8, 0x4, 0x49ab, 0xffff, 0x5, 0x7fff, 0xfffffffc, 0x1, 0x9, 0x4, 0x6, 0x8d7, 0x5, 0x1, 0x4, 0xff9e, 0x0, 0x8, 0x8, 0xff, 0x6, 0x6, 0x8, 0x3, 0x10001, 0x7fffffff, 0x40, 0x2, 0x5, 0x4, 0x200, 0x10, 0xfffffffb, 0xc, 0x4, 0x1d66, 0x1, 0x101, 0xcb8, 0x4, 0x0, 0x2, 0x80, 0xc8, 0x100, 0x98600000, 0x5, 0x4, 0x71cb, 0x4, 0x4, 0xffff, 0x0, 0xc984, 0xd, 0x1, 0x1, 0x3, 0x3ff, 0xffffffff, 0x6, 0x401, 0x100, 0x9, 0x7, 0xfd2b, 0x8, 0x4, 0xb, 0x7, 0x2, 0x7, 0xd6, 0x8bb, 0x0, 0xffff0001, 0x3, 0x4c0a, 0x59]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x10) 11m14.270124753s ago: executing program 9 (id=6192): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x9, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x121401, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x5, 0x3, {0xffffffffffffffff}, {0xee01}, 0x862, 0x9}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x436f, 0x3, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11m10.790996042s ago: executing program 9 (id=6208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 11m10.679338586s ago: executing program 9 (id=6209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x2, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x1}}, 0x30) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x84, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) 11m10.606031408s ago: executing program 9 (id=6210): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a937", 0x9a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22a", 0x14}, {&(0x7f0000000cc0)="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", 0x1a2}], 0x2}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m8.979865983s ago: executing program 9 (id=6218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dbdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$nci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() r3 = gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) ppoll(&(0x7f0000000100)=[{r5, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) 11m5.767160758s ago: executing program 9 (id=6237): socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 10m50.29189603s ago: executing program 38 (id=6237): socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 10m46.88955548s ago: executing program 8 (id=6313): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) 10m44.892926507s ago: executing program 8 (id=6316): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r3, r4+10000000}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'ip6erspan0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x88200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000c80)={{0x8, 0x6, 0x1, 0xffffff63, 'syz1\x00', 0x6}, 0x0, [0x8, 0x3, 0x7ff, 0x8001, 0x1, 0x5, 0x9, 0x3, 0x7, 0x3, 0xffff, 0x5, 0x4, 0x6, 0x4, 0x8000000000000001, 0x2, 0x260000000000000, 0x2, 0x1984, 0x4, 0x0, 0x5, 0x4, 0x4, 0x6, 0x100, 0x41, 0x8, 0x3, 0x7fffffffffffffff, 0x6, 0x3, 0x77f, 0x4, 0x401, 0x8, 0x6, 0x100, 0x4d2e, 0x34b7062480000, 0x101, 0x6, 0x8, 0xf51, 0xffffffffffffffff, 0x8001, 0x1, 0x8000000000000001, 0x5, 0x5, 0x5, 0x1, 0x1, 0x400, 0x9, 0x86e, 0x3, 0x0, 0x6, 0x4, 0x8000000000000000, 0x80c7, 0x27, 0x0, 0x5, 0xffffffff, 0x8000, 0xc2d0, 0x100000001, 0x9, 0x8001, 0x5, 0x1, 0x0, 0x9, 0x6, 0x3, 0xfe, 0x1, 0x2, 0x2e, 0x2, 0x2, 0x400000000, 0x6, 0x7, 0x9, 0x1ff, 0x5, 0x0, 0x4, 0x4000000000003, 0xfffffffffffffffa, 0x5, 0x1, 0x8000000000000eb0, 0x2, 0x2, 0x7, 0x9, 0x4, 0x481, 0x9, 0xfffffffffffffffe, 0x5, 0xf1, 0xff, 0x1, 0x4, 0xa, 0xffffffff, 0x4ff, 0x8, 0x6f, 0x4, 0xa, 0x0, 0xb, 0x1, 0x1945, 0x4601c2c5, 0x92, 0x6, 0xfffffffffffffffa, 0x7, 0x9, 0x8000]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10m43.731779716s ago: executing program 8 (id=6318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x20}}, 0x0) 10m43.562704114s ago: executing program 8 (id=6320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delchain={0x50, 0x64, 0xf31, 0x3, 0x4, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}]}}]}, 0x50}}, 0x0) 10m43.268512449s ago: executing program 8 (id=6321): mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000dc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x48240, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b907ef19edfff00702000ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x7, 0x4) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 10m40.535953033s ago: executing program 8 (id=6327): socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 10m25.346891915s ago: executing program 39 (id=6327): socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 6m28.245360152s ago: executing program 2 (id=6958): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x12, 0x6}}, 0x1c}}, 0x10) 6m26.095876335s ago: executing program 2 (id=6963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000040850000fb22000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) fcntl$setlease(r4, 0x400, 0x0) fcntl$getflags(r4, 0x401) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) getrusage(0xffffffffffffffff, &(0x7f0000000400)) socket(0x2a, 0x2, 0x0) 6m25.099489083s ago: executing program 2 (id=6968): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x2) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) 6m24.968350907s ago: executing program 2 (id=6969): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m24.639179657s ago: executing program 2 (id=6972): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m22.019651408s ago: executing program 2 (id=6985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4002) 6m21.791614134s ago: executing program 40 (id=6985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4002) 7.628164533s ago: executing program 0 (id=7705): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000b044a628b8edda1c0e3146f2bbd"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setns(0xffffffffffffffff, 0x24020000) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xb7b8, 0x1, 0xc, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) 7.278394027s ago: executing program 0 (id=7707): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 5.543938302s ago: executing program 0 (id=7709): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3.437466047s ago: executing program 0 (id=7713): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$packet(0x11, 0x3, 0x300) 2.102210391s ago: executing program 7 (id=7715): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@delqdisc={0x48, 0x25, 0x100, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x7, 0xf}, {0x7, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x3, 0x36}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b89a3c43664e86274914cecd463281bd8a0c3cb6c547e63ed3a05ae071870633b812fee6376c60b3e6fbeca6473f729caff2341380769f4fde5e8de9733096f8cbbea16921ac262f025b02637b324763", 0x7d}], 0x1, 0x0, 0x51, 0x5865}, 0x4008000) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x24100, 0x12, 0x1a}, 0x18) lseek(r6, 0x401, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000640)="ad18", 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000140)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.75912994s ago: executing program 0 (id=7716): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 844.628084ms ago: executing program 7 (id=7717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r0, 0x0, 0x0}, 0x20) 732.759471ms ago: executing program 7 (id=7718): openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x7c}}, 0x940) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 375.346784ms ago: executing program 7 (id=7719): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 134.686879ms ago: executing program 0 (id=7720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 107.288317ms ago: executing program 7 (id=7721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 0s ago: executing program 7 (id=7722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f21115ab39bdf2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3400ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x2f, 0x4fcb6233, {0x4000000000000000, 0xfffffff7, 0x0, '\x00', {0xa150, 0x0, 0x8000000000000000, 0x906, 0x0, 0x0, 0xc000, '\x00', 0x6, 0x81, 0x81, 0x3, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x4}}}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32, @ANYBLOB="4400028033000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) kernel console output (not intermixed with test programs): 03 length: 249 > 9 [ 1670.974608][T17081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1670.977319][T17081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1670.978717][T17081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1671.035344][T25223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1671.532990][ T5937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.585516][T24958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.585533][T24958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.585558][T24958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.593223][T24958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.593275][T24958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.593357][T24958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.873071][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1672.059461][T25243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6997'. [ 1673.175763][T24509] Bluetooth: hci1: command tx timeout [ 1673.233651][ T5937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.500891][T24509] Bluetooth: hci0: command tx timeout [ 1673.762865][T24958] hsr_slave_0: entered promiscuous mode [ 1673.764409][T24958] hsr_slave_1: entered promiscuous mode [ 1673.765400][T24958] debugfs: 'hsr0' already exists in 'hsr' [ 1673.765428][T24958] Cannot create hsr debugfs directory [ 1674.502183][T25252] 9p: Bad value for 'rfdno' [ 1675.164654][ T5937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.202792][T24509] Bluetooth: hci1: command tx timeout [ 1675.204435][T25203] lo speed is unknown, defaulting to 1000 [ 1675.532537][T24509] Bluetooth: hci0: command tx timeout [ 1675.780752][T25269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1675.858287][T25220] lo speed is unknown, defaulting to 1000 [ 1678.291463][T24509] Bluetooth: hci1: command tx timeout [ 1678.291505][T24509] Bluetooth: hci0: command tx timeout [ 1678.363909][T25280] ip6gre0: entered promiscuous mode [ 1678.380839][T25280] team0: Port device ip6gre0 added [ 1679.576280][ T5937] bridge_slave_1: left allmulticast mode [ 1679.576314][ T5937] bridge_slave_1: left promiscuous mode [ 1679.576590][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.934507][ T5937] bridge_slave_0: left allmulticast mode [ 1679.934541][ T5937] bridge_slave_0: left promiscuous mode [ 1680.881144][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.914015][T24509] Bluetooth: hci1: command tx timeout [ 1680.914069][T17081] Bluetooth: hci0: command tx timeout [ 1685.553441][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1686.654420][ T5937] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1691.223587][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1695.166006][ T5937] bond0 (unregistering): Released all slaves [ 1695.177814][ T5937] bond1 (unregistering): Released all slaves [ 1695.190096][ T5937] bond2 (unregistering): Released all slaves [ 1696.543190][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1696.633324][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.865965][ T5937] bond0 (unregistering): Released all slaves [ 1697.985145][T25398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1697.985259][T25398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1697.985273][T25398] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.270413][ T5937] tipc: Disabling bearer [ 1699.292647][ T5937] tipc: Left network mode [ 1700.850120][T25203] chnl_net:caif_netlink_parms(): no params data found [ 1700.858646][T24958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1701.126120][T24958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1701.278896][T25420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1702.186347][T25430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7053'. [ 1702.186463][T25430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1702.494690][T25436] overlayfs: failed to clone upperpath [ 1702.564148][T24958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1703.027953][T24958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1703.099520][T25220] chnl_net:caif_netlink_parms(): no params data found [ 1704.309811][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1704.309934][T25460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1704.503027][T25470] netlink: 'syz.7.7065': attribute type 10 has an invalid length. [ 1704.503051][T25470] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7065'. [ 1704.555318][T25471] netlink: 'syz.7.7065': attribute type 10 has an invalid length. [ 1704.628627][T25470] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1704.628818][T25471] dummy0: left promiscuous mode [ 1704.701780][T25471] team0: Device dummy0 is of different type [ 1704.865821][T25474] overlayfs: failed to clone upperpath [ 1705.176548][T25203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.176756][T25203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.176993][T25203] bridge_slave_0: