last executing test programs: 22m19.58433961s ago: executing program 3 (id=118): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x6}) 22m18.971656523s ago: executing program 3 (id=121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a60000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 22m17.94599348s ago: executing program 3 (id=126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 22m16.964308233s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0xd01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4081, 0xff1}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000100)=""/10, 0xa}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x1}], 0x1, 0x12022, &(0x7f0000000080)={0x77359400}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) 22m15.801382564s ago: executing program 3 (id=137): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 22m14.985569335s ago: executing program 3 (id=139): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x201dc8, 0x2000, 0x40000100}, 0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000640)={{0x80}, 'port1\x00', 0xf3, 0x1b0c07, 0xfffffffa, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x6, 0x8}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 21m59.659516414s ago: executing program 32 (id=139): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x201dc8, 0x2000, 0x40000100}, 0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000640)={{0x80}, 'port1\x00', 0xf3, 0x1b0c07, 0xfffffffa, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x6, 0x8}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 16m43.264458154s ago: executing program 1 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="150500000000ffdbdf25030000"], 0x140}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x20414}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) 16m42.5715727s ago: executing program 1 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c61737400000000080003400000"], 0xb4}}, 0x20050800) 16m42.081363267s ago: executing program 1 (id=1229): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) close(r1) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) chdir(0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 16m40.671400434s ago: executing program 1 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x9, &(0x7f00000003c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) 16m40.171496499s ago: executing program 1 (id=1242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 16m39.717678859s ago: executing program 1 (id=1245): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 16m23.610935588s ago: executing program 33 (id=1245): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 15m7.891310931s ago: executing program 2 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 15m7.290468783s ago: executing program 2 (id=1552): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x40}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0xa, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 15m5.948723753s ago: executing program 2 (id=1555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 15m4.945468489s ago: executing program 2 (id=1557): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x9, "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"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r4}, 0x8) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 15m4.148686613s ago: executing program 2 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0xfff2, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0xfbc, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xf84, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x7, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x5, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0xefd, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbf, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0x40000001, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x8, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x9, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x67c4, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x8, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xfffffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x21343989, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x23c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xfffffffffffffe54, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x2}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 15m3.471709577s ago: executing program 2 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'tunl0\x00', 0x1000}) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) 14m48.115011236s ago: executing program 34 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'tunl0\x00', 0x1000}) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) 2m49.341845458s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 2m19.04431756s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1m52.785356816s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1m28.882874583s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1m8.755302696s ago: executing program 4 (id=4101): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x52, 0x0, &(0x7f0000000180)="09f131c089f3c5d7b91366eeca748db614ac499e4be4e58d6f08a83eb671f0e01e3bc76633619b131cb8f66df0e37978323dd9f82ddfadfea672763885853cd3a47e1114e55c8d40312381ec2c3f44bc3ddc", 0x0, 0x3, 0x0, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000001c0)="b9ff03076003008cb89e08ec86dd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.943931954s ago: executing program 4 (id=4104): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=""/185, 0x0, 0xb9, 0x1, 0x3}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m7.164247846s ago: executing program 4 (id=4106): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1m6.666693876s ago: executing program 4 (id=4108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) 1m3.944874413s ago: executing program 4 (id=4113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x10, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 1m3.284616371s ago: executing program 4 (id=4117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 52.908042164s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 47.545600828s ago: executing program 35 (id=4117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 33.955386292s ago: executing program 5 (id=4157): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0x8, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c420) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 31.471321463s ago: executing program 5 (id=4160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xfffffffd, 0x25dfdbfd, {{@in=@multicast2, @in=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@mcast1, 0x1000000, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0xbdf}, {0x0, 0x3, 0xb}, 0x70bd27, 0x3ffc, 0xa, 0x0, 0x0, 0x44}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 30.230334018s ago: executing program 5 (id=4162): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xa00002, &(0x7f0000000880), 0x64, 0x50e, &(0x7f00000008c0)="$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") socket(0x840000000002, 0x3, 0x100) 29.134144643s ago: executing program 5 (id=4165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1f) 28.471310614s ago: executing program 5 (id=4167): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x5f9117fecd4dbe6c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x5ae7, 0x0, 0x0, 0x0, 0x0) 17.774213332s ago: executing program 7 (id=4172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 17.183303608s ago: executing program 7 (id=4173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x1c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000f00000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x134}}, 0x0) 16.566579299s ago: executing program 7 (id=4174): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5ba6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80e2101e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf443ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b600", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x102, 0x8000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x5, {0x8, 0x1000, 0x0, {0x1, 0x812, 0xfff, 0x2, 0x7ff, 0xc, 0x4, 0x1, 0x1000, 0x1000, 0x7fffffff, 0xee00, 0x0, 0x8, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.929932516s ago: executing program 7 (id=4175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 15.04561201s ago: executing program 7 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) 11.011463377s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 6.579994337s ago: executing program 7 (id=4181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$midi(r4, &(0x7f0000000380)=""/62, 0x3e) 6.578641084s ago: executing program 8 (id=4142): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=""/185, 0x0, 0xb9, 0x1, 0x3}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) 6.227326902s ago: executing program 8 (id=4182): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000080000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x8, 0x0, &(0x7f0000000640)="e0b9547ed387dbe9", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.662211865s ago: executing program 8 (id=4184): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 4.990993206s ago: executing program 8 (id=4185): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 4.075532452s ago: executing program 6 (id=4187): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x6, 0x4, 0x4, 0xa, 0x900}, 0x48) 3.699392574s ago: executing program 8 (id=4188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) 3.308200411s ago: executing program 6 (id=4189): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063019f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 2.954856288s ago: executing program 8 (id=4190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) 2.65949785s ago: executing program 6 (id=4191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xfffffffd, 0x25dfdbfd, {{@in=@multicast2, @in=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@mcast1, 0x1000000, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0xbdf}, {0x0, 0x3, 0xb}, 0x70bd27, 0x3ffc, 0xa, 0x0, 0x0, 0x44}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 1.913700606s ago: executing program 6 (id=4192): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x1003fff, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xf}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 1.114384259s ago: executing program 6 (id=4193): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff02000000000000000000000000000122ae99794e20ef683f1b"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) 47.664746ms ago: executing program 6 (id=4194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 0s ago: executing program 5 (id=4167): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x5f9117fecd4dbe6c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x5ae7, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nd_slave_0): Enslaving as an active interface with an up link [ 1332.440394][T16585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.974901][T16585] team0: Port device team_slave_0 added [ 1333.086590][T16585] team0: Port device team_slave_1 added [ 1333.279409][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1333.386666][T10697] Bluetooth: hci2: command tx timeout [ 1333.511619][T16585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.519226][T16585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.545844][T16585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.787687][T16585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.794817][T16585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.821343][T16585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.016505][T16585] hsr_slave_0: entered promiscuous mode [ 1334.026899][T16585] hsr_slave_1: entered promiscuous mode [ 1335.468326][T10697] Bluetooth: hci2: command tx timeout [ 1335.483011][T16585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1335.506248][T16585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1335.662101][T16585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1335.765957][T16585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1336.068780][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1336.118199][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1336.148815][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1336.911865][T16585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.032385][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3603'. [ 1337.101434][T16585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.245617][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.253311][T14939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.440517][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.448207][T14939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.545538][T10697] Bluetooth: hci2: command tx timeout [ 1338.945252][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1339.727765][T16585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.128056][T16585] veth0_vlan: entered promiscuous mode [ 1340.214032][T16585] veth1_vlan: entered promiscuous mode [ 1340.561134][T16585] veth0_macvtap: entered promiscuous mode [ 1340.641624][T16585] veth1_macvtap: entered promiscuous mode [ 1340.809021][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1340.852335][T16585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.870697][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1340.918635][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1340.963807][T16585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.052900][T16585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.062100][T16585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.071221][T16585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.080297][T16585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.145815][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1346.182692][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1346.218439][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 1347.439139][T16733] netlink: 'syz.6.3630': attribute type 1 has an invalid length. [ 1347.852241][T16733] veth7: entered promiscuous mode [ 1347.872216][T16733] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1347.945280][T14939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.953397][T14939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.015022][T14649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.023568][T14649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.882447][T14649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.061251][T14649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.084614][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1349.275462][T14649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.583654][T14649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.950733][T14649] bridge_slave_1: left allmulticast mode [ 