entered allmulticast mode [ 1705.183246][T25203] bridge_slave_0: entered promiscuous mode [ 1705.290619][T25203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.291584][T25203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.291856][T25203] bridge_slave_1: entered allmulticast mode [ 1705.326279][T25203] bridge_slave_1: entered promiscuous mode [ 1705.939753][T25220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.939969][T25220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.940204][T25220] bridge_slave_0: entered allmulticast mode [ 1705.963457][T25220] bridge_slave_0: entered promiscuous mode [ 1705.993554][T25203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.202570][ T5937] hsr_slave_0: left promiscuous mode [ 1706.233263][ T5937] hsr_slave_1: left promiscuous mode [ 1706.365147][ T5937] hsr_slave_0: left promiscuous mode [ 1706.402928][ T5937] hsr_slave_1: left promiscuous mode [ 1706.404043][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.426264][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.551026][ T5937] veth1_macvtap: left promiscuous mode [ 1706.551143][ T5937] veth0_macvtap: left promiscuous mode [ 1706.607285][ T5937] veth1_vlan: left promiscuous mode [ 1706.607494][ T5937] veth0_vlan: left promiscuous mode [ 1706.833277][T24509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1706.858326][T24509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1706.861677][T24509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1706.865251][T24509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1706.866165][T24509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1707.823235][ T5937] pim6reg (unregistering): left allmulticast mode [ 1707.923178][ T5937] pim6reg9 (unregistering): left allmulticast mode [ 1709.749794][T24509] Bluetooth: hci3: command tx timeout [ 1709.962626][T25509] netlink: 'syz.0.7075': attribute type 10 has an invalid length. [ 1709.962652][T25509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7075'. [ 1710.025099][T25510] netlink: 'syz.0.7075': attribute type 10 has an invalid length. [ 1711.762802][T24509] Bluetooth: hci3: command tx timeout [ 1713.842606][T24509] Bluetooth: hci3: command tx timeout [ 1715.763586][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1715.922737][T24509] Bluetooth: hci3: command tx timeout [ 1715.963382][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1716.604352][T25220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.604462][T25220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.604672][T25220] bridge_slave_1: entered allmulticast mode [ 1716.606600][T25220] bridge_slave_1: entered promiscuous mode [ 1716.612151][T25203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.938716][T25509] dummy0: entered promiscuous mode [ 1716.939804][T25509] bridge0: port 1(dummy0) entered blocking state [ 1716.939944][T25509] bridge0: port 1(dummy0) entered disabled state [ 1716.940140][T25509] dummy0: entered allmulticast mode [ 1716.942995][ T6373] lo speed is unknown, defaulting to 1000 [ 1716.943065][ T6373] infiniband syz2: ib_query_port failed (-19) [ 1716.954290][T25509] bridge0: port 1(dummy0) entered blocking state [ 1716.954453][T25509] bridge0: port 1(dummy0) entered forwarding state [ 1716.964722][T25510] bridge0: port 1(dummy0) entered disabled state [ 1716.965853][T25510] dummy0: left allmulticast mode [ 1716.965947][T25510] dummy0: left promiscuous mode [ 1716.966614][T25510] bridge0: port 1(dummy0) entered disabled state [ 1717.084312][T25510] team0: Device dummy0 is of different type [ 1719.225123][T25220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1719.227848][T25203] team0: Port device team_slave_0 added [ 1719.231708][T25203] team0: Port device team_slave_1 added [ 1719.366037][T25220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1719.621744][T25203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1719.621764][T25203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.621796][T25203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.914158][T25529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1719.980673][T25203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.980693][T25203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.980723][T25203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.122753][T25220] team0: Port device team_slave_0 added [ 1720.146836][T25220] team0: Port device team_slave_1 added [ 1720.413658][T25536] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 1720.413689][T25536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7084'. [ 1720.466242][T25537] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 1720.725459][T25536] dummy0: entered promiscuous mode [ 1720.729088][T25536] bridge0: port 1(dummy0) entered blocking state [ 1720.729246][T25536] bridge0: port 1(dummy0) entered disabled state [ 1720.730490][T25536] dummy0: entered allmulticast mode [ 1720.749364][T25536] bridge0: port 1(dummy0) entered blocking state [ 1720.749507][T25536] bridge0: port 1(dummy0) entered forwarding state [ 1720.787091][T25537] bridge0: port 1(dummy0) entered disabled state [ 1720.787467][T25537] dummy0: left allmulticast mode [ 1720.787486][T25537] dummy0: left promiscuous mode [ 1720.787657][T25537] bridge0: port 1(dummy0) entered disabled state [ 1721.033988][T25537] team0: Device dummy0 is of different type [ 1721.093721][T25220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.093742][T25220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.093774][T25220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.260170][T25541] netlink: 'syz.0.7085': attribute type 10 has an invalid length. [ 1721.260196][T25541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1721.363781][T25220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.363800][T25220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.363832][T25220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.364500][T25541] dummy0: entered promiscuous mode [ 1721.366946][T25543] netlink: 'syz.0.7085': attribute type 10 has an invalid length. [ 1721.430553][T25541] bridge0: port 1(dummy0) entered blocking state [ 1721.430732][T25541] bridge0: port 1(dummy0) entered disabled state [ 1721.430923][T25541] dummy0: entered allmulticast mode [ 1721.480808][T25541] bridge0: port 1(dummy0) entered blocking state [ 1721.480963][T25541] bridge0: port 1(dummy0) entered forwarding state [ 1721.491713][T25203] hsr_slave_0: entered promiscuous mode [ 1721.524226][T25203] hsr_slave_1: entered promiscuous mode [ 1721.575437][T25543] bridge0: port 1(dummy0) entered disabled state [ 1721.576105][T25543] dummy0: left allmulticast mode [ 1721.576136][T25543] dummy0: left promiscuous mode [ 1721.576408][T25543] bridge0: port 1(dummy0) entered disabled state [ 1721.768073][T25543] team0: Device dummy0 is of different type [ 1722.876778][T25557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1723.009021][T25220] hsr_slave_0: entered promiscuous mode [ 1723.010172][T25220] hsr_slave_1: entered promiscuous mode [ 1723.010895][T25220] debugfs: 'hsr0' already exists in 'hsr' [ 1723.010915][T25220] Cannot create hsr debugfs directory [ 1724.101898][T25571] netlink: 'syz.0.7096': attribute type 10 has an invalid length. [ 1724.101923][T25571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1724.154939][T25572] netlink: 'syz.0.7096': attribute type 10 has an invalid length. [ 1724.332946][T25571] dummy0: entered promiscuous mode [ 1724.353346][T25571] bridge0: port 1(dummy0) entered blocking state [ 1724.353479][T25571] bridge0: port 1(dummy0) entered disabled state [ 1724.353680][T25571] dummy0: entered allmulticast mode [ 1724.356313][T25571] bridge0: port 1(dummy0) entered blocking state [ 1724.356411][T25571] bridge0: port 1(dummy0) entered forwarding state [ 1724.429754][T25572] bridge0: port 1(dummy0) entered disabled state [ 1724.430439][T25572] dummy0: left allmulticast mode [ 1724.430467][T25572] dummy0: left promiscuous mode [ 1724.430724][T25572] bridge0: port 1(dummy0) entered disabled state [ 1724.519184][T25572] team0: Device dummy0 is of different type [ 1728.188704][T25485] chnl_net:caif_netlink_parms(): no params data found [ 1729.979820][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1730.678687][T17081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1730.692236][T17081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1730.715191][T17081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1730.716626][T17081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1730.717532][T17081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1732.037417][T25485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.037625][T25485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.037974][T25485] bridge_slave_0: entered allmulticast mode [ 1732.045860][T25485] bridge_slave_0: entered promiscuous mode [ 1732.080183][T25485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.092934][T25485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.093204][T25485] bridge_slave_1: entered allmulticast mode [ 1732.106870][T25485] bridge_slave_1: entered promiscuous mode [ 1732.173429][T17081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1732.228692][T17081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1732.246675][T17081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1732.249901][T17081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1732.250845][T17081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1732.701696][T25485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.852510][T24509] Bluetooth: hci4: command tx timeout [ 1734.322563][T24509] Bluetooth: hci6: command tx timeout [ 1734.596091][T25485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.892649][T24509] Bluetooth: hci4: command tx timeout [ 1736.402728][T24509] Bluetooth: hci6: command tx timeout [ 1736.674877][T25485] team0: Port device team_slave_0 added [ 1736.794095][T25485] team0: Port device team_slave_1 added [ 1737.002765][T24509] Bluetooth: hci4: command tx timeout [ 1737.140802][T25667] ptrace attach of "./syz-executor exec"[16057] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x07 [ 1738.084768][ T5937] bridge_slave_1: left allmulticast mode [ 1738.084801][ T5937] bridge_slave_1: left promiscuous mode [ 1738.085005][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.444268][ T5937] bridge_slave_0: left allmulticast mode [ 1738.444302][ T5937] bridge_slave_0: left promiscuous mode [ 1738.444605][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.482506][T24509] Bluetooth: hci6: command tx timeout [ 1738.557325][ T5937] bridge_slave_1: left allmulticast mode [ 1738.557360][ T5937] bridge_slave_1: left promiscuous mode [ 1738.557660][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.644455][ T5937] bridge_slave_0: left allmulticast mode [ 1738.644491][ T5937] bridge_slave_0: left promiscuous mode [ 1738.644779][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.727859][T25676] 9p: Bad value for 'wfdno' [ 1738.977737][T25670] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7126'. [ 1739.043591][T24509] Bluetooth: hci4: command tx timeout [ 1739.203584][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.240540][T25683] netlink: 'syz.7.7131': attribute type 10 has an invalid length. [ 1739.240559][T25683] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7131'. [ 1739.295736][T25684] netlink: 'syz.7.7131': attribute type 10 has an invalid length. [ 1739.333703][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.415769][ T5937] bond0 (unregistering): Released all slaves [ 1739.653555][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.733589][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.795172][ T5937] bond0 (unregistering): Released all slaves [ 1740.039430][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7129'. [ 1740.051688][T25683] dummy0: entered promiscuous mode [ 1740.067921][T25683] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1740.068121][T25684] dummy0: left promiscuous mode [ 1740.079525][T25684] team0: Device dummy0 is of different type [ 1740.272640][T25485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.272661][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.272694][T25485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.422637][T25485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.422653][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.422675][T25485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.613166][T24509] Bluetooth: hci6: command tx timeout [ 1741.945664][T25485] hsr_slave_0: entered promiscuous mode [ 1741.950933][T25485] hsr_slave_1: entered promiscuous mode [ 1741.965247][T25485] debugfs: 'hsr0' already exists in 'hsr' [ 1741.965280][T25485] Cannot create hsr debugfs directory [ 1742.989467][T25705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7139'. [ 1743.403396][T25709] ptrace attach of "./syz-executor exec"[16057] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1744.762793][ T5937] hsr_slave_0: left promiscuous mode [ 1744.873232][ T5937] hsr_slave_1: left promiscuous mode [ 1744.874392][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.913520][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.092827][ T5937] hsr_slave_0: left promiscuous mode [ 1745.339938][ T5937] hsr_slave_1: left promiscuous mode [ 1745.340804][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.373416][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1746.361212][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1747.303415][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1747.483412][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1750.295212][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1750.473353][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1751.193919][T25732] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7147'. [ 1751.393120][T25614] chnl_net:caif_netlink_parms(): no params data found [ 1753.218298][T25624] chnl_net:caif_netlink_parms(): no params data found [ 1755.226793][T25614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.227303][T25614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.227570][T25614] bridge_slave_0: entered allmulticast mode [ 1755.231794][T25614] bridge_slave_0: entered promiscuous mode [ 1755.290302][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7155'. [ 1755.290652][T25614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.290740][T25614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.290951][T25614] bridge_slave_1: entered allmulticast mode [ 1755.296202][T25614] bridge_slave_1: entered promiscuous mode [ 1755.765060][T25768] netlink: 'syz.7.7156': attribute type 10 has an invalid length. [ 1755.765080][T25768] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7156'. [ 1755.841246][T25769] netlink: 'syz.7.7156': attribute type 10 has an invalid length. [ 1757.004660][T25772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1757.156105][T25768] dummy0: entered promiscuous mode [ 1757.162141][T25768] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1757.166055][T25769] dummy0: left promiscuous mode [ 1757.196716][T25769] team0: Device dummy0 is of different type [ 1757.276051][T25614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.417010][T25614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.580707][T25780] netlink: 'syz.7.7161': attribute type 10 has an invalid length. [ 1757.580731][T25780] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7161'. [ 1757.645254][T25781] netlink: 'syz.7.7161': attribute type 10 has an invalid length. [ 1757.734122][T25624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.734330][T25624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.734544][T25624] bridge_slave_0: entered allmulticast mode [ 1757.737363][T25624] bridge_slave_0: entered promiscuous mode [ 1757.741361][T25780] dummy0: entered promiscuous mode [ 1757.750319][T25780] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1757.750510][T25781] dummy0: left promiscuous mode [ 1757.767238][T25781] team0: Device dummy0 is of different type [ 1758.037192][T25624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.037342][T25624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.037685][T25624] bridge_slave_1: entered allmulticast mode [ 1758.040339][T25624] bridge_slave_1: entered promiscuous mode [ 1760.424764][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7163'. [ 1760.434894][T25614] team0: Port device team_slave_0 added [ 1760.527007][T25793] 9p: Bad value for 'wfdno' [ 1760.630630][T25797] netlink: 'syz.0.7167': attribute type 10 has an invalid length. [ 1760.852202][T25614] team0: Port device team_slave_1 added [ 1760.861365][T25797] team0: Device dummy0 is of different type [ 1760.911518][T25624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.998718][T25624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.402252][T25614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1762.402272][T25614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1762.402304][T25614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.344446][T25614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.344465][T25614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.344496][T25614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.354004][T25624] team0: Port device team_slave_0 added [ 1763.529452][T25624] team0: Port device team_slave_1 added [ 1765.393750][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7173'. [ 1765.475302][T25817] 9p: Bad value for 'wfdno' [ 1765.513861][T25624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.513878][T25624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.513903][T25624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.805192][T25624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.805212][T25624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.805243][T25624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1765.806011][ T5937] bridge_slave_1: left allmulticast mode [ 1765.806034][ T5937] bridge_slave_1: left promiscuous mode [ 1765.806253][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.084342][ T5937] bridge_slave_0: left allmulticast mode [ 1767.084376][ T5937] bridge_slave_0: left promiscuous mode [ 1767.084656][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.147252][ T5937] bridge_slave_1: left allmulticast mode [ 1767.147287][ T5937] bridge_slave_1: left promiscuous mode [ 1767.147541][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.214088][ T5937] bridge_slave_0: left allmulticast mode [ 1767.214127][ T5937] bridge_slave_0: left promiscuous mode [ 1767.214401][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.533629][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.653663][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.765830][T17081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1767.796706][T17081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1767.908864][T17081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1767.911115][T17081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1767.911887][T17081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1768.755258][ T5937] bond0 (unregistering): Released all slaves [ 1768.842871][T25834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1769.093397][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.173402][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.238972][ T5937] bond0 (unregistering): Released all slaves [ 1769.305813][T25614] hsr_slave_0: entered promiscuous mode [ 1769.307366][T25614] hsr_slave_1: entered promiscuous mode [ 1769.308319][T25614] debugfs: 'hsr0' already exists in 'hsr' [ 1769.308340][T25614] Cannot create hsr debugfs directory [ 1769.381270][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7181'. [ 1770.869861][T24509] Bluetooth: hci0: command tx timeout [ 1771.225077][T25624] hsr_slave_0: entered promiscuous mode [ 1771.226606][T25624] hsr_slave_1: entered promiscuous mode [ 1771.227781][T25624] debugfs: 'hsr0' already exists in 'hsr' [ 1771.227810][T25624] Cannot create hsr debugfs directory [ 1772.477175][T25855] 9p: Bad value for 'wfdno' [ 1772.809038][T25863] netlink: 'syz.0.7188': attribute type 10 has an invalid length. [ 1772.835469][T25865] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7190'. [ 1772.879578][T25866] netlink: 'syz.0.7188': attribute type 10 has an invalid length. [ 1772.892767][T24509] Bluetooth: hci0: command tx timeout [ 1773.094361][T25863] team0: Device dummy0 is of different type [ 1773.173153][T25866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1778.531660][T24509] Bluetooth: hci0: command tx timeout [ 1778.862774][ T5937] hsr_slave_0: left promiscuous mode [ 1778.893049][ T5937] hsr_slave_1: left promiscuous mode [ 1778.894047][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.943901][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1778.960351][T25881] 9p: Could not find request transport: fd0x0000000000000003 [ 1779.136722][ T5937] hsr_slave_0: left promiscuous mode [ 1779.154548][ T5937] hsr_slave_1: left promiscuous mode [ 1779.155600][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.193612][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.194242][T25887] netlink: 'syz.0.7196': attribute type 10 has an invalid length. [ 1780.567206][T24509] Bluetooth: hci0: command tx timeout [ 1781.303451][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1781.473669][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1782.713267][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1782.877426][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1783.673554][T25896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7199'. [ 1785.276380][T25614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1785.424065][T25614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1785.516596][T25614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1785.609506][T25614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1786.228257][T25827] chnl_net:caif_netlink_parms(): no params data found [ 1786.350275][T25624] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1786.435937][T25624] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1786.665118][T25930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7208'. [ 1786.933646][T25624] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1788.305050][T25624] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1788.717037][T25959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1788.838620][T25827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.838829][T25827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.839048][T25827] bridge_slave_0: entered allmulticast mode [ 1788.864642][T25827] bridge_slave_0: entered promiscuous mode [ 1788.872048][T25827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.872204][T25827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.893344][T25827] bridge_slave_1: entered allmulticast mode [ 1788.896243][T25827] bridge_slave_1: entered promiscuous mode [ 1789.183827][T25827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.224281][T25827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.897294][T25827] team0: Port device team_slave_0 added [ 1789.914376][T25978] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7225'. [ 1789.963807][T25827] team0: Port device team_slave_1 added [ 1791.263314][T25827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.263329][T25827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.263351][T25827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.267287][T25827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.267301][T25827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.267322][T25827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.824767][T17081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1791.856169][T17081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1791.858824][T17081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1791.860975][T17081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1791.861899][T17081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1792.136682][T25991] netlink: 'syz.7.7228': attribute type 10 has an invalid length. [ 1792.170624][T25827] hsr_slave_0: entered promiscuous mode [ 1792.171693][T25827] hsr_slave_1: entered promiscuous mode [ 1792.199865][T25995] netlink: 'syz.7.7228': attribute type 10 has an invalid length. [ 1792.395661][T24509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1792.414354][T24509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1792.438868][T24509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1792.440328][T24509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1792.441301][T24509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1792.466753][T26002] netlink: 'syz.0.7231': attribute type 10 has an invalid length. [ 1792.466779][T26002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7231'. [ 1792.507809][T26003] netlink: 'syz.0.7231': attribute type 10 has an invalid length. [ 1792.541723][T25991] team0: Device dummy0 is of different type [ 1792.606334][T25995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1792.606735][T26002] dummy0: entered promiscuous mode [ 1792.641493][T26002] bond0: (slave dummy0): Releasing backup interface [ 1792.695408][T26002] bridge0: port 1(dummy0) entered blocking state [ 1792.712826][T26002] bridge0: port 1(dummy0) entered disabled state [ 1792.713073][T26002] dummy0: entered allmulticast mode [ 1792.733737][T26003] dummy0: left allmulticast mode [ 1792.733779][T26003] dummy0: left promiscuous mode [ 1792.734407][T26003] bridge0: port 1(dummy0) entered disabled state [ 1792.766908][T26005] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7232'. [ 1792.807732][T26003] team0: Device dummy0 is of different type [ 1793.002783][T26009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7233'. [ 1793.369846][T26012] netlink: 'syz.0.7235': attribute type 10 has an invalid length. [ 1793.436905][T26015] netlink: 'syz.0.7235': attribute type 10 has an invalid length. [ 1793.982784][T17081] Bluetooth: hci1: command tx timeout [ 1794.066085][T26012] team0: Device dummy0 is of different type [ 1794.226223][T26015] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1794.565375][T17081] Bluetooth: hci3: command tx timeout [ 1795.961373][T26030] netlink: 'syz.7.7240': attribute type 10 has an invalid length. [ 1795.961401][T26030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7240'. [ 