1349.956687][T14649] bridge_slave_1: left promiscuous mode [ 1349.963678][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.062824][T14649] bridge_slave_0: left allmulticast mode [ 1350.069049][T14649] bridge_slave_0: left promiscuous mode [ 1350.075725][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.729277][T14649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.789584][T14649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.828803][T14649] bond0 (unregistering): Released all slaves [ 1351.292746][T14649] hsr_slave_0: left promiscuous mode [ 1351.328120][T14649] hsr_slave_1: left promiscuous mode [ 1351.336413][T14649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.346739][T14649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.360361][T14649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.368161][T14649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.448686][T14649] veth1_macvtap: left promiscuous mode [ 1351.454517][T14649] veth0_macvtap: left promiscuous mode [ 1351.460751][T14649] veth1_vlan: left promiscuous mode [ 1351.466343][T14649] veth0_vlan: left promiscuous mode [ 1352.149645][T14649] team0 (unregistering): Port device team_slave_1 removed [ 1352.179765][T14649] team0 (unregistering): Port device team_slave_0 removed [ 1353.434578][T16755] loop4: detected capacity change from 0 to 256 [ 1353.766583][T16755] FAT-fs (loop4): Directory bread(block 64) failed [ 1353.773734][T16755] FAT-fs (loop4): Directory bread(block 65) failed [ 1353.781167][T16755] FAT-fs (loop4): Directory bread(block 66) failed [ 1353.788156][T16755] FAT-fs (loop4): Directory bread(block 67) failed [ 1353.795093][T16755] FAT-fs (loop4): Directory bread(block 68) failed [ 1353.802051][T16755] FAT-fs (loop4): Directory bread(block 69) failed [ 1353.809228][T16755] FAT-fs (loop4): Directory bread(block 70) failed [ 1353.816018][T16755] FAT-fs (loop4): Directory bread(block 71) failed [ 1353.823112][T16755] FAT-fs (loop4): Directory bread(block 72) failed [ 1353.830204][T16755] FAT-fs (loop4): Directory bread(block 73) failed [ 1354.091753][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1354.130322][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1354.178973][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1354.251914][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.270971][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.281330][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.328927][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.347066][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1355.126811][T16771] netlink: 'syz.5.3643': attribute type 1 has an invalid length. [ 1355.223315][T16760] chnl_net:caif_netlink_parms(): no params data found [ 1355.413222][T16771] veth17: entered promiscuous mode [ 1355.433104][T16771] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 1355.929004][T16783] IPv6: Can't replace route, no match found [ 1356.418418][ T5801] Bluetooth: hci2: command tx timeout [ 1356.492883][T16760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.510314][T16760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.519673][T16760] bridge_slave_0: entered allmulticast mode [ 1356.529555][T16760] bridge_slave_0: entered promiscuous mode [ 1356.591632][T16760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.601287][T16760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.612351][T16760] bridge_slave_1: entered allmulticast mode [ 1356.622257][T16760] bridge_slave_1: entered promiscuous mode [ 1358.498479][ T5801] Bluetooth: hci2: command tx timeout [ 1358.520639][T16760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.591876][T16760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.941348][T16760] team0: Port device team_slave_0 added [ 1359.005316][T16760] team0: Port device team_slave_1 added [ 1359.277281][T16760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.284696][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.311380][T16760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.441782][T16760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.449159][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.476146][T16760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.622842][T16855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3652'. [ 1360.143495][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1360.179325][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1360.200312][T16760] hsr_slave_0: entered promiscuous mode [ 1360.209367][T16760] hsr_slave_1: entered promiscuous mode [ 1360.269791][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1360.577943][ T5801] Bluetooth: hci2: command tx timeout [ 1361.738544][T16866] netlink: 'syz.5.3657': attribute type 1 has an invalid length. [ 1361.882416][T16760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1361.918560][T16760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1361.945896][T16760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1361.969215][T16760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1362.082360][T16866] veth19: entered promiscuous mode [ 1362.098387][T16866] bond8: (slave veth19): Enslaving as a backup interface with a down link [ 1362.658027][ T5801] Bluetooth: hci2: command tx timeout [ 1363.393954][T16760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.150337][T16760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.757926][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.765515][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.146792][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.154529][T15227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.830799][T16760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.122232][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1368.220877][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1368.308068][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1368.331395][T16760] veth0_vlan: entered promiscuous mode [ 1368.444932][T16760] veth1_vlan: entered promiscuous mode [ 1368.659473][T16760] veth0_macvtap: entered promiscuous mode [ 1368.729056][T16760] veth1_macvtap: entered promiscuous mode [ 1368.761609][T16954] netlink: 'syz.6.3670': attribute type 1 has an invalid length. [ 1369.058528][T16954] veth9: entered promiscuous mode [ 1369.078423][T16954] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1369.101634][T16760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.212073][T16760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.289877][T16760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.299072][T16760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.308163][T16760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.317299][T16760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.833138][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3680'. [ 1374.434059][T16999] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1375.149371][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1375.200956][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1375.220974][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1376.458038][T14828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.466078][T14828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.576024][T17008] netlink: 'syz.5.3683': attribute type 1 has an invalid length. [ 1376.689398][T14939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.697543][T14939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.873844][T17008] veth21: entered promiscuous mode [ 1376.894047][T17008] bond9: (slave veth21): Enslaving as a backup interface with a down link [ 1377.325280][T14939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.526832][T14939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.753604][T14939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.984034][T14939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.497550][T14939] bridge_slave_1: left allmulticast mode [ 1378.499005][T17013] could not allocate digest TFM handle sm3 [ 1378.503380][T14939] bridge_slave_1: left promiscuous mode [ 1378.504314][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.648650][T14939] bridge_slave_0: left allmulticast mode [ 1378.654590][T14939] bridge_slave_0: left promiscuous mode [ 1378.661496][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.179374][T14939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.229203][T14939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.283497][T14939] bond0 (unregistering): Released all slaves [ 1379.938413][T14939] hsr_slave_0: left promiscuous mode [ 1379.957533][T14939] hsr_slave_1: left promiscuous mode [ 1379.965770][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.973720][T14939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.998530][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.006273][T14939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.056051][T14939] veth1_macvtap: left promiscuous mode [ 1380.062886][T14939] veth0_macvtap: left promiscuous mode [ 1380.068920][T14939] veth1_vlan: left promiscuous mode [ 1380.074502][T14939] veth0_vlan: left promiscuous mode [ 1380.703522][T14939] team0 (unregistering): Port device team_slave_1 removed [ 1380.748084][T14939] team0 (unregistering): Port device team_slave_0 removed [ 1381.860478][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1381.939613][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1381.950239][T10697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1381.964576][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1381.964918][T10697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1381.985581][T10697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1382.005717][T10697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1382.036373][T10697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1382.339247][T17046] netlink: 'syz.7.3695': attribute type 1 has an invalid length. [ 1382.703576][T17046] veth9: entered promiscuous mode [ 1382.721329][T17046] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 1383.720410][T17039] chnl_net:caif_netlink_parms(): no params data found [ 1383.788735][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3697'. [ 1384.115310][ T5801] Bluetooth: hci2: command tx timeout [ 1385.271198][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.282465][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.290435][T17039] bridge_slave_0: entered allmulticast mode [ 1385.300489][T17039] bridge_slave_0: entered promiscuous mode [ 1385.438735][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.446202][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.454231][T17039] bridge_slave_1: entered allmulticast mode [ 1385.462881][T17039] bridge_slave_1: entered promiscuous mode [ 1385.910642][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.967926][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.177796][ T5801] Bluetooth: hci2: command tx timeout [ 1386.190892][T17039] team0: Port device team_slave_0 added [ 1386.288375][T17039] team0: Port device team_slave_1 added [ 1386.592722][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.601045][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.629866][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.203209][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.210592][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.242041][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.267395][ T5801] Bluetooth: hci2: command tx timeout [ 1389.150101][T17039] hsr_slave_0: entered promiscuous mode [ 1389.160510][T17039] hsr_slave_1: entered promiscuous mode [ 1389.568640][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1389.668211][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1389.818762][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1390.338332][ T5801] Bluetooth: hci2: command tx timeout [ 1390.932145][T17039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1391.022837][T17039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1391.129150][T17039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1391.259393][T17039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1391.560978][T17093] vlan2: entered allmulticast mode [ 1392.376179][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1392.383559][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.421048][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.494283][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.578533][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.586136][T14649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.726824][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.734517][T14649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.930003][T17039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1393.304699][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1393.363132][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1393.426401][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1394.622693][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.019002][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 1395.314508][T17039] veth0_vlan: entered promiscuous mode [ 1395.468190][T17039] veth1_vlan: entered promiscuous mode [ 1395.744809][T17039] veth0_macvtap: entered promiscuous mode [ 1395.878213][T17039] veth1_macvtap: entered promiscuous mode [ 1396.089141][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.225482][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.354248][T17039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.363548][T17039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.372721][T17039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.381949][T17039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.138307][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1398.138361][ T30] audit: type=1326 audit(1750839835.497:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.6.3732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1398.225330][ T30] audit: type=1326 audit(1750839835.527:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.6.3732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1398.664554][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3733'. [ 1399.528232][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1399.585233][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1399.658815][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1404.025722][T14825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.034163][T14825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.254782][T14828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.263266][T14828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.249008][T14939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.722708][T14939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.444657][T14939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.705133][T14939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.470913][T14939] bridge_slave_1: left allmulticast mode [ 1409.476837][T14939] bridge_slave_1: left promiscuous mode [ 1409.483571][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.548220][T14939] bridge_slave_0: left allmulticast mode [ 1409.554150][T14939] bridge_slave_0: left promiscuous mode [ 1409.560994][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.149485][T14939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.196184][T14939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.226498][T14939] bond0 (unregistering): Released all slaves [ 1410.655180][T14939] hsr_slave_0: left promiscuous mode [ 1410.663576][T14939] hsr_slave_1: left promiscuous mode [ 1410.683349][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.693649][T14939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.707346][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.715037][T14939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.742294][T14939] veth1_macvtap: left promiscuous mode [ 1410.748534][T14939] veth0_macvtap: left promiscuous mode [ 1410.754448][T14939] veth1_vlan: left promiscuous mode [ 1410.760108][T14939] veth0_vlan: left promiscuous mode [ 1411.441974][T14939] team0 (unregistering): Port device team_slave_1 removed [ 1411.559915][T14939] team0 (unregistering): Port device team_slave_0 removed [ 1412.918961][T10697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1412.928399][T10697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1412.937457][T10697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1412.955510][T10697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1412.968282][T10697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1413.566209][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3753'. [ 1414.579354][T17279] chnl_net:caif_netlink_parms(): no params data found [ 1415.058241][T10697] Bluetooth: hci2: command tx timeout [ 1416.280472][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.288097][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.295684][T17279] bridge_slave_0: entered allmulticast mode [ 1416.305753][T17279] bridge_slave_0: entered promiscuous mode [ 1416.430335][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.437992][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.445534][T17279] bridge_slave_1: entered allmulticast mode [ 1416.453921][T17279] bridge_slave_1: entered promiscuous mode [ 1416.851003][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.910115][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.137466][T10697] Bluetooth: hci2: command tx timeout [ 1417.334395][T17279] team0: Port device team_slave_0 added [ 1417.865392][T17279] team0: Port device team_slave_1 added [ 1419.217758][T10697] Bluetooth: hci2: command tx timeout [ 1419.592527][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.600090][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.626919][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.763538][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.770898][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.799138][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.313096][T17279] hsr_slave_0: entered promiscuous mode [ 1420.322008][T17279] hsr_slave_1: entered promiscuous mode [ 1421.347695][T10697] Bluetooth: hci2: command tx timeout [ 1422.746839][T17374] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3765'. [ 1422.871630][T17374] tipc: Started in network mode [ 1422.877021][T17374] tipc: Node identity ac14140f, cluster identity 4711 [ 1422.886713][T17374] tipc: New replicast peer: 255.255.255.255 [ 1422.895488][T17374] tipc: Enabled bearer , priority 10 [ 1423.636925][T17279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1423.696260][T17279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1423.723839][T17279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1423.841252][T17279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1424.008809][T10513] tipc: Node number set to 2886997007 [ 1424.851003][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.973324][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.038555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.046284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.327010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.334697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.504901][T17279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1425.516072][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.793791][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.889273][ T5856] IPVS: starting estimator thread 0... [ 1428.989804][T17470] IPVS: using max 240 ests per chain, 12000 per kthread [ 1428.994539][T17472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.267864][T17279] veth0_vlan: entered promiscuous mode [ 1429.385437][T17279] veth1_vlan: entered promiscuous mode [ 1430.776606][T17279] veth0_macvtap: entered promiscuous mode [ 1431.158692][T17279] veth1_macvtap: entered promiscuous mode [ 1431.705213][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.800425][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.902001][T17279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.911458][T17279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.920771][T17279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.929966][T17279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.126250][T17535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1438.398289][T14828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.406535][T14828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.526136][T14613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.535109][T14613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.406175][T17638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.422816][T14832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.110193][T14832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.362817][T14832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.541734][T14832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.989039][T14832] bridge_slave_1: left allmulticast mode [ 1441.995034][T14832] bridge_slave_1: left promiscuous mode [ 1442.002100][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.068611][T14832] bridge_slave_0: left allmulticast mode [ 1442.074540][T14832] bridge_slave_0: left promiscuous mode [ 1442.081368][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.562315][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1442.584084][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1442.594799][T14832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.598488][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1442.636496][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1442.648926][T14832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.670206][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1442.728664][T14832] bond0 (unregistering): Released all slaves [ 1443.419728][T14832] hsr_slave_0: left promiscuous mode [ 1443.433708][T14832] hsr_slave_1: left promiscuous mode [ 1443.445268][T14832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.453416][T14832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.485097][T14832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.493403][T14832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.533143][T14832] veth1_macvtap: left promiscuous mode [ 1443.539272][T14832] veth0_macvtap: left promiscuous mode [ 1443.547880][T14832] veth1_vlan: left promiscuous mode [ 1443.553483][T14832] veth0_vlan: left promiscuous mode [ 1444.133013][T14832] team0 (unregistering): Port device team_slave_1 removed [ 1444.164580][T14832] team0 (unregistering): Port device team_slave_0 removed [ 1444.494184][ T6447] syz_tun (unregistering): left allmulticast mode [ 1444.605905][ T6447] bond0: (slave syz_tun): Releasing backup interface [ 1444.702643][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1444.712491][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1444.721943][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1444.784497][ T5801] Bluetooth: hci2: command tx timeout [ 1445.164407][T14832] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.174693][T14832] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.359684][T14832] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.369958][T14832] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.467813][T17641] chnl_net:caif_netlink_parms(): no params data found [ 1445.520998][T14832] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.532164][T14832] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.554748][T10697] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1445.564062][T10697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1445.587848][T10697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1445.637574][T14832] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.647816][T14832] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.718454][T10697] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1445.758030][T10697] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1446.425080][T14832] bridge_slave_1: left allmulticast mode [ 1446.431195][T14832] bridge_slave_1: left promiscuous mode [ 1446.437963][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.450630][T14832] bridge_slave_0: left promiscuous mode [ 1446.457781][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.666764][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'. [ 1446.821582][T10697] Bluetooth: hci2: command tx timeout [ 1447.004053][T14832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.057381][T14832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.103239][T14832] bond0 (unregistering): Released all slaves [ 1447.120098][T14832] bond1 (unregistering): Released all slaves [ 1447.136924][T14832] bond2 (unregistering): Released all slaves [ 1447.254540][T14832] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1447.284396][T14832] bond3 (unregistering): Released all slaves [ 1447.369599][T14832] bond4 (unregistering): (slave veth9): Releasing backup interface [ 1447.420672][T14832] bond4 (unregistering): Released all slaves [ 1447.506672][T14832] bond5 (unregistering): (slave veth11): Releasing backup interface [ 1447.551478][T14832] bond5 (unregistering): Released all slaves [ 1447.629672][T14832] bond6 (unregistering): (slave veth13): Releasing backup interface [ 1447.661469][T14832] bond6 (unregistering): Released all slaves [ 1447.694851][T14832] bond7 (unregistering): (slave veth17): Releasing backup interface [ 1447.789799][T14832] bond7 (unregistering): Released all slaves [ 1447.864545][T10697] Bluetooth: hci4: command tx timeout [ 1447.872203][T14832] bond8 (unregistering): (slave veth19): Releasing backup interface [ 1447.895546][T14832] bond8 (unregistering): Released all slaves [ 1447.929298][T14832] bond9 (unregistering): (slave veth21): Releasing backup interface [ 1447.978191][T14832] bond9 (unregistering): Released all slaves [ 1448.356219][T17659] chnl_net:caif_netlink_parms(): no params data found [ 1448.900916][T10697] Bluetooth: hci2: command tx timeout [ 1449.240739][T14832] hsr_slave_0: left promiscuous mode [ 1449.265540][T14832] hsr_slave_1: left promiscuous mode [ 1449.274168][T14832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.339208][T14832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.346991][T14832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.481645][T14832] veth1_macvtap: left promiscuous mode [ 1449.487708][T14832] veth0_macvtap: left promiscuous mode [ 1449.493625][T14832] veth1_vlan: left promiscuous mode [ 1449.499486][T14832] veth0_vlan: left promiscuous mode [ 1450.057597][T10697] Bluetooth: hci4: command tx timeout [ 1451.078527][T10697] Bluetooth: hci2: command tx timeout [ 1452.133368][T14832] team0 (unregistering): Port device team_slave_1 removed [ 1452.156920][T10697] Bluetooth: hci4: command tx timeout [ 1452.160093][T17744] netlink: 'syz.6.3808': attribute type 4 has an invalid length. [ 1452.173636][T14832] team0 (unregistering): Port device team_slave_0 removed [ 1452.434586][T17641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.442772][T17641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.453446][T17641] bridge_slave_0: entered allmulticast mode [ 1452.463193][T17641] bridge_slave_0: entered promiscuous mode [ 1452.720145][T17641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.729594][T17641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.737838][T17641] bridge_slave_1: entered allmulticast mode [ 1452.748630][T17641] bridge_slave_1: entered promiscuous mode [ 1453.103414][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.172734][T14832] IPVS: stop unused estimator thread 0... [ 1453.229940][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.754390][T17641] team0: Port device team_slave_0 added [ 1453.799856][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.807728][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.815462][T17659] bridge_slave_0: entered allmulticast mode [ 1453.825190][T17659] bridge_slave_0: entered promiscuous mode [ 1453.829619][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.837896][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.858592][T17641] team0: Port device team_slave_1 added [ 1453.983139][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.993441][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.001086][T17659] bridge_slave_1: entered allmulticast mode [ 1454.010576][T17659] bridge_slave_1: entered promiscuous mode [ 1454.033235][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.040643][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.067021][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.187931][T10697] Bluetooth: hci4: command tx timeout [ 1454.201972][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.209218][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.235634][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.298789][T17659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.371843][T17659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.664549][T17659] team0: Port device team_slave_0 added [ 1454.787791][T17659] team0: Port device team_slave_1 added [ 1454.898202][T17641] hsr_slave_0: entered promiscuous mode [ 1454.907383][T17641] hsr_slave_1: entered promiscuous mode [ 1455.102938][T17659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.110135][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.136641][T17659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.296430][T17659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.303786][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.331170][T17659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.865907][T17659] hsr_slave_0: entered promiscuous mode [ 1455.874597][T17659] hsr_slave_1: entered promiscuous mode [ 1455.884046][T17659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.892137][T17659] Cannot create hsr debugfs directory [ 1456.856584][T17641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1456.948658][T17641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1457.024561][T17772] netlink: 'syz.4.3818': attribute