1796.013246][T26031] netlink: 'syz.7.7240': attribute type 10 has an invalid length. [ 1796.250147][T17081] Bluetooth: hci1: command tx timeout [ 1796.327684][T26033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7241'. [ 1796.433601][T26030] dummy0: entered promiscuous mode [ 1796.463583][T26030] bond0: (slave dummy0): Releasing backup interface [ 1796.511771][T26030] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1796.511865][T26031] dummy0: left promiscuous mode [ 1796.537290][T26031] team0: Device dummy0 is of different type [ 1796.645398][T17081] Bluetooth: hci3: command tx timeout [ 1798.342592][T17081] Bluetooth: hci1: command tx timeout [ 1799.912536][T17081] Bluetooth: hci3: command tx timeout [ 1800.046233][ T5937] bridge_slave_1: left allmulticast mode [ 1800.046267][ T5937] bridge_slave_1: left promiscuous mode [ 1800.046540][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.204149][ T5937] bridge_slave_0: left allmulticast mode [ 1800.204181][ T5937] bridge_slave_0: left promiscuous mode [ 1800.204466][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.485752][T17081] Bluetooth: hci1: command tx timeout [ 1801.928479][T17081] Bluetooth: hci3: command tx timeout [ 1802.839538][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.933733][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.182100][ T5937] bond0 (unregistering): Released all slaves [ 1806.884770][T26110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7263'. [ 1806.902717][ T5937] hsr_slave_0: left promiscuous mode [ 1806.942751][ T5937] hsr_slave_1: left promiscuous mode [ 1806.943803][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.983728][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.370550][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1807.612154][T26120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1807.876714][T26127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1807.876744][T26127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1808.913495][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1810.042003][T26137] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7272'. [ 1810.093485][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1810.867977][T26127] gretap0: entered promiscuous mode [ 1810.932688][T26127] gretap0: left promiscuous mode [ 1811.114297][T26146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1811.135864][T25998] chnl_net:caif_netlink_parms(): no params data found [ 1811.176175][T25988] chnl_net:caif_netlink_parms(): no params data found [ 1814.084413][T26174] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1814.848802][T26178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7283'. [ 1814.848845][T26178] netlink: 'syz.0.7283': attribute type 7 has an invalid length. [ 1814.848862][T26178] netlink: 'syz.0.7283': attribute type 8 has an invalid length. [ 1814.848886][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7283'. [ 1815.138039][T25998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.138260][T25998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.138537][T25998] bridge_slave_0: entered allmulticast mode [ 1815.167436][T25998] bridge_slave_0: entered promiscuous mode [ 1815.170311][T25988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.170444][T25988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.170612][T25988] bridge_slave_0: entered allmulticast mode [ 1815.199743][T25988] bridge_slave_0: entered promiscuous mode [ 1815.208848][T25998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.209042][T25998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.209296][T25998] bridge_slave_1: entered allmulticast mode [ 1815.211606][T25998] bridge_slave_1: entered promiscuous mode [ 1815.301094][T25988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.301253][T25988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.301509][T25988] bridge_slave_1: entered allmulticast mode [ 1815.326692][T25988] bridge_slave_1: entered promiscuous mode [ 1815.457287][T26183] netlink: 'syz.0.7285': attribute type 10 has an invalid length. [ 1815.509485][T26185] netlink: 'syz.0.7285': attribute type 10 has an invalid length. [ 1815.643330][T26183] bond0: (slave dummy0): Releasing backup interface [ 1815.667770][T26183] team0: Device dummy0 is of different type [ 1815.734952][T26185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1815.839323][T25998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.067593][T25988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.070993][T25827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1816.819548][T25998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.095578][T26196] netlink: 'syz.7.7288': attribute type 10 has an invalid length. [ 1817.148131][T26197] netlink: 'syz.7.7288': attribute type 10 has an invalid length. [ 1817.716877][T25988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.717203][T25827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1818.026752][T26196] team0: Device dummy0 is of different type [ 1818.134905][T26205] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1818.922489][T26197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1820.386058][T25827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1821.693817][T25827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1821.746517][T25998] team0: Port device team_slave_0 added [ 1822.163619][T25988] team0: Port device team_slave_0 added [ 1822.189493][T25998] team0: Port device team_slave_1 added [ 1822.204020][T25988] team0: Port device team_slave_1 added [ 1822.535420][T26224] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1823.419365][T26242] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7299'. [ 1823.515249][T25998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.515264][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.515286][T25998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.516900][T25988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.516918][T25988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.516949][T25988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.521479][T25998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.521492][T25998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.521513][T25998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.530339][T25988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.530359][T25988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.530389][T25988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.344535][T26255] overlayfs: failed to clone upperpath [ 1827.404975][T25998] hsr_slave_0: entered promiscuous mode [ 1827.406054][T25998] hsr_slave_1: entered promiscuous mode [ 1827.406750][T25998] debugfs: 'hsr0' already exists in 'hsr' [ 1827.406777][T25998] Cannot create hsr debugfs directory [ 1827.444875][T25988] hsr_slave_0: entered promiscuous mode [ 1827.446617][T25988] hsr_slave_1: entered promiscuous mode [ 1827.447657][T25988] debugfs: 'hsr0' already exists in 'hsr' [ 1827.447685][T25988] Cannot create hsr debugfs directory [ 1829.333335][T26272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7307'. [ 1829.678312][T24509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1829.697325][T24509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1829.699745][T24509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1829.701923][T24509] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1829.707502][T24509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1829.766566][T26264] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7305'. [ 1831.306434][T26284] pim6reg: left allmulticast mode [ 1831.768539][T17081] Bluetooth: hci4: command tx timeout [ 1832.816422][T26292] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1833.842921][T17081] Bluetooth: hci4: command tx timeout [ 1834.089117][T26301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1835.922810][T17081] Bluetooth: hci4: command tx timeout [ 1836.667995][T26323] ptrace attach of "./syz-executor exec"[16057] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1837.598880][T26312] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1837.969820][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1838.138268][T17081] Bluetooth: hci4: command tx timeout [ 1839.334306][T26339] overlayfs: failed to clone upperpath [ 1840.705644][T26274] chnl_net:caif_netlink_parms(): no params data found [ 1842.206021][T26357] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1843.047158][ T5937] bridge_slave_1: left allmulticast mode [ 1843.047191][ T5937] bridge_slave_1: left promiscuous mode [ 1843.047996][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.224103][ T5937] bridge_slave_0: left allmulticast mode [ 1843.224128][ T5937] bridge_slave_0: left promiscuous mode [ 1843.224367][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.249738][T26362] netlink: 'syz.7.7330': attribute type 10 has an invalid length. [ 1843.297401][ T5937] bridge_slave_1: left allmulticast mode [ 1843.297436][ T5937] bridge_slave_1: left promiscuous mode [ 1843.297702][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.354375][ T5937] bridge_slave_0: left allmulticast mode [ 1843.354410][ T5937] bridge_slave_0: left promiscuous mode [ 1843.354835][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.862157][T26359] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7331'. [ 1844.099437][T26367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7332'. [ 1844.374127][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.453355][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.525102][ T5937] bond0 (unregistering): Released all slaves [ 1845.173578][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1845.263494][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.325244][ T5937] bond0 (unregistering): Released all slaves [ 1848.705622][T26274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.705835][T26274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.706266][T26274] bridge_slave_0: entered allmulticast mode [ 1848.708990][T26274] bridge_slave_0: entered promiscuous mode [ 1848.711877][T26274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.711978][T26274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.712119][T26274] bridge_slave_1: entered allmulticast mode [ 1848.748672][T26274] bridge_slave_1: entered promiscuous mode [ 1851.825931][T26396] netlink: 'syz.7.7340': attribute type 10 has an invalid length. [ 1851.911676][T26274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.106944][T26274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.311679][T26392] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1852.418049][T26274] team0: Port device team_slave_0 added [ 1852.505756][T26274] team0: Port device team_slave_1 added [ 1852.715502][T26402] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7341'. [ 1852.783904][ T5937] hsr_slave_0: left promiscuous mode [ 1852.822608][ T5937] hsr_slave_1: left promiscuous mode [ 1852.823872][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1852.883668][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.883831][T24509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1852.888476][T24509] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1852.890120][T24509] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1852.922819][T24509] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1852.924893][T24509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1853.061444][T24509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1853.089286][T24509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1853.103079][T24509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1853.104471][T24509] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1853.105383][T24509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1853.192766][ T5937] hsr_slave_0: left promiscuous mode [ 1853.242812][ T5937] hsr_slave_1: left promiscuous mode [ 1853.244030][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1853.323288][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1855.046356][T24509] Bluetooth: hci0: command tx timeout [ 1855.238333][T24509] Bluetooth: hci6: command tx timeout [ 1856.665416][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1857.697277][T24509] Bluetooth: hci0: command tx timeout [ 1857.697323][T24509] Bluetooth: hci6: command tx timeout [ 1858.110883][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1859.070865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.762908][T17081] Bluetooth: hci0: command tx timeout [ 1859.762949][T17081] Bluetooth: hci6: command tx timeout [ 1860.553567][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1860.743474][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1861.843083][T17081] Bluetooth: hci0: command tx timeout [ 1861.843105][T24509] Bluetooth: hci6: command tx timeout [ 1862.049300][T26274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.049321][T26274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.049353][T26274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.214316][T26274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.214335][T26274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.214367][T26274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.716153][T26432] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7349'. [ 1862.753384][T26274] hsr_slave_0: entered promiscuous mode [ 1862.754929][T26274] hsr_slave_1: entered promiscuous mode [ 1862.756020][T26274] debugfs: 'hsr0' already exists in 'hsr' [ 1862.756048][T26274] Cannot create hsr debugfs directory [ 1863.489600][T26450] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7356'. [ 1863.908300][T26457] netlink: 'syz.0.7359': attribute type 10 has an invalid length. [ 1863.908328][T26457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1864.056560][T26457] dummy0: entered promiscuous mode [ 1864.143997][T26457] bond0: (slave dummy0): Releasing backup interface [ 1864.282104][T26457] bridge0: port 1(dummy0) entered blocking state [ 1864.283351][T26457] bridge0: port 1(dummy0) entered disabled state [ 1864.283592][T26457] dummy0: entered allmulticast mode [ 1865.423347][T26460] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7360'. [ 1866.006803][T26473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1866.280623][T26482] overlayfs: failed to clone upperpath [ 1867.783031][T26408] chnl_net:caif_netlink_parms(): no params data found [ 1867.805808][T26406] chnl_net:caif_netlink_parms(): no params data found [ 1868.228431][T26499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7374'. [ 1868.461883][T26509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1868.812968][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1868.839405][T26523] overlayfs: failed to clone upperpath [ 1869.128083][T26408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.128264][T26408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.128425][T26408] bridge_slave_0: entered allmulticast mode [ 1869.130320][T26408] bridge_slave_0: entered promiscuous mode [ 1869.159872][T26406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.159966][T26406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.160174][T26406] bridge_slave_0: entered allmulticast mode [ 1869.162148][T26406] bridge_slave_0: entered promiscuous mode [ 1869.243087][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.243204][T26408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.243415][T26408] bridge_slave_1: entered allmulticast mode [ 1869.245371][T26408] bridge_slave_1: entered promiscuous mode [ 1869.246767][T26406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.246855][T26406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.246997][T26406] bridge_slave_1: entered allmulticast mode [ 1869.248938][T26406] bridge_slave_1: entered promiscuous mode [ 1869.805057][T26274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1869.875940][T26408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.894939][T26406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.912816][T26274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1869.963001][T26408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.967015][T26406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.043353][T26274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1870.322894][T26274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1870.538110][T26408] team0: Port device team_slave_0 added [ 1870.549301][T26406] team0: Port device team_slave_0 added [ 1870.560376][T26408] team0: Port device team_slave_1 added [ 1870.637368][T26406] team0: Port device team_slave_1 added [ 1870.728942][T26537] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7382'. [ 1870.900636][T26548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7383'. [ 1871.184682][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7384'. [ 1871.195264][T26408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.195328][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.195404][T26408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.270483][T26408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.270504][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.270536][T26408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.272239][T26406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.272255][T26406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.272285][T26406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.364312][T26406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.364331][T26406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.364363][T26406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.454393][ T5937] bridge_slave_1: left allmulticast mode [ 1871.454420][ T5937] bridge_slave_1: left promiscuous mode [ 1871.454625][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.535653][ T5937] bridge_slave_0: left allmulticast mode [ 1871.535685][ T5937] bridge_slave_0: left promiscuous mode [ 1871.536006][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.598763][T26559] overlayfs: failed to clone upperpath [ 1871.615046][ T5937] bridge_slave_1: left allmulticast mode [ 1871.615078][ T5937] bridge_slave_1: left promiscuous mode [ 1871.615357][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.725474][ T5937] bridge_slave_0: left allmulticast mode [ 1871.725507][ T5937] bridge_slave_0: left promiscuous mode [ 1871.725772][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.767317][ T5937] bridge_slave_1: left allmulticast mode [ 1871.767351][ T5937] bridge_slave_1: left promiscuous mode [ 1871.767619][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.854305][ T5937] bridge_slave_0: left allmulticast mode [ 1871.854340][ T5937] bridge_slave_0: left promiscuous mode [ 1871.854634][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.303235][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1872.403489][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1872.984505][ T5937] bond0 (unregistering): Released all slaves [ 1873.293248][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1873.393314][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1873.447075][ T5937] bond0 (unregistering): Released all slaves [ 1874.143383][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1874.174168][T26579] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7392'. [ 1874.273315][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1874.336531][ T5937] bond0 (unregistering): Released all slaves [ 1874.728655][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7393'. [ 1874.754458][T26408] hsr_slave_0: entered promiscuous mode [ 1874.781211][T26408] hsr_slave_1: entered promiscuous mode [ 1874.781981][T26408] debugfs: 'hsr0' already exists in 'hsr' [ 1874.782014][T26408] Cannot create hsr debugfs directory [ 1874.984083][T26590] overlayfs: failed to clone upperpath [ 1875.293141][T26406] hsr_slave_0: entered promiscuous mode [ 1875.294633][T26406] hsr_slave_1: entered promiscuous mode [ 1875.295543][T26406] debugfs: 'hsr0' already exists in 'hsr' [ 1875.295568][T26406] Cannot create hsr debugfs directory [ 1878.213964][T26600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7399'. [ 1878.214015][T26600] netlink: 'syz.7.7399': attribute type 7 has an invalid length. [ 1878.214031][T26600] netlink: 'syz.7.7399': attribute type 8 has an invalid length. [ 1878.214047][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7399'. [ 1879.779303][T26608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7402'. [ 1880.122754][ T5937] hsr_slave_0: left promiscuous mode [ 1880.142633][ T5937] hsr_slave_1: left promiscuous mode [ 1880.143527][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.219148][T26615] ptrace attach of "./syz-executor exec"[16057] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1881.023560][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1882.342592][ T5937] hsr_slave_0: left promiscuous mode [ 1882.382582][ T5937] hsr_slave_1: left promiscuous mode [ 1882.383661][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.434030][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.952767][ T5937] hsr_slave_0: left promiscuous mode [ 1883.990937][T26627] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7408'. [ 1883.990968][T26627] netlink: 'syz.7.7408': attribute type 7 has an invalid length. [ 1883.990979][T26627] netlink: 'syz.7.7408': attribute type 8 has an invalid length. [ 1883.990989][T26627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7408'. [ 1883.993197][ T5937] hsr_slave_1: left promiscuous mode [ 1883.996129][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1884.045883][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1884.916284][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1885.093209][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1886.503483][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1886.683803][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1888.114429][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1888.304532][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1890.947631][T26634] netlink: 'syz.7.7410': attribute type 10 has an invalid length. [ 1890.947659][T26634] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7410'. [ 1891.086330][T26634] dummy0: entered promiscuous mode [ 1891.111764][T17081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1891.151402][T17081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1891.162035][T17081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1891.166818][T26634] bond0: (slave dummy0): Releasing backup interface [ 1891.184741][T17081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1891.242284][T17081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1891.364381][T26634] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1891.620896][T26644] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1892.738060][T26652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7416'. [ 1893.921915][T24509] Bluetooth: hci1: command tx timeout [ 1896.002580][T24509] Bluetooth: hci1: command tx timeout [ 1896.174965][T26671] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 1898.566990][T24509] Bluetooth: hci1: command tx timeout [ 1899.501303][T26687] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7426'. [ 1899.760637][T26638] chnl_net:caif_netlink_parms(): no params data found [ 1901.082388][T24509] Bluetooth: hci1: command tx timeout [ 1901.191483][T26408] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1901.323754][T26408] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1901.473038][T26702] netlink: 'syz.0.7430': attribute type 10 has an invalid length. [ 1901.473059][T26702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1901.710533][T26408] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1901.749605][T26702] bridge0: port 1(dummy0) entered blocking state [ 1901.750190][T26702] bridge0: port 1(dummy0) entered forwarding state [ 1901.840648][T26408] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1903.463818][T26717] netlink: 'syz.0.7433': attribute type 10 has an invalid length. [ 1903.544464][T26720] netlink: 'syz.0.7433': attribute type 10 has an invalid length. [ 1903.548162][T26719] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7434'. [ 1903.593578][T26717] bridge0: port 1(dummy0) entered disabled state [ 1903.594030][T26717] dummy0: left allmulticast mode [ 1903.594049][T26717] dummy0: left promiscuous mode [ 1903.594388][T26717] bridge0: port 1(dummy0) entered disabled state [ 1903.726873][T26717] team0: Device dummy0 is of different type [ 1903.794109][T26720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1903.806344][T26638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.806701][T26638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.807444][T26638] bridge_slave_0: entered allmulticast mode [ 1903.827720][T26638] bridge_slave_0: entered promiscuous mode [ 1903.898963][T26638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.899111][T26638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.899365][T26638] bridge_slave_1: entered allmulticast mode [ 1903.902242][T26638] bridge_slave_1: entered promiscuous mode [ 1904.290910][T26406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1904.408273][T26638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.538241][T26406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1904.721867][T26638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1904.722206][T26406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1905.135038][T26406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1905.359832][T26638] team0: Port device team_slave_0 added [ 1905.378067][T26638] team0: Port device team_slave_1 added [ 1905.685411][T26753] netlink: 'syz.7.7442': attribute type 10 has an invalid length. [ 1905.741534][T26754] netlink: 'syz.7.7442': attribute type 10 has an invalid length. [ 1905.995399][T26753] dummy0: left promiscuous mode [ 1906.018870][T26753] team0: Device dummy0 is of different type [ 1906.070837][T26754] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1906.166974][T26638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.166994][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.167026][T26638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.245415][T26638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.245429][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.245452][T26638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.345466][T26756] netlink: 