type 4 has an invalid length. [ 1457.064412][T17641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1457.148976][T17641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1458.973995][T17659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1459.426234][T17659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1459.723300][T17659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1459.866308][T17659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1459.945094][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.213681][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.229338][T17840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3823'. [ 1460.319128][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.326708][T14631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.434698][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.442417][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.108283][T17659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.183803][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3824'. [ 1461.262806][T17659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.368442][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.376005][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.477271][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.484834][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.412956][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.328201][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.679753][T17659] veth0_vlan: entered promiscuous mode [ 1463.779228][T17659] veth1_vlan: entered promiscuous mode [ 1463.779918][T17870] netlink: 'syz.4.3829': attribute type 4 has an invalid length. [ 1464.088673][T17659] veth0_macvtap: entered promiscuous mode [ 1464.129638][T17659] veth1_macvtap: entered promiscuous mode [ 1464.280401][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.352166][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.441304][T17659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.451763][T17659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.460946][T17659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.470118][T17659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.900505][T17641] veth0_vlan: entered promiscuous mode [ 1465.012703][T17641] veth1_vlan: entered promiscuous mode [ 1465.342655][T17641] veth0_macvtap: entered promiscuous mode [ 1465.451761][T17641] veth1_macvtap: entered promiscuous mode [ 1465.625701][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.749941][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.911135][T17641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.920414][T17641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.929656][T17641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.940770][T17641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.367459][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1470.410351][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1471.530448][T17980] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 1471.732699][T17980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1471.876248][T17980] veth7: entered promiscuous mode [ 1472.371231][T14611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.379443][T14611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.534693][T15037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.543841][T15037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.762903][T17993] loop4: detected capacity change from 0 to 1024 [ 1472.850161][T17993] EXT4-fs: Ignoring removed nobh option [ 1472.856328][T17993] EXT4-fs: Ignoring removed oldalloc option [ 1472.862822][T17993] EXT4-fs: Ignoring removed bh option [ 1472.948289][T17993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1473.324932][T14611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.397704][ T5856] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1473.430494][T15037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.438847][T15037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.459027][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3845'. [ 1473.528933][T14611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.598558][T15037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.600901][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.606678][T15037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.624676][ T5856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1473.769578][T14611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.798934][ T5856] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1473.810085][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1473.819786][ T5856] usb 5-1: SerialNumber: syz [ 1473.976943][T14611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.083837][ T5856] usb 5-1: 0:2 : does not exist [ 1474.090271][ T5856] usb 5-1: unit 5: unexpected type 0x09 [ 1474.277919][ T5856] usb 5-1: USB disconnect, device number 11 [ 1474.287697][T14611] bridge_slave_1: left allmulticast mode [ 1474.293725][T14611] bridge_slave_1: left promiscuous mode [ 1474.300524][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.332791][T14611] bridge_slave_0: left allmulticast mode [ 1474.339226][T14611] bridge_slave_0: left promiscuous mode [ 1474.345932][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.834165][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1474.927333][T14611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.956731][T14611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.007425][T14611] bond0 (unregistering): Released all slaves [ 1475.469298][T14611] hsr_slave_0: left promiscuous mode [ 1475.497843][T14611] hsr_slave_1: left promiscuous mode [ 1475.506031][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.514685][T14611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.543956][T14611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.552197][T14611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.618260][T14611] veth1_macvtap: left promiscuous mode [ 1475.624054][T14611] veth0_macvtap: left promiscuous mode [ 1475.631670][T14611] veth1_vlan: left promiscuous mode [ 1475.637359][T14611] veth0_vlan: left promiscuous mode [ 1476.405473][T14611] team0 (unregistering): Port device team_slave_1 removed [ 1476.450802][T14611] team0 (unregistering): Port device team_slave_0 removed [ 1477.927569][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1477.943759][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1477.956113][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1477.985542][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1477.997510][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1478.694395][T18025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3849'. [ 1479.123588][T18025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.132451][T18025] batadv_slave_0: entered promiscuous mode [ 1479.524274][T18031] netlink: 'syz.6.3852': attribute type 1 has an invalid length. [ 1479.560261][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1479.575306][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1479.870413][T18035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1480.061042][T18020] chnl_net:caif_netlink_parms(): no params data found [ 1480.099439][T10697] Bluetooth: hci4: command tx timeout [ 1480.476644][T18044] netlink: 'syz.4.3855': attribute type 4 has an invalid length. [ 1481.490311][T18020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.498462][T18020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.506243][T18020] bridge_slave_0: entered allmulticast mode [ 1481.515895][T18020] bridge_slave_0: entered promiscuous mode [ 1482.296626][T10697] Bluetooth: hci4: command tx timeout [ 1482.354102][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.365007][T18020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.373974][T18020] bridge_slave_1: entered allmulticast mode [ 1482.383998][T18020] bridge_slave_1: entered promiscuous mode [ 1483.586417][T18020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.687853][T18020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.985720][T18020] team0: Port device team_slave_0 added [ 1484.039140][T18020] team0: Port device team_slave_1 added [ 1484.347533][T10697] Bluetooth: hci4: command tx timeout [ 1484.379123][T18020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.386550][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.414845][T18020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.433169][T18020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.440778][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.468033][T18020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.806313][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1484.811467][T18126] netlink: 'syz.6.3866': attribute type 1 has an invalid length. [ 1484.918818][T18020] hsr_slave_0: entered promiscuous mode [ 1484.929323][T18020] hsr_slave_1: entered promiscuous mode [ 1484.938721][T18020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1484.946593][T18020] Cannot create hsr debugfs directory [ 1484.992556][T18126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1485.033383][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1485.865103][T18133] netlink: 'syz.7.3868': attribute type 4 has an invalid length. [ 1486.420030][T10697] Bluetooth: hci4: command tx timeout [ 1486.471021][T18020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1486.520358][T18020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1486.570249][T18020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1486.640637][T18020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1489.404206][T18020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.573219][T18020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.603698][T18207] netlink: 'syz.6.3877': attribute type 1 has an invalid length. [ 1489.778090][T14823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.785675][T14823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.822724][T18207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1489.915979][T14823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.923675][T14823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.255796][T18219] netlink: 'syz.7.3881': attribute type 4 has an invalid length. [ 1491.740381][T18020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.096430][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3886'. [ 1492.231816][T18020] veth0_vlan: entered promiscuous mode [ 1492.329464][T18020] veth1_vlan: entered promiscuous mode [ 1493.312265][T18020] veth0_macvtap: entered promiscuous mode [ 1493.745630][T18020] veth1_macvtap: entered promiscuous mode [ 1494.591267][T18020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.774852][T18020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.879172][T18020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.888720][T18020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.898019][T18020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.907020][T18020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.790333][T18306] netlink: 'syz.7.3892': attribute type 1 has an invalid length. [ 1495.913752][T18309] netlink: 'syz.6.3893': attribute type 4 has an invalid length. [ 1495.942392][T18306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1501.000872][T18403] loop4: detected capacity change from 0 to 256 [ 1501.447947][T18407] netlink: 'syz.6.3905': attribute type 4 has an invalid length. [ 1501.852241][T18413] netlink: 'syz.7.3907': attribute type 1 has an invalid length. [ 1502.101893][T18413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1502.726479][T14615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.736712][T14615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.903773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.912210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.084600][T18426] loop5: detected capacity change from 0 to 1024 [ 1503.162934][T18426] EXT4-fs: Ignoring removed nobh option [ 1503.169387][T18426] EXT4-fs: Ignoring removed oldalloc option [ 1503.175757][T18426] EXT4-fs: Ignoring removed bh option [ 1503.259714][T18426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1503.653300][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.737754][T13791] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1503.819217][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.998363][T13791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.009434][T13791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.062290][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.123378][T13791] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1504.134495][T13791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1504.142839][T13791] usb 6-1: SerialNumber: syz [ 1504.259945][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.451693][T13791] usb 6-1: 0:2 : does not exist [ 1504.456757][T13791] usb 6-1: unit 5: unexpected type 0x09 [ 1504.881383][T13791] usb 6-1: USB disconnect, device number 14 [ 1506.044859][ T12] bridge_slave_1: left allmulticast mode [ 1506.052815][ T12] bridge_slave_1: left promiscuous mode [ 1506.059535][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.399161][ T12] bridge_slave_0: left allmulticast mode [ 1506.405089][ T12] bridge_slave_0: left promiscuous mode [ 1506.406564][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1506.415428][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.176672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.199598][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.223021][ T12] bond0 (unregistering): Released all slaves [ 1507.600211][ T12] hsr_slave_0: left promiscuous mode [ 1507.608171][ T12] hsr_slave_1: left promiscuous mode [ 1507.615461][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.624107][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.635159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.645299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.670400][ T12] veth1_macvtap: left promiscuous mode [ 1507.676052][ T12] veth0_macvtap: left promiscuous mode [ 1507.681987][ T12] veth1_vlan: left promiscuous mode [ 1507.688095][ T12] veth0_vlan: left promiscuous mode [ 1508.266251][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1508.290077][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1508.912823][T18501] netlink: 'syz.5.3919': attribute type 4 has an invalid length. [ 1509.365760][T18506] netlink: 'syz.6.3923': attribute type 1 has an invalid length. [ 1509.531948][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1509.542688][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1509.552109][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1509.571032][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1509.615025][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1509.627587][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3922'. [ 1509.699297][T18506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1510.428022][T18520] loop5: detected capacity change from 0 to 1024 [ 1510.675770][T18513] chnl_net:caif_netlink_parms(): no params data found [ 1510.783857][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1511.674569][T18535] loop5: detected capacity change from 0 to 1024 [ 1511.698056][T10697] Bluetooth: hci4: command tx timeout [ 1511.724873][T18535] EXT4-fs: Ignoring removed nobh option [ 1511.731299][T18535] EXT4-fs: Ignoring removed oldalloc option [ 1511.739761][T18535] EXT4-fs: Ignoring removed bh option [ 1511.936282][T18535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1512.035515][T18513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.043530][T18513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.054612][T18513] bridge_slave_0: entered allmulticast mode [ 1512.064538][T18513] bridge_slave_0: entered promiscuous mode [ 1512.134427][T18513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.142558][T18513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.153482][T18513] bridge_slave_1: entered allmulticast mode [ 1512.163192][T18513] bridge_slave_1: entered promiscuous mode [ 1512.347743][T17841] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1512.462974][T18569] netlink: 'syz.7.3934': attribute type 4 has an invalid length. [ 1512.554226][T18513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.638847][T17841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.649577][T17841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.819816][T17841] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1512.829455][T17841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1512.837843][T17841] usb 6-1: SerialNumber: syz [ 1513.430886][T18513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.638027][T17841] usb 6-1: 0:2 : does not exist [ 1513.643225][T17841] usb 6-1: unit 5 not found! [ 1513.825567][T10697] Bluetooth: hci4: command tx timeout [ 1514.391936][T17841] usb 6-1: USB disconnect, device number 15 [ 1514.643251][T18513] team0: Port device team_slave_0 added [ 1514.663563][T18513] team0: Port device team_slave_1 added [ 1514.821375][T18608] netlink: 'syz.7.3937': attribute type 1 has an invalid length. [ 1514.895510][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1514.909475][T18513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.918700][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.946096][T18513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.963524][T18513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.971006][T18513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.998436][T18513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.090827][T18608] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1515.255223][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1515.262693][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1515.320444][T18513] hsr_slave_0: entered promiscuous mode [ 1515.333576][T18513] hsr_slave_1: entered promiscuous mode [ 1515.342519][T18513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.350443][T18513] Cannot create hsr debugfs directory [ 1515.744553][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1515.859596][T10697] Bluetooth: hci4: command tx timeout [ 1517.112437][T18633] netlink: 'syz.7.3947': attribute type 4 has an invalid length. [ 1517.142484][T18513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1517.208977][T18513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1517.325565][T18513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1517.407705][T18513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1517.937697][T10697] Bluetooth: hci4: command tx timeout [ 1518.071852][T18640] loop5: detected capacity change from 0 to 1024 [ 1518.100809][T18645] netlink: 'syz.7.3951': attribute type 1 has an invalid length. [ 1518.120699][T18640] EXT4-fs: Ignoring removed nobh option [ 1518.126998][T18640] EXT4-fs: Ignoring removed oldalloc option [ 1518.133621][T18640] EXT4-fs: Ignoring removed bh option [ 1518.304878][T18645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1518.338624][T18640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1518.518792][T18513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.639813][T18513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.751161][T14611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.758855][T14611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.795975][ T5108] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1518.911965][T14611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.919654][T14611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.053590][ T5108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.064597][ T5108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.202429][ T5108] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1519.213179][ T5108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1519.223618][ T5108] usb 6-1: SerialNumber: syz [ 1519.541842][ T5108] usb 6-1: 0:2 : does not exist [ 1519.546986][ T5108] usb 6-1: unit 5 not found! [ 1519.659157][ T5108] usb 6-1: USB disconnect, device number 16 [ 1520.350811][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1520.522116][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1520.940622][T18513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.229621][T18673] netlink: 'syz.7.3959': attribute type 4 has an invalid length. [ 1521.658251][T18513] veth0_vlan: entered promiscuous mode [ 1521.788765][T18513] veth1_vlan: entered promiscuous mode [ 1522.095335][T18513] veth0_macvtap: entered promiscuous mode [ 1522.189164][T18513] veth1_macvtap: entered promiscuous mode [ 1522.426612][T18513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.530143][T18513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.577820][T18681] netlink: 'syz.5.3963': attribute type 1 has an invalid length. [ 1522.649739][T18513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.660592][T18513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.669718][T18513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.678898][T18513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.753306][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3964'. [ 1523.691141][T18694] loop5: detected capacity change from 0 to 1024 [ 1523.765427][T18694] EXT4-fs: Ignoring removed nobh option [ 1523.772056][T18694] EXT4-fs: Ignoring removed oldalloc option [ 1523.780099][T18694] EXT4-fs: Ignoring removed bh option [ 1523.892946][T18694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1524.191925][T18707] netlink: 'syz.7.3971': attribute type 4 has an invalid length. [ 1524.347509][ T5108] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1524.540967][ T5108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.551568][ T5108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1524.618791][ T5108] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1524.628298][ T5108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1524.636560][ T5108] usb 6-1: SerialNumber: syz [ 1524.788377][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1524.980492][ T5108] usb 6-1: 0:2 : does not exist [ 1524.985548][ T5108] usb 6-1: unit 5 not found! [ 1525.091465][ T5108] usb 6-1: USB disconnect, device number 17 [ 1525.840910][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3977'. [ 1525.892915][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1526.046453][T18732] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 1526.276245][T18732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1526.442024][T18732] veth9: entered promiscuous mode [ 1527.557039][T18751] netlink: 'syz.5.3984': attribute type 4 has an invalid length. [ 1528.752847][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1528.872132][T14620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.881438][T14620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.287816][T18770] loop5: detected capacity change from 0 to 1024 [ 1529.330334][T18770] EXT4-fs: Ignoring removed nobh option [ 1529.336505][T18770] EXT4-fs: Ignoring removed oldalloc option [ 1529.336506][T14611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.336608][T14611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.342988][T18770] EXT4-fs: Ignoring removed bh option [ 1529.536831][T18770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1529.870637][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.020570][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.203426][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.363520][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.471384][T18778] netlink: 'syz.6.3992': attribute type 1 has an invalid length. [ 1530.603762][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1530.721613][ T70] bridge_slave_1: left allmulticast mode [ 1530.727687][ T70] bridge_slave_1: left promiscuous mode [ 1530.733907][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.811881][ T70] bridge_slave_0: left allmulticast mode [ 1530.817848][ T70] bridge_slave_0: left promiscuous mode [ 1530.824020][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.633642][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1531.716947][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1531.734039][ T70] bond0 (unregistering): Released all slaves [ 1531.764855][T18778] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1531.865538][T18780] veth11: entered promiscuous mode [ 1532.289592][ T70] hsr_slave_0: left promiscuous mode [ 1532.307644][ T70] hsr_slave_1: left promiscuous mode [ 1532.315724][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.326047][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1532.380334][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1532.388586][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.477745][ T70] veth1_macvtap: left promiscuous mode [ 1532.483539][ T70] veth0_macvtap: left promiscuous mode [ 1532.489716][ T70] veth1_vlan: left promiscuous mode [ 1532.495301][ T70] veth0_vlan: left promiscuous mode [ 1533.233582][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1533.319296][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1534.731040][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3993'. [ 1534.775982][T18789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3996'. [ 1534.820667][T18789] netlink: 'syz.4.3996': attribute type 4 has an invalid length. [ 1535.342632][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1535.363074][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1535.381303][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1535.407332][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1535.427653][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1536.122824][T18808] netlink: 'syz.6.4003': attribute type 1 has an invalid length. [ 1536.249185][T18794] chnl_net:caif_netlink_parms(): no params data found [ 1536.364638][T18808] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1536.544721][T18808] veth13: entered promiscuous mode [ 1537.337351][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1537.451518][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.460349][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.467985][T18794] bridge_slave_0: entered allmulticast mode [ 1537.476259][T18794] bridge_slave_0: entered promiscuous mode [ 1537.541763][T10697] Bluetooth: hci4: command tx timeout [ 1537.554339][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.562153][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.569934][T18794] bridge_slave_1: entered allmulticast mode [ 1537.578541][T18794] bridge_slave_1: entered promiscuous mode [ 1537.723261][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.846851][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.880899][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1538.173662][T18794] team0: Port device team_slave_0 added [ 1538.243355][T18794] team0: Port device team_slave_1 added [ 1538.251444][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4010'. [ 1538.285624][T18834] netlink: 'syz.7.4010': attribute type 4 has an invalid length. [ 1538.576500][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.583833][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.610262][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.780740][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.788388][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.814894][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.342647][T18794] hsr_slave_0: entered promiscuous mode [ 1539.352923][T18794] hsr_slave_1: entered promiscuous mode [ 1539.361843][T18794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1539.371197][T18794] Cannot create hsr debugfs directory [ 1539.637309][T10697] Bluetooth: hci4: command tx timeout [ 1540.059055][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4026'. [ 1540.134258][T18848] netlink: 'syz.6.4026': attribute type 4 has an invalid length. [ 1540.355977][T18850] loop4: detected capacity change from 0 to 1024 [ 1540.529927][T18850] hfsplus: invalid catalog entry type in lookup [ 1540.753096][T18852] netlink: 'syz.7.4018': attribute type 1 has an invalid length. [ 1540.924978][T18794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1540.961966][T18856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1540.993013][T18794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1541.109189][T18794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1541.168829][T18794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1541.697901][T10697] Bluetooth: hci4: command tx timeout [ 1542.414854][T18794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.611154][T18794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.718606][T14620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.726071][T14620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.815548][T14620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.823102][T14620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.170414][T18794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1543.461608][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1543.781558][T10697] Bluetooth: hci4: command tx timeout [ 1544.979735][T18889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1545.029432][T18889] netlink: 'syz.5.4030': attribute type 4 has an invalid length. [ 1545.048402][T18794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.654754][T18794] veth0_vlan: entered promiscuous mode [ 1545.690971][T18794] veth1_vlan: entered promiscuous mode [ 1545.921736][T18794] veth0_macvtap: entered promiscuous mode [ 1545.982361][T18794] veth1_macvtap: entered promiscuous mode [ 1546.119598][T18794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.185791][T18897] netlink: 'syz.7.4033': attribute type 1 has an invalid length. [ 1546.268498][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4034'. [ 1546.325230][T18794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.420041][T18901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1546.468400][T18794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.477732][T18794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.486784][T18794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.496007][T18794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.022371][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4044'. [ 