'syz.0.7443': attribute type 10 has an invalid length. [ 1906.345485][T26756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7443'. [ 1906.466372][T26756] dummy0: entered promiscuous mode [ 1906.504355][T26756] bond0: (slave dummy0): Releasing backup interface [ 1906.537918][T26756] bridge0: port 1(dummy0) entered blocking state [ 1906.538447][T26756] bridge0: port 1(dummy0) entered disabled state [ 1906.540925][T26756] dummy0: entered allmulticast mode [ 1907.424060][T26638] hsr_slave_0: entered promiscuous mode [ 1907.425653][T26638] hsr_slave_1: entered promiscuous mode [ 1907.588330][T26771] netlink: 'syz.7.7449': attribute type 10 has an invalid length. [ 1907.643139][T26773] netlink: 'syz.7.7449': attribute type 10 has an invalid length. [ 1907.838464][T26771] bond0: (slave dummy0): Releasing backup interface [ 1907.878587][T26771] team0: Device dummy0 is of different type [ 1907.936465][T26773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1910.723446][T26778] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7451'. [ 1910.791099][T26408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.944864][T26408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.960666][T26406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.977825][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.978425][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1911.085466][T15738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.100330][T15738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1911.253519][ T5937] bridge_slave_1: left allmulticast mode [ 1911.253552][ T5937] bridge_slave_1: left promiscuous mode [ 1911.253805][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.634686][ T5937] bridge_slave_0: left allmulticast mode [ 1911.634711][ T5937] bridge_slave_0: left promiscuous mode [ 1911.634912][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.287754][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7460'. [ 1912.586491][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1912.690455][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.746058][ T5937] bond0 (unregistering): Released all slaves [ 1912.804361][T26406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1913.216595][T26805] bridge0: port 2(vlan2) entered blocking state [ 1913.216738][T26805] bridge0: port 2(vlan2) entered disabled state [ 1913.216951][T26805] vlan2: entered allmulticast mode [ 1913.216970][T26805] bridge0: entered allmulticast mode [ 1913.288146][T26805] vlan2: left allmulticast mode [ 1913.288166][T26805] bridge0: left allmulticast mode [ 1913.673148][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.673381][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1913.731290][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.773185][T16692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.084626][ T5937] hsr_slave_0: left promiscuous mode [ 1914.100974][T17081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1914.117429][ T5937] hsr_slave_1: left promiscuous mode [ 1914.118303][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.145479][T17081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1914.147777][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.148010][T17081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1914.149399][T17081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1914.164176][T17081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1914.884826][T24509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1914.907163][T24509] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1914.908942][T24509] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1914.934778][T24509] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1914.947140][T24509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1915.381215][T26827] CIFS mount error: No usable UNC path provided in device string! [ 1915.381215][T26827] [ 1915.381241][T26827] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1916.070243][T26831] overlayfs: failed to clone upperpath [ 1916.242563][T17081] Bluetooth: hci3: command tx timeout [ 1916.383418][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1916.593564][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1917.054046][T17081] Bluetooth: hci0: command tx timeout [ 1918.990884][T17081] Bluetooth: hci3: command tx timeout [ 1919.163511][T17081] Bluetooth: hci0: command tx timeout [ 1921.060392][T17081] Bluetooth: hci3: command tx timeout [ 1921.247713][T17081] Bluetooth: hci0: command tx timeout [ 1921.724855][T26856] CIFS mount error: No usable UNC path provided in device string! [ 1921.724855][T26856] [ 1921.724882][T26856] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1923.463440][T24509] Bluetooth: hci0: command tx timeout [ 1923.463493][T17081] Bluetooth: hci3: command tx timeout [ 1924.602936][T26638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1924.737954][T26638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1924.810367][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1924.874715][T26875] bridge0: port 2(vlan2) entered blocking state [ 1924.874980][T26875] bridge0: port 2(vlan2) entered disabled state [ 1924.875188][T26875] vlan2: entered allmulticast mode [ 1924.875208][T26875] bridge0: entered allmulticast mode [ 1924.934172][T26875] vlan2: left allmulticast mode [ 1924.934202][T26875] bridge0: left allmulticast mode [ 1925.152746][T26638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1925.185891][T26638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1925.374228][T26888] netlink: 'syz.0.7482': attribute type 10 has an invalid length. [ 1925.374257][T26888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1926.590805][T26888] bridge0: port 1(dummy0) entered blocking state [ 1926.591070][T26888] bridge0: port 1(dummy0) entered forwarding state [ 1927.313847][T26908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7488'. [ 1927.607749][T26822] chnl_net:caif_netlink_parms(): no params data found [ 1929.899366][T26813] chnl_net:caif_netlink_parms(): no params data found [ 1929.991123][T26935] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7496'. [ 1930.246536][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1930.389007][T26822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.389221][T26822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.389473][T26822] bridge_slave_0: entered allmulticast mode [ 1930.414322][T26822] bridge_slave_0: entered promiscuous mode [ 1930.462251][T26822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.463010][T26822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.463541][T26822] bridge_slave_1: entered allmulticast mode [ 1930.470631][T26822] bridge_slave_1: entered promiscuous mode [ 1932.075482][T26948] netlink: 'syz.7.7501': attribute type 10 has an invalid length. [ 1933.365621][T26822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1933.411913][T26822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1934.963818][T26813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.964864][T26813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.965250][T26813] bridge_slave_0: entered allmulticast mode [ 1934.967210][T26813] bridge_slave_0: entered promiscuous mode [ 1935.012773][T26822] team0: Port device team_slave_0 added [ 1935.013007][T26813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.014354][T26813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.014579][T26813] bridge_slave_1: entered allmulticast mode [ 1935.017688][T26813] bridge_slave_1: entered promiscuous mode [ 1935.063464][T26822] team0: Port device team_slave_1 added [ 1937.101449][T26813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1937.120892][T26822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1937.120911][T26822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1937.120936][T26822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1937.176073][T26813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1937.177511][T26822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1937.177526][T26822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1937.177551][T26822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1939.061655][T26813] team0: Port device team_slave_0 added [ 1940.465347][T26813] team0: Port device team_slave_1 added [ 1940.692682][T26638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.699609][T26822] hsr_slave_0: entered promiscuous mode [ 1940.700765][T26822] hsr_slave_1: entered promiscuous mode [ 1940.701501][T26822] debugfs: 'hsr0' already exists in 'hsr' [ 1940.701520][T26822] Cannot create hsr debugfs directory [ 1942.271308][T26813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1942.271329][T26813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1942.271361][T26813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1942.433561][T26813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1942.433583][T26813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1942.434203][T26813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1943.976271][T26638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.098442][T26813] hsr_slave_0: entered promiscuous mode [ 1944.099548][T26813] hsr_slave_1: entered promiscuous mode [ 1944.100304][T26813] debugfs: 'hsr0' already exists in 'hsr' [ 1944.100324][T26813] Cannot create hsr debugfs directory [ 1945.638067][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.638308][ T4955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1946.299929][ T1432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1946.300196][ T1432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1947.338213][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1947.338233][ T37] audit: type=1326 audit(1946.966:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.338487][ T37] audit: type=1326 audit(1946.966:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9fea965e7 code=0x7ffc0000 [ 1947.338663][ T37] audit: type=1326 audit(1946.966:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9fea3b829 code=0x7ffc0000 [ 1947.338829][ T37] audit: type=1326 audit(1946.966:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.339105][ T37] audit: type=1326 audit(1946.966:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.339268][ T37] audit: type=1326 audit(1946.966:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.339444][ T37] audit: type=1326 audit(1946.966:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.340259][ T37] audit: type=1326 audit(1946.966:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1947.340870][ T37] audit: type=1326 audit(1946.966:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27066 comm="syz.7.7532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1949.899685][ T5937] bridge_slave_1: left allmulticast mode [ 1949.899719][ T5937] bridge_slave_1: left promiscuous mode [ 1949.900013][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.001594][T27088] netlink: 'syz.7.7536': attribute type 10 has an invalid length. [ 1950.001620][T27088] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7536'. [ 1950.022072][ T5937] bridge_slave_0: left allmulticast mode [ 1950.022112][ T5937] bridge_slave_0: left promiscuous mode [ 1950.032524][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.143397][ T5937] bridge_slave_1: left allmulticast mode [ 1950.143433][ T5937] bridge_slave_1: left promiscuous mode [ 1950.143678][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.234791][ T5937] bridge_slave_0: left allmulticast mode [ 1950.234828][ T5937] bridge_slave_0: left promiscuous mode [ 1950.235023][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.098263][ T37] audit: type=1326 audit(1951.726:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27101 comm="syz.0.7540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 1952.301174][T24509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1952.383641][T24509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1952.483883][T24509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1952.486035][T24509] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1952.486854][T24509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1953.303315][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1954.609136][T17081] Bluetooth: hci4: command tx timeout [ 1954.653236][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1954.735178][ T5937] bond0 (unregistering): Released all slaves [ 1956.642899][T17081] Bluetooth: hci4: command tx timeout [ 1956.684174][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.743318][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.765605][ T5937] bond0 (unregistering): Released all slaves [ 1956.935301][T27088] dummy0: entered promiscuous mode [ 1956.953408][T27088] bond0: (slave dummy0): Releasing backup interface [ 1957.051485][T27088] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1958.785710][T17081] Bluetooth: hci4: command tx timeout [ 1959.789547][T27134] netlink: 'syz.7.7549': attribute type 10 has an invalid length. [ 1960.157899][T27134] dummy0: left promiscuous mode [ 1960.176661][T27134] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1960.273551][T27142] netlink: 'syz.7.7553': attribute type 10 has an invalid length. [ 