1549.098786][T18927] netlink: 'syz.5.4044': attribute type 4 has an invalid length. [ 1549.828808][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1549.860802][T18941] netlink: 'syz.6.4049': attribute type 1 has an invalid length. [ 1550.022145][T18946] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1550.034860][T18942] loop5: detected capacity change from 0 to 1024 [ 1550.100063][T18942] EXT4-fs: Ignoring removed nobh option [ 1550.106330][T18942] EXT4-fs: Ignoring removed oldalloc option [ 1550.113449][T18942] EXT4-fs: Ignoring removed bh option [ 1550.239587][T18942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1550.712877][ T5108] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1550.867455][ T5108] usb 6-1: device descriptor read/64, error -71 [ 1551.117462][ T5108] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1551.297811][ T5108] usb 6-1: device descriptor read/64, error -71 [ 1551.422705][ T5108] usb usb6-port1: attempt power cycle [ 1551.775848][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4057'. [ 1551.893991][ T5108] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1551.950327][ T5108] usb 6-1: device descriptor read/8, error -71 [ 1552.116512][T18976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1552.145141][T18976] netlink: 'syz.6.4058': attribute type 4 has an invalid length. [ 1552.199825][ T5108] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1552.297832][ T5108] usb 6-1: device descriptor read/8, error -71 [ 1552.410280][ T5108] usb usb6-port1: unable to enumerate USB device [ 1552.652595][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.662003][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.996416][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.004781][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.150492][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1553.763833][T14939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.038848][T14939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.212837][T14939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.408375][T14939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.558937][T14939] bridge_slave_1: left allmulticast mode [ 1556.565262][T14939] bridge_slave_1: left promiscuous mode [ 1556.572128][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.803115][T14939] bridge_slave_0: left allmulticast mode [ 1556.811705][T14939] bridge_slave_0: left promiscuous mode [ 1556.820762][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.422676][T14939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1557.452141][T14939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1557.475087][T14939] bond0 (unregistering): Released all slaves [ 1558.057371][T14939] hsr_slave_0: left promiscuous mode [ 1558.077562][T14939] hsr_slave_1: left promiscuous mode [ 1558.085849][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.093936][T14939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.170179][T14939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.178361][T14939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.267782][T14939] veth1_macvtap: left promiscuous mode [ 1558.273591][T14939] veth0_macvtap: left promiscuous mode [ 1558.279675][T14939] veth1_vlan: left promiscuous mode [ 1558.285249][T14939] veth0_vlan: left promiscuous mode [ 1559.010309][T14939] team0 (unregistering): Port device team_slave_1 removed [ 1559.039404][T14939] team0 (unregistering): Port device team_slave_0 removed [ 1560.143775][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4064'. [ 1560.631437][T19054] netlink: 'syz.5.4070': attribute type 4 has an invalid length. [ 1560.855153][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.869281][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.885934][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.915239][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.934176][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1561.875904][T19061] chnl_net:caif_netlink_parms(): no params data found [ 1562.403057][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 1562.978200][T10697] Bluetooth: hci4: command tx timeout [ 1563.253345][T19061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.261286][T19061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.271715][T19061] bridge_slave_0: entered allmulticast mode [ 1563.281514][T19061] bridge_slave_0: entered promiscuous mode [ 1563.919784][T19061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.927561][T19061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.935440][T19061] bridge_slave_1: entered allmulticast mode [ 1563.945226][T19061] bridge_slave_1: entered promiscuous mode [ 1565.119491][T10697] Bluetooth: hci4: command tx timeout [ 1565.286455][T19061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.406249][T19061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.544862][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4082'. [ 1565.711150][T19061] team0: Port device team_slave_0 added [ 1565.788167][T19061] team0: Port device team_slave_1 added [ 1565.962970][T19154] netlink: 'syz.6.4084': attribute type 4 has an invalid length. [ 1566.088659][T19061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.095853][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.124419][T19061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.286573][T19061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.294667][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.322384][T19061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.904709][T19061] hsr_slave_0: entered promiscuous mode [ 1566.913637][T19061] hsr_slave_1: entered promiscuous mode [ 1566.922790][T19061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.930772][T19061] Cannot create hsr debugfs directory [ 1567.138957][ T5801] Bluetooth: hci4: command tx timeout [ 1568.213423][T19172] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 1568.500960][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1568.859943][T19061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1568.924647][T19061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1568.969620][T19061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1569.112415][T19061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1569.228272][T10697] Bluetooth: hci4: command tx timeout [ 1570.167982][T19061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.833289][T19061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.263643][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.271124][T14609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.817502][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.825089][T14609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.229679][T19244] netlink: 'syz.7.4096': attribute type 4 has an invalid length. [ 1573.579606][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1574.756400][T19061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.235369][T19061] veth0_vlan: entered promiscuous mode [ 1575.371030][T19061] veth1_vlan: entered promiscuous mode [ 1575.702269][T19061] veth0_macvtap: entered promiscuous mode [ 1575.885490][T19061] veth1_macvtap: entered promiscuous mode [ 1576.139627][T19061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.321169][T19061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.735963][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.743469][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.930012][T19061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.939288][T19061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.949743][T19061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.960474][T19061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.948940][T19329] netlink: 'syz.6.4109': attribute type 4 has an invalid length. [ 1578.265303][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1579.043682][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4111'. [ 1583.002644][T19425] netlink: 'syz.6.4122': attribute type 4 has an invalid length. [ 1583.242535][T19428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4123'. [ 1584.240539][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4126'. [ 1584.834116][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1586.815258][T14613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.824009][T14613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.732188][T14938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.740580][T14938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.825874][T19503] netlink: 'syz.7.4135': attribute type 4 has an invalid length. [ 1589.775731][T14823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.968345][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4138'. [ 1589.995087][T14823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.358860][T14823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.554690][T14823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.149884][T14823] bridge_slave_1: left allmulticast mode [ 1591.155825][T14823] bridge_slave_1: left promiscuous mode [ 1591.162740][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.264053][T14823] bridge_slave_0: left allmulticast mode [ 1591.270196][T14823] bridge_slave_0: left promiscuous mode [ 1591.276879][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.868241][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1591.869416][T14823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.886921][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1591.902020][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1591.928509][T14823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.943740][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1591.956904][T14823] bond0 (unregistering): Released all slaves [ 1591.990448][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1592.757618][T14823] hsr_slave_0: left promiscuous mode [ 1592.777478][T14823] hsr_slave_1: left promiscuous mode [ 1592.785743][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.793707][T14823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.847813][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.855558][T14823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.929785][T14823] veth1_macvtap: left promiscuous mode [ 1592.935592][T14823] veth0_macvtap: left promiscuous mode [ 1592.944114][T14823] veth1_vlan: left promiscuous mode [ 1592.949839][T14823] veth0_vlan: left promiscuous mode [ 1593.873951][T14823] team0 (unregistering): Port device team_slave_1 removed [ 1593.916564][T14823] team0 (unregistering): Port device team_slave_0 removed [ 1594.113884][ T5801] Bluetooth: hci4: command tx timeout [ 1594.332478][ T9767] bond0: (slave syz_tun): Releasing backup interface [ 1594.637030][T19528] chnl_net:caif_netlink_parms(): no params data found [ 1594.694988][T14823] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.789553][T14823] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.891048][T14823] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.072298][T14823] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.169390][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4140'. [ 1596.024052][T10697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1596.044422][T14823] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1596.044998][T10697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1596.053821][T14823] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ce:e5:a0:4e:82:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1596.099083][T10697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1596.176150][T10697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1596.184053][T10697] Bluetooth: hci4: command tx timeout [ 1596.337946][T16379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.528860][T14823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.599304][T14823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.635488][T14823] bond0 (unregistering): Released all slaves [ 1596.674651][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1596.676017][T14823] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1596.691884][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1596.702530][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1596.705548][T14823] bond1 (unregistering): Released all slaves [ 1596.767606][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1596.784061][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1596.795063][T14823] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1596.820410][T14823] bond2 (unregistering): Released all slaves [ 1596.863805][T14823] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1596.899352][T14823] bond3 (unregistering): Released all slaves [ 1596.925415][T14823] bond4 (unregistering): (slave veth9): Releasing backup interface [ 1596.972288][T14823] bond4 (unregistering): Released all slaves [ 1596.996327][T14823] bond5 (unregistering): Released all slaves [ 1597.020846][T14823] bond6 (unregistering): Released all slaves [ 1597.047358][T14823] bond7 (unregistering): Released all slaves [ 1597.071636][T14823] bond8 (unregistering): Released all slaves [ 1597.084691][T19553] loop5: detected capacity change from 0 to 1024 [ 1597.110301][T19553] EXT4-fs: Ignoring removed nobh option [ 1597.116631][T19553] EXT4-fs: Ignoring removed oldalloc option [ 1597.123019][T19553] EXT4-fs: Ignoring removed bh option [ 1597.179023][T14823] bond9 (unregistering): Released all slaves [ 1597.203116][T14823] bond10 (unregistering): Released all slaves [ 1597.226926][T14823] bond11 (unregistering): Released all slaves [ 1597.260759][T19528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.268845][T19528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.276784][T19528] bridge_slave_0: entered allmulticast mode [ 1597.286664][T19528] bridge_slave_0: entered promiscuous mode [ 1597.356597][T19553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1597.613732][T19528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.625368][T19528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.633331][T19528] bridge_slave_1: entered allmulticast mode [ 1597.683544][T19528] bridge_slave_1: entered promiscuous mode [ 1597.777875][T17841] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1597.963040][T17841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.975391][T17841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1598.020740][T17841] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1598.030379][T17841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1598.038933][T17841] usb 6-1: SerialNumber: syz [ 1598.149914][T19528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.217399][T19528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.262858][ T5801] Bluetooth: hci4: command tx timeout [ 1598.321035][T17841] usb 6-1: 0:2 : does not exist [ 1598.326243][T17841] usb 6-1: unit 5 not found! [ 1598.420058][ T5801] Bluetooth: hci3: command tx timeout [ 1598.433318][T17841] usb 6-1: USB disconnect, device number 22 [ 1598.624156][T14823] hsr_slave_0: left promiscuous mode [ 1598.636419][T14823] hsr_slave_1: left promiscuous mode [ 1598.644825][T14823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.656413][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.666003][T14823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.704180][T14823] veth1_macvtap: left promiscuous mode [ 1598.710762][T14823] veth0_macvtap: left promiscuous mode [ 1598.716813][T14823] veth1_vlan: left promiscuous mode [ 1598.722534][T14823] veth0_vlan: left promiscuous mode [ 1598.897942][ T5801] Bluetooth: hci5: command tx timeout [ 1599.281776][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1600.240285][T14823] team0 (unregistering): Port device team_slave_1 removed [ 1600.359043][ T5801] Bluetooth: hci4: command tx timeout [ 1600.508678][ T5801] Bluetooth: hci3: command tx timeout [ 1600.671460][T19622] netlink: 'syz.5.4148': attribute type 4 has an invalid length. [ 1600.810546][T14823] team0 (unregistering): Port device team_slave_0 removed [ 1601.127614][ T5801] Bluetooth: hci5: command tx timeout [ 1601.511088][T19528] team0: Port device team_slave_0 added [ 1601.643857][T19528] team0: Port device team_slave_1 added [ 1602.164352][T19528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.171560][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.198058][T19528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.301705][T14823] IPVS: stop unused estimator thread 0... [ 1602.433760][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4149'. [ 1602.450842][T19528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.458219][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.485976][T19528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.562571][T14823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.570860][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4151'. [ 1602.581296][ T5801] Bluetooth: hci3: command tx timeout [ 1602.661097][T19550] chnl_net:caif_netlink_parms(): no params data found [ 1602.730550][T14823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.866027][T14823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.948839][T19547] chnl_net:caif_netlink_parms(): no params data found [ 1603.137977][ T5801] Bluetooth: hci5: command tx timeout [ 1603.152088][T14823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.359202][T19528] hsr_slave_0: entered promiscuous mode [ 1603.367896][T19528] hsr_slave_1: entered promiscuous mode [ 1603.375441][T19528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1603.383257][T19528] Cannot create hsr debugfs directory [ 1603.780831][T14823] bridge_slave_1: left allmulticast mode [ 1603.786847][T14823] bridge_slave_1: left promiscuous mode [ 1603.793578][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.823399][T14823] bridge_slave_0: left allmulticast mode [ 1603.829323][T14823] bridge_slave_0: left promiscuous mode [ 1603.835549][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.261943][T14823] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1604.270922][T14823] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 8a:26:48:85:8c:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1604.599279][T14823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.642373][T14823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.657737][ T5801] Bluetooth: hci3: command tx timeout [ 1604.658808][T14823] bond0 (unregistering): Released all slaves [ 1604.686904][T14823] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1604.702408][T14823] bond1 (unregistering): Released all slaves [ 1604.839258][T14823] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1604.874211][T14823] bond2 (unregistering): Released all slaves [ 1604.912871][T14823] bond3 (unregistering): Released all slaves [ 1604.952073][T14823] bond4 (unregistering): Released all slaves [ 1605.231010][ T5801] Bluetooth: hci5: command tx timeout [ 1606.070077][T19547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.077845][T19547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.085366][T19547] bridge_slave_0: entered allmulticast mode [ 1606.093825][T19547] bridge_slave_0: entered promiscuous mode [ 1606.120772][T19547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.129029][T19547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.136551][T19547] bridge_slave_1: entered allmulticast mode [ 1606.144851][T19547] bridge_slave_1: entered promiscuous mode [ 1606.281703][T19654] loop5: detected capacity change from 0 to 1024 [ 1606.313512][T19654] EXT4-fs: Ignoring removed nobh option [ 1606.320333][T19654] EXT4-fs: Ignoring removed oldalloc option [ 1606.326730][T19654] EXT4-fs: Ignoring removed bh option [ 1606.333784][T14823] hsr_slave_0: left promiscuous mode [ 1606.344987][T14823] hsr_slave_1: left promiscuous mode [ 1606.352281][T14823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.373712][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.381554][T14823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.463860][T19654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1606.491356][T14823] veth1_macvtap: left promiscuous mode [ 1606.498137][T14823] veth0_macvtap: left promiscuous mode [ 1606.504077][T14823] veth1_vlan: left promiscuous mode [ 1606.997818][T19558] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1607.137360][T14823] team0 (unregistering): Port device team_slave_1 removed [ 1607.188048][T19558] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.198639][T19558] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1607.241124][T14823] team0 (unregistering): Port device team_slave_0 removed [ 1607.518297][T19558] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1607.527872][T19558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1607.536175][T19558] usb 6-1: SerialNumber: syz [ 1607.777424][T19550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.785082][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.795733][T19550] bridge_slave_0: entered allmulticast mode [ 1607.805301][T19550] bridge_slave_0: entered promiscuous mode [ 1607.826898][T19558] usb 6-1: 0:2 : does not exist [ 1607.832159][T19558] usb 6-1: unit 5 not found! [ 1607.895356][T19547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.953982][T19558] usb 6-1: USB disconnect, device number 23 [ 1608.005980][T19547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.011002][T14823] IPVS: stop unused estimator thread 0... [ 1608.048413][T19550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.056103][T19550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.065526][T19550] bridge_slave_1: entered allmulticast mode [ 1608.075856][T19550] bridge_slave_1: entered promiscuous mode [ 1608.273861][T19550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.368603][T19547] team0: Port device team_slave_0 added [ 1608.396265][T19550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.505076][T19547] team0: Port device team_slave_1 added [ 1608.605827][T19528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1608.664331][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1608.709653][T19550] team0: Port device team_slave_0 added [ 1608.724198][T19528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1608.768006][T19550] team0: Port device team_slave_1 added [ 1608.897457][T19528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1608.949760][T19547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.956961][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.983960][T19547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.154782][T19528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1609.189639][T19547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.196839][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.223465][T19547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.270189][T19550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.277714][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.304661][T19550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.411901][T19550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.420103][T19550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.446754][T19550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.699830][T19547] hsr_slave_0: entered promiscuous mode [ 1609.710249][T19547] hsr_slave_1: entered promiscuous mode [ 1609.719087][T19547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1609.726880][T19547] Cannot create hsr debugfs directory [ 1610.125691][T19550] hsr_slave_0: entered promiscuous mode [ 1610.136071][T19550] hsr_slave_1: entered promiscuous mode [ 1610.144950][T19550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.152872][T19550] Cannot create hsr debugfs directory [ 1612.229851][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4160'. [ 1612.795085][T19724] loop5: detected capacity change from 0 to 512 [ 1612.866840][T19528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.950252][T19724] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1577058304 out of range 0-5 [ 1612.961884][T19724] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1612.972414][T19724] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4162: Failed to acquire dquot type 1 [ 1612.995576][T19528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.071772][T19724] EXT4-fs (loop5): 1 truncate cleaned up [ 1613.080215][T19724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.093375][T19724] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.219366][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.226934][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.242591][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.250248][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.269938][T19547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1613.359303][T19547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1613.491436][T19547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1613.539451][T19729] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1613.603278][T19550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1613.651930][T17641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.663892][T19547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1613.719136][T19550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1613.745479][T19550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1613.782429][T19550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1614.158700][ T2996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.325995][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4166'. [ 1614.439696][ T2996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.563980][ T2996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.743135][ T2996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.375538][ T2996] bridge_slave_1: left allmulticast mode [ 1615.383828][ T2996] bridge_slave_1: left promiscuous mode [ 1615.391386][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.448956][ T2996] bridge_slave_0: left allmulticast mode [ 1615.454774][ T2996] bridge_slave_0: left promiscuous mode [ 1615.461183][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.008874][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.048741][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.083260][ T2996] bond0 (unregistering): Released all slaves [ 1616.308322][T19547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.386272][T19550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.632591][T19547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.659880][T19528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.898831][ T2996] hsr_slave_0: left promiscuous mode [ 1616.923957][ T2996] hsr_slave_1: left promiscuous mode [ 1616.932383][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.969314][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.976904][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.059303][ T2996] veth1_macvtap: left promiscuous mode [ 1617.065116][ T2996] veth0_macvtap: left promiscuous mode [ 1617.071422][ T2996] veth1_vlan: left promiscuous mode [ 1617.077004][ T2996] veth0_vlan: left promiscuous mode [ 1617.792504][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 1617.814756][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 1618.081666][T19550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1618.219757][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.227373][T14936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.401537][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.409039][T14936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.424630][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.432072][T14936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.444575][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.452140][T14936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.855309][T19550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1618.933767][T19547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1618.945161][T19547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1619.371860][T16379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1619.383732][T16379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1619.398509][T16379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1619.446308][T16379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1619.456828][T16379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1620.253105][T19528] veth0_vlan: entered promiscuous mode [ 1620.561266][T19528] veth1_vlan: entered promiscuous mode [ 1620.903990][T19550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1620.915645][T19528] veth0_macvtap: entered promiscuous mode [ 1621.007205][T19528] veth1_macvtap: entered promiscuous mode [ 1621.028067][T19753] chnl_net:caif_netlink_parms(): no params data found [ 1621.279408][T19528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1621.408874][T19547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.459953][T19528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1621.541177][ T5801] Bluetooth: hci0: command tx timeout [ 1621.580750][T19528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.589926][T19528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.599134][T19528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.608241][T19528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.988482][T19547] veth0_vlan: entered promiscuous mode [ 1622.130681][T19547] veth1_vlan: entered promiscuous mode [ 1622.415341][T19547] veth0_macvtap: entered promiscuous mode [ 1622.653450][T19547] veth1_macvtap: entered promiscuous mode [ 1622.685803][T19753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.694993][T19753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.702931][T19753] bridge_slave_0: entered allmulticast mode [ 1622.712518][T19753] bridge_slave_0: entered promiscuous mode [ 