1960.393377][T27144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1960.393422][T27144] netlink: 'syz.0.7554': attribute type 7 has an invalid length. [ 1960.393438][T27144] netlink: 'syz.0.7554': attribute type 8 has an invalid length. [ 1960.393455][T27144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1960.653265][T27150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7557'. [ 1960.726439][ T5937] hsr_slave_0: left promiscuous mode [ 1960.762561][ T5937] hsr_slave_1: left promiscuous mode [ 1960.763694][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.793551][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.884049][T17081] Bluetooth: hci4: command tx timeout [ 1961.205622][ T5937] hsr_slave_0: left promiscuous mode [ 1961.242620][ T5937] hsr_slave_1: left promiscuous mode [ 1961.243544][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1961.266468][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1962.224663][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1962.435084][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1963.220928][T27165] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7562'. [ 1963.220958][T27165] netlink: 'syz.7.7562': attribute type 7 has an invalid length. [ 1963.220968][T27165] netlink: 'syz.7.7562': attribute type 8 has an invalid length. [ 1963.220979][T27165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7562'. [ 1965.943965][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1966.133261][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1968.943747][T27168] netlink: 'syz.0.7563': attribute type 10 has an invalid length. [ 1968.986730][T27168] bridge0: port 1(dummy0) entered disabled state [ 1968.987120][T27168] dummy0: left allmulticast mode [ 1968.987139][T27168] dummy0: left promiscuous mode [ 1968.987310][T27168] bridge0: port 1(dummy0) entered disabled state [ 1969.018115][T27172] netlink: 'syz.0.7563': attribute type 10 has an invalid length. [ 1969.067173][T27168] team0: Device dummy0 is of different type [ 1969.176516][T27172] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1970.236233][T27105] chnl_net:caif_netlink_parms(): no params data found [ 1972.399857][T27105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.400042][T27105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.400251][T27105] bridge_slave_0: entered allmulticast mode [ 1972.425116][T27105] bridge_slave_0: entered promiscuous mode [ 1972.430460][T27105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.430594][T27105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.430818][T27105] bridge_slave_1: entered allmulticast mode [ 1972.460143][T27105] bridge_slave_1: entered promiscuous mode [ 1972.966473][T27105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.971181][T27105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1973.473511][T26822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1973.942744][T26822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1973.993030][T27105] team0: Port device team_slave_0 added [ 1974.022657][T26822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1974.067896][T27105] team0: Port device team_slave_1 added [ 1974.127323][T26822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1974.305903][T27105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.305923][T27105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.305953][T27105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.310740][T27105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.310760][T27105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.310790][T27105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.685236][T24509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1974.712496][T24509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1974.718790][T24509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1974.720774][T24509] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1974.746979][T24509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1976.354186][T27105] hsr_slave_0: entered promiscuous mode [ 1976.355713][T27105] hsr_slave_1: entered promiscuous mode [ 1976.356754][T27105] debugfs: 'hsr0' already exists in 'hsr' [ 1976.356783][T27105] Cannot create hsr debugfs directory [ 1976.812560][T24509] Bluetooth: hci1: command tx timeout [ 1977.398255][T17081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1977.422238][T17081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1977.436373][T17081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1977.438752][T17081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1977.439732][T17081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1978.886118][T24509] Bluetooth: hci1: command tx timeout [ 1978.904290][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1978.904311][ T37] audit: type=1326 audit(1978.536:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.904456][ T37] audit: type=1326 audit(1978.536:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.961967][ T37] audit: type=1326 audit(1978.566:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.962030][ T37] audit: type=1326 audit(1978.566:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.962080][ T37] audit: type=1326 audit(1978.566:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.962129][ T37] audit: type=1326 audit(1978.566:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.962175][ T37] audit: type=1326 audit(1978.576:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.962224][ T37] audit: type=1326 audit(1978.586:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.968887][ T37] audit: type=1326 audit(1978.586:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1978.969077][ T37] audit: type=1326 audit(1978.586:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27252 comm="syz.7.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 1979.532460][T24509] Bluetooth: hci0: command tx timeout [ 1980.962592][T24509] Bluetooth: hci1: command tx timeout [ 1981.612449][T24509] Bluetooth: hci0: command tx timeout [ 1982.191974][ T5937] bridge_slave_1: left allmulticast mode [ 1982.192005][ T5937] bridge_slave_1: left promiscuous mode [ 1982.192261][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.278341][ T5937] bridge_slave_0: left allmulticast mode [ 1982.278375][ T5937] bridge_slave_0: left promiscuous mode [ 1982.278642][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.072898][T24509] Bluetooth: hci1: command tx timeout [ 1984.012533][T24509] Bluetooth: hci0: command tx timeout [ 1985.613300][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1985.673194][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1985.697615][ T5937] bond0 (unregistering): Released all slaves [ 1986.013427][T27240] chnl_net:caif_netlink_parms(): no params data found [ 1986.023181][T27229] chnl_net:caif_netlink_parms(): no params data found [ 1986.092795][T24509] Bluetooth: hci0: command tx timeout [ 1986.982686][ T5937] hsr_slave_0: left promiscuous mode [ 1987.023312][ T5937] hsr_slave_1: left promiscuous mode [ 1987.028155][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1987.058887][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1990.463286][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1991.716128][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1991.933181][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1993.004002][T27330] 9pnet_fd: Insufficient options for proto=fd [ 1995.403970][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7617'. [ 1995.782152][T27357] 9pnet_fd: Insufficient options for proto=fd [ 1997.189444][T27240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.189615][T27240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.189808][T27240] bridge_slave_0: entered allmulticast mode [ 1997.193168][T27240] bridge_slave_0: entered promiscuous mode [ 1997.210874][T27229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.211242][T27229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.211925][T27229] bridge_slave_0: entered allmulticast mode [ 1997.235816][T27229] bridge_slave_0: entered promiscuous mode [ 1998.236741][T27240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.236912][T27240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.237120][T27240] bridge_slave_1: entered allmulticast mode [ 1998.239865][T27240] bridge_slave_1: entered promiscuous mode [ 1998.241937][T27229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.242066][T27229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.242253][T27229] bridge_slave_1: entered allmulticast mode [ 1998.245022][T27229] bridge_slave_1: entered promiscuous mode [ 2000.383848][T27373] pim6reg: entered allmulticast mode [ 2001.095436][T27240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2001.139958][T27229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2001.156988][T27240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.157078][T27105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2002.631335][T27229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2002.631888][T27105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2004.582518][T27105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2004.795851][T27418] netlink: 'syz.0.7636': attribute type 10 has an invalid length. [ 2004.800160][T27240] team0: Port device team_slave_0 added [ 2004.800324][T27105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2004.844412][T27419] netlink: 'syz.0.7636': attribute type 10 has an invalid length. [ 2004.905627][T27418] bond0: (slave dummy0): Releasing backup interface [ 2004.950409][T27418] team0: Device dummy0 is of different type [ 2004.994573][T27240] team0: Port device team_slave_1 added [ 2004.997755][T27229] team0: Port device team_slave_0 added [ 2005.016442][T27419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2005.272980][T27229] team0: Port device team_slave_1 added [ 2006.968641][T27240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.968693][T27240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2006.968755][T27240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2007.999335][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 2007.999356][ T37] audit: type=1326 audit(2007.626:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.001189][ T37] audit: type=1326 audit(2007.626:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.062086][ T37] audit: type=1326 audit(2007.686:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.064056][ T37] audit: type=1326 audit(2007.696:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.064310][ T37] audit: type=1326 audit(2007.696:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.082338][ T37] audit: type=1326 audit(2007.696:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.083437][ T37] audit: type=1326 audit(2007.696:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.083492][ T37] audit: type=1326 audit(2007.696:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.083542][ T37] audit: type=1326 audit(2007.706:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.083592][ T37] audit: type=1326 audit(2007.706:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.7.7642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fea9f749 code=0x7ffc0000 [ 2008.233317][T27240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.233375][T27240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.233451][T27240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.359257][T27229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2008.359278][T27229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.359311][T27229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.613431][T27229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.613451][T27229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.613484][T27229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.849032][T27453] netlink: 'syz.7.7645': attribute type 1 has an invalid length. [ 2009.248322][T27453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2009.265531][T27454] macvlan2: entered promiscuous mode [ 2009.265559][T27454] macvlan2: entered allmulticast mode [ 2009.267200][T27454] bond5: entered promiscuous mode [ 2009.267938][T27454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2009.353228][T27454] bond5: left promiscuous mode [ 2009.522588][T27240] hsr_slave_0: entered promiscuous mode [ 2009.526300][T27240] hsr_slave_1: entered promiscuous mode [ 2010.364175][T27463] CIFS mount error: No usable UNC path provided in device string! [ 2010.364175][T27463] [ 2010.364253][T27463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2011.862075][T27229] hsr_slave_0: entered promiscuous mode [ 2011.868756][T27229] hsr_slave_1: entered promiscuous mode [ 2011.869862][T27229] debugfs: 'hsr0' already exists in 'hsr' [ 2011.869890][T27229] Cannot create hsr debugfs directory [ 2014.123779][T17081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2014.147299][T17081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2014.155251][T17081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2014.176079][T17081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2014.200315][T17081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2015.750749][T27494] ptrace attach of "./syz-executor exec"[16021] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 2016.326130][T24509] Bluetooth: hci3: command tx timeout [ 2018.519232][T27500] ptrace attach of "./syz-executor exec"[16021] was attempted by "./syz-executor exec"[27500] [ 2018.813420][T27506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7660'. [ 2018.895701][T24509] Bluetooth: hci3: command tx timeout [ 2018.932171][ T5937] bridge_slave_1: left allmulticast mode [ 2018.932204][ T5937] bridge_slave_1: left promiscuous mode [ 2018.933106][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.005112][ T5937] bridge_slave_0: left allmulticast mode [ 2019.005136][ T5937] bridge_slave_0: left promiscuous mode [ 2019.006772][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.069061][ T5937] bridge_slave_1: left allmulticast mode [ 2019.069097][ T5937] bridge_slave_1: left promiscuous mode [ 2019.069370][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.136090][ T5937] bridge_slave_0: left allmulticast mode [ 2019.136127][ T5937] bridge_slave_0: left promiscuous mode [ 2019.136827][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.843558][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.943467][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2020.025762][ T5937] bond0 (unregistering): Released all slaves [ 2020.314517][T27527] netlink: 51 bytes leftover after parsing attributes in process `syz.7.7667'. [ 2020.333390][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2020.433152][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2020.495258][ T5937] bond0 (unregistering): Released all slaves [ 2020.962862][T24509] Bluetooth: hci3: command tx timeout [ 2023.045676][T24509] Bluetooth: hci3: command tx timeout [ 2023.284360][T27553] CIFS mount error: No usable UNC path provided in device string! [ 2023.284360][T27553] [ 2023.284387][T27553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2023.301960][T27555] ptrace attach of "./syz-executor exec"[16057] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x0d  À  ÿÿÿÿ syzkaller  ûÿÿÿ… *  ÿÿÿÿ ·  {Šøÿ ¼¢ ¦ øÿÿÿ·  · … 3 • [ 2024.883550][T27479] chnl_net:caif_netlink_parms(): no params data found [ 2025.582608][ T5937] hsr_slave_0: left promiscuous mode [ 2025.635561][ T5937] hsr_slave_1: left promiscuous mode [ 2025.636682][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.675952][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2025.852534][ T5937] hsr_slave_0: left promiscuous mode [ 2025.872925][ T5937] hsr_slave_1: left promiscuous mode [ 2025.873915][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.959382][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.210469][T27563] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7677'. [ 2028.228668][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 2028.228686][ T37] audit: type=1326 audit(2027.856:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.228965][ T37] audit: type=1326 audit(2027.856:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.229614][ T37] audit: type=1326 audit(2027.856:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.229957][ T37] audit: type=1326 audit(2027.856:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.230248][ T37] audit: type=1326 audit(2027.856:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.230745][ T37] audit: type=1326 audit(2027.856:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.231014][ T37] audit: type=1326 audit(2027.856:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.231254][ T37] audit: type=1326 audit(2027.856:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.231694][ T37] audit: type=1326 audit(2027.856:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.233650][ T37] audit: type=1326 audit(2027.866:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27582 comm="syz.0.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f5c1f749 code=0x7ffc0000 [ 2028.705907][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 2028.863056][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 2031.324464][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 2031.513290][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 2034.243279][T27609] CIFS mount error: No usable UNC path provided in device string! [ 2034.243279][T27609] [ 2034.243302][T27609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2034.488416][T27479] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.488879][T27479] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.489226][T27479] bridge_slave_0: entered allmulticast mode [ 2034.491186][T27479] bridge_slave_0: entered promiscuous mode [ 2034.546775][T27479] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.546912][T27479] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.547171][T27479] bridge_slave_1: entered allmulticast mode [ 2034.574347][T27479] bridge_slave_1: entered promiscuous mode [ 2036.049649][T27479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2036.162318][T27620] ptrace attach of "./syz-executor exec"[16057] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    [ 2036.606518][T27479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.091818][T17081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2037.118936][T17081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2037.120575][T17081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2037.122024][T17081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2037.151154][T17081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2037.502547][T27479] team0: Port device team_slave_0 added [ 2037.524239][T27479] team0: Port device team_slave_1 added [ 2037.979511][T27479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.979529][T27479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.979553][T27479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2038.017165][T27479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2038.017220][T27479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2038.017305][T27479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2039.270335][T27642] CIFS mount error: No usable UNC path provided in device string! [ 2039.270335][T27642] [ 2039.270416][T27642] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2039.479389][T24509] Bluetooth: hci4: command tx timeout [ 2040.358718][T17081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2040.385938][T17081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2040.387713][T17081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2040.389938][T17081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2040.470061][T26639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2040.617339][T27479] hsr_slave_0: entered promiscuous mode [ 2040.618441][T27479] hsr_slave_1: entered promiscuous mode [ 2040.619115][T27479] debugfs: 'hsr0' already exists in 'hsr' [ 2040.619134][T27479] Cannot create hsr debugfs directory [ 2041.648641][T24509] Bluetooth: hci4: command tx timeout [ 2043.352603][T24509] Bluetooth: hci0: command tx timeout [ 2043.682803][T24509] Bluetooth: hci4: command tx timeout [ 2044.971156][T27676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7705'. [ 2045.491828][T24509] Bluetooth: hci0: command tx timeout [ 2046.462669][T24509] Bluetooth: hci4: command tx timeout [ 2047.529570][T24509] Bluetooth: hci0: command tx timeout [ 2048.170187][T27627] chnl_net:caif_netlink_parms(): no params data found [ 2048.275645][T27703] ptrace attach of "./syz-executor exec"[16057] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    [ 2049.613992][T27714] CIFS mount error: No usable UNC path provided in device string! [ 2049.613992][T27714] [ 2049.614074][T27714] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2049.681808][T24509] Bluetooth: hci0: command tx timeout [ 2052.482819][T27740] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7722'. [ 2052.482843][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7722'. [ 2052.682064][T27735] team0: Port device ip6gre0 removed [ 2052.712815][T27008] skbuff: skb_under_panic: text:ffffffff899efa98 len:136 put:40 head:ffff8880381a1000 data:ffff8880381a0fe8 tail:0x70 end:0x6c0 dev:team0 [ 2052.713619][T27008] ------------[ cut here ]------------ [ 2052.713629][T27008] kernel BUG at net/core/skbuff.c:213! [ 2052.713752][T27008] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2052.713787][T27008] CPU: 1 UID: 0 PID: 27008 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2052.713809][T27008] Tainted: [L]=SOFTLOCKUP [ 2052.713815][T27008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2052.713827][T27008] Workqueue: mld mld_ifc_work [ 2052.713886][T27008] RIP: 0010:skb_panic+0x157/0x160 [ 2052.713912][T27008] Code: c7 60 83 df 8b 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6b f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2052.713932][T27008] RSP: 0018:ffffc90000b67440 EFLAGS: 00010282 [ 2052.713954][T27008] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 69a52eea222d1900 [ 2052.713966][T27008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.713975][T27008] RBP: 00000000000006c0 R08: 0000000000000000 R09: 0000000000000000 [ 2052.713984][T27008] R10: dffffc0000000000 R11: fffff5200016ce35 R12: ffff88808e759010 [ 2052.713997][T27008] R13: ffff8880381a1000 R14: ffff8880381a0fe8 R15: 0000000000000070 [ 2052.714008][T27008] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2052.714021][T27008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.714032][T27008] CR2: 0000001b30a1aff8 CR3: 000000005a65c000 CR4: 00000000003526f0 [ 2052.714046][T27008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2052.714055][T27008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2052.714066][T27008] Call Trace: [ 2052.714073][T27008] [ 2052.714080][T27008] ? ip6gre_header+0xc8/0x790 [ 2052.714105][T27008] ? ip6gre_header+0xc8/0x790 [ 2052.714127][T27008] skb_push+0xc3/0xe0 [ 2052.714151][T27008] ip6gre_header+0xc8/0x790 [ 2052.714176][T27008] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2052.714197][T27008] ? neigh_connected_output+0x1ea/0x460 [ 2052.714215][T27008] ? __pfx_ip6gre_header+0x10/0x10 [ 2052.714238][T27008] ? neigh_connected_output+0x1ea/0x460 [ 2052.714258][T27008] ? read_seqbegin+0xae/0x1e0 [ 2052.714273][T27008] ? neigh_connected_output+0x1ea/0x460 [ 2052.714311][T27008] ? lockdep_hardirqs_on+0x7b/0x110 [ 2052.714334][T27008] ? read_seqbegin+0x1c3/0x1e0 [ 2052.714355][T27008] ? __pfx_ip6gre_header+0x10/0x10 [ 2052.714393][T27008] neigh_connected_output+0x286/0x460 [ 2052.714422][T27008] ? ip6_output+0x126/0x550 [ 2052.714444][T27008] ip6_output+0x340/0x550 [ 2052.714468][T27008] NF_HOOK+0x9e/0x380 [ 2052.714492][T27008] ? NF_HOOK+0x101/0x380 [ 2052.714516][T27008] ? __pfx_NF_HOOK+0x10/0x10 [ 2052.714540][T27008] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2052.714559][T27008] ? __pfx_dst_output+0x10/0x10 [ 2052.714585][T27008] ? icmp6_dst_alloc+0x2b4/0x460 [ 2052.714609][T27008] mld_sendpack+0x8d4/0xe60 [ 2052.714639][T27008] ? mld_sendpack+0x1e7/0xe60 [ 2052.714666][T27008] ? __pfx_mld_sendpack+0x10/0x10 [ 2052.714698][T27008] mld_ifc_work+0x83e/0xd60 [ 2052.714724][T27008] ? process_scheduled_works+0x9ef/0x1770 [ 2052.714743][T27008] process_scheduled_works+0xad1/0x1770 [ 2052.714771][T27008] ? __pfx_process_scheduled_works+0x10/0x10 [ 2052.714788][T27008] ? do_raw_spin_lock+0x121/0x290 [ 2052.714813][T27008] worker_thread+0x8a0/0xda0 [ 2052.714837][T27008] ? __kthread_parkme+0x7b/0x200 [ 2052.714860][T27008] kthread+0x711/0x8a0 [ 2052.714883][T27008] ? __pfx_worker_thread+0x10/0x10 [ 2052.714901][T27008] ? __pfx_kthread+0x10/0x10 [ 2052.714922][T27008] ? rt_spin_unlock+0x150/0x200 [ 2052.714945][T27008] ? rt_spin_unlock+0x161/0x200 [ 2052.714988][T27008] ? __pfx_kthread+0x10/0x10 [ 2052.715021][T27008] ret_from_fork+0x510/0xa50 [ 2052.715049][T27008] ? __pfx_ret_from_fork+0x10/0x10 [ 2052.715071][T27008] ? __switch_to+0xc9e/0x1480 [ 2052.715097][T27008] ? __pfx_kthread+0x10/0x10 [ 2052.715119][T27008] ret_from_fork_asm+0x1a/0x30 [ 2052.715150][T27008] [ 2052.715162][T27008] Modules linked in: [ 2052.715180][T27008] ---[ end trace 0000000000000000 ]--- [ 2052.715192][T27008] RIP: 0010:skb_panic+0x157/0x160 [ 2052.715208][T27008] Code: c7 60 83 df 8b 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 2e 6b f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2052.715224][T27008] RSP: 0018:ffffc90000b67440 EFLAGS: 00010282 [ 2052.715238][T27008] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 69a52eea222d1900 [ 2052.715250][T27008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.715260][T27008] RBP: 00000000000006c0 R08: 0000000000000000 R09: 0000000000000000 [ 2052.715269][T27008] R10: dffffc0000000000 R11: fffff5200016ce35 R12: ffff88808e759010 [ 2052.715282][T27008] R13: ffff8880381a1000 R14: ffff8880381a0fe8 R15: 0000000000000070 [ 2052.715293][T27008] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2052.715307][T27008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.715318][T27008] CR2: 0000001b30a1aff8 CR3: 000000005a65c000 CR4: 00000000003526f0 [ 2052.715332][T27008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2052.715342][T27008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2052.715357][T27008] Kernel panic - not syncing: Fatal exception [ 2052.715971][T27008] Kernel Offset: disabled