1622.863286][T19547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.888619][T19753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.896232][T19753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.905149][T19753] bridge_slave_1: entered allmulticast mode [ 1622.914698][T19753] bridge_slave_1: entered promiscuous mode [ 1622.982096][T19547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.201318][T19753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.234732][T19753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.258536][T19547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.268795][T19547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.277972][T19547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.286987][T19547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.539619][T19753] team0: Port device team_slave_0 added [ 1623.564378][T19753] team0: Port device team_slave_1 added [ 1623.638962][ T5801] Bluetooth: hci0: command tx timeout [ 1623.737614][T19753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.744827][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.773103][T19753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.930358][T19753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.939784][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.969118][T19753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.975096][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1624.059867][T19550] veth0_vlan: entered promiscuous mode [ 1624.159931][T19550] veth1_vlan: entered promiscuous mode [ 1624.537692][T19753] hsr_slave_0: entered promiscuous mode [ 1624.548273][T19753] hsr_slave_1: entered promiscuous mode [ 1624.627008][T19550] veth0_macvtap: entered promiscuous mode [ 1624.682661][T19550] veth1_macvtap: entered promiscuous mode [ 1624.854452][T19550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.040077][T19550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.109042][T19550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.118370][T19550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.127517][T19550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.136536][T19550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.701663][ T5801] Bluetooth: hci0: command tx timeout [ 1625.733588][T19803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4173'. [ 1626.273846][T19753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1626.340164][T19753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1626.413083][T19753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1626.518716][T19753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1627.684709][T19753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.779893][ T5801] Bluetooth: hci0: command tx timeout [ 1627.886367][T19753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.968572][T16290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.976155][T16290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.057979][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.065553][T14936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.132617][T16290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.141848][T16290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.385565][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4176'. [ 1628.465343][T14646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.475260][T14646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.379883][T14936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.388246][T14936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.540230][T19753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.674616][T14646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.682745][T14646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.688987][T14936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.870309][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4179'. [ 1631.912781][T14936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.142830][T14936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.389956][T14936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.497934][T14646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.505921][T14646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.769081][T14646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.779647][T14646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.942466][T14936] bridge_slave_1: left allmulticast mode [ 1632.948731][T14936] bridge_slave_1: left promiscuous mode [ 1632.955343][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.042173][T14936] bridge_slave_0: left allmulticast mode [ 1633.048532][T14936] bridge_slave_0: left promiscuous mode [ 1633.055141][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.578828][T14936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.606120][T14936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.644397][T14936] bond0 (unregistering): Released all slaves [ 1633.906676][T19753] veth0_vlan: entered promiscuous mode [ 1634.210653][T19753] veth1_vlan: entered promiscuous mode [ 1634.304629][T14936] hsr_slave_0: left promiscuous mode [ 1634.327523][T14936] hsr_slave_1: left promiscuous mode [ 1634.335609][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.345620][T14936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.380859][T14936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.388854][T14936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.477904][T14936] veth1_macvtap: left promiscuous mode [ 1634.483705][T14936] veth0_macvtap: left promiscuous mode [ 1634.489919][T14936] veth1_vlan: left promiscuous mode [ 1634.495941][T14936] veth0_vlan: left promiscuous mode [ 1635.144559][T14936] team0 (unregistering): Port device team_slave_1 removed [ 1635.238494][T14936] team0 (unregistering): Port device team_slave_0 removed [ 1635.705826][T19753] veth0_macvtap: entered promiscuous mode [ 1635.760055][T19753] veth1_macvtap: entered promiscuous mode [ 1635.829154][T19753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.872661][T19753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.899800][T19753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.909247][T19753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.918299][T19753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.927653][T19753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.056226][T16379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1637.072521][T16379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1637.084170][T16379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1637.102723][T16379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1637.123232][T16379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1638.170445][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1638.177437][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1638.813498][T19885] chnl_net:caif_netlink_parms(): no params data found [ 1639.218953][T16379] Bluetooth: hci2: command tx timeout [ 1639.460861][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4188'. [ 1640.114614][T19885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.122612][T19885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.130576][T19885] bridge_slave_0: entered allmulticast mode [ 1640.140193][T19885] bridge_slave_0: entered promiscuous mode [ 1640.242685][T19885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.251933][T19885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.263593][T19885] bridge_slave_1: entered allmulticast mode [ 1640.273264][T19885] bridge_slave_1: entered promiscuous mode [ 1640.319383][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4191'. [ 1640.493789][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4190'. [ 1640.651025][T19885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.915894][T19885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.926703][T19931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.934981][T19931] batadv_slave_0: entered promiscuous mode [ 1641.303343][T16379] Bluetooth: hci2: command tx timeout [ 1641.339518][T19885] team0: Port device team_slave_0 added [ 1641.357930][T19885] team0: Port device team_slave_1 added [ 1641.601935][T19885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.609387][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.637606][T19885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.716801][T14936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.725242][T14936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.801243][T19885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.808686][T19885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.835042][T19885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.868100][T14938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.876189][T14938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.367924][T19885] hsr_slave_0: entered promiscuous mode [ 1642.376559][T19885] hsr_slave_1: entered promiscuous mode [ 1642.384415][T19885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1642.392198][T19885] Cannot create hsr debugfs directory [ 1642.778894][T14646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.056350][T14646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.213825][T19938] ===================================================== [ 1643.221235][T19938] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1643.229676][T19938] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1643.235627][T19938] do_xdp_generic+0xd52/0x1690 [ 1643.240786][T19938] tun_get_user+0x447a/0x6b40 [ 1643.245673][T19938] tun_chr_write_iter+0x3e9/0x5c0 [ 1643.251048][T19938] vfs_write+0xb48/0x1580 [ 1643.255620][T19938] __ia32_sys_write+0x1f9/0x4d0 [ 1643.260865][T19938] ia32_sys_call+0x30f2/0x42c0 [ 1643.265942][T19938] __do_fast_syscall_32+0xb0/0x150 [ 1643.271469][T19938] do_fast_syscall_32+0x38/0x80 [ 1643.276551][T19938] do_SYSENTER_32+0x1f/0x30 [ 1643.281399][T19938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1643.288065][T19938] [ 1643.290505][T19938] Uninit was stored to memory at: [ 1643.295837][T19938] pskb_expand_head+0x310/0x1610 [ 1643.301134][T19938] do_xdp_generic+0xa79/0x1690 [ 1643.306088][T19938] tun_get_user+0x447a/0x6b40 [ 1643.311107][T19938] tun_chr_write_iter+0x3e9/0x5c0 [ 1643.316336][T19938] vfs_write+0xb48/0x1580 [ 1643.321049][T19938] __ia32_sys_write+0x1f9/0x4d0 [ 1643.326148][T19938] ia32_sys_call+0x30f2/0x42c0 [ 1643.331236][T19938] __do_fast_syscall_32+0xb0/0x150 [ 1643.336556][T19938] do_fast_syscall_32+0x38/0x80 [ 1643.341756][T19938] do_SYSENTER_32+0x1f/0x30 [ 1643.346453][T19938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1643.353178][T19938] [ 1643.355607][T19938] Uninit was created at: [ 1643.360301][T19938] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1643.367191][T19938] kmalloc_reserve+0x22f/0x4b0 [ 1643.372206][T19938] __alloc_skb+0x347/0x7d0 [ 1643.376890][T19938] alloc_skb_with_frags+0xc5/0xa60 [ 1643.382418][T19938] sock_alloc_send_pskb+0xad8/0xc70 [ 1643.387991][T19938] tun_get_user+0x1019/0x6b40 [ 1643.388451][T16379] Bluetooth: hci2: command tx timeout [ 1643.392815][T19938] tun_chr_write_iter+0x3e9/0x5c0 [ 1643.392942][T19938] vfs_write+0xb48/0x1580 [ 1643.408349][T19938] __ia32_sys_write+0x1f9/0x4d0 [ 1643.413462][T19938] ia32_sys_call+0x30f2/0x42c0 [ 1643.418590][T19938] __do_fast_syscall_32+0xb0/0x150 [ 1643.423923][T19938] do_fast_syscall_32+0x38/0x80 [ 1643.429139][T19938] do_SYSENTER_32+0x1f/0x30 [ 1643.433852][T19938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1643.440581][T19938] [ 1643.443063][T19938] CPU: 0 UID: 0 PID: 19938 Comm: syz.6.4194 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1643.455609][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1643.466014][T19938] ===================================================== [ 1643.473236][T19938] Disabling lock debugging due to kernel taint [ 1643.479689][T19938] Kernel panic - not syncing: kmsan.panic set ... [ 1643.486286][T19938] CPU: 0 UID: 0 PID: 19938 Comm: syz.6.4194 Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1643.500270][T19938] Tainted: [B]=BAD_PAGE [ 1643.504559][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1643.514797][T19938] Call Trace: [ 1643.518211][T19938] [ 1643.521270][T19938] __dump_stack+0x26/0x30 [ 1643.525837][T19938] dump_stack_lvl+0x53/0x270 [ 1643.530656][T19938] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1643.536734][T19938] dump_stack+0x1e/0x25 [ 1643.541112][T19938] panic+0x4bd/0xd50 [ 1643.545291][T19938] kmsan_report+0x31c/0x320 [ 1643.550494][T19938] ? __msan_warning+0x1b/0x30 [ 1643.555409][T19938] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1643.561540][T19938] ? do_xdp_generic+0xd52/0x1690 [ 1643.566682][T19938] ? tun_get_user+0x447a/0x6b40 [ 1643.571742][T19938] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1643.577155][T19938] ? vfs_write+0xb48/0x1580 [ 1643.581895][T19938] ? __ia32_sys_write+0x1f9/0x4d0 [ 1643.587164][T19938] ? ia32_sys_call+0x30f2/0x42c0 [ 1643.592292][T19938] ? __do_fast_syscall_32+0xb0/0x150 [ 1643.597814][T19938] ? do_fast_syscall_32+0x38/0x80 [ 1643.603044][T19938] ? do_SYSENTER_32+0x1f/0x30 [ 1643.607925][T19938] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1643.614685][T19938] ? ___bpf_prog_run+0xea65/0xeba0 [ 1643.620051][T19938] ? __bpf_prog_run32+0xc2/0xf0 [ 1643.625122][T19938] ? kmsan_get_metadata+0xfb/0x160 [ 1643.630503][T19938] __msan_warning+0x1b/0x30 [ 1643.635239][T19938] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 1643.641251][T19938] do_xdp_generic+0xd52/0x1690 [ 1643.646223][T19938] ? tun_get_user+0x3f21/0x6b40 [ 1643.651283][T19938] ? filter_irq_stacks+0x49/0x190 [ 1643.656577][T19938] ? tun_get_user+0x43f5/0x6b40 [ 1643.661644][T19938] tun_get_user+0x447a/0x6b40 [ 1643.666541][T19938] ? stack_depot_save_flags+0x35/0x7b0 [ 1643.672222][T19938] ? __rcu_read_unlock+0x6d/0xd0 [ 1643.677390][T19938] ? kmsan_get_metadata+0xfb/0x160 [ 1643.682768][T19938] ? kmsan_get_metadata+0xfb/0x160 [ 1643.688131][T19938] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1643.694715][T19938] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1643.701098][T19938] tun_chr_write_iter+0x3e9/0x5c0 [ 1643.706371][T19938] vfs_write+0xb48/0x1580 [ 1643.710978][T19938] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1643.716759][T19938] __ia32_sys_write+0x1f9/0x4d0 [ 1643.721883][T19938] ia32_sys_call+0x30f2/0x42c0 [ 1643.726845][T19938] __do_fast_syscall_32+0xb0/0x150 [ 1643.732182][T19938] do_fast_syscall_32+0x38/0x80 [ 1643.737266][T19938] do_SYSENTER_32+0x1f/0x30 [ 1643.741975][T19938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1643.748556][T19938] RIP: 0023:0xf7f81539 [ 1643.752786][T19938] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1643.772640][T19938] RSP: 002b:00000000f50a6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1643.781290][T19938] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 1643.789462][T19938] RDX: 000000000000fdef RSI: 00000000f7413ff4 RDI: 0000000000000000 [ 1643.797611][T19938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1643.805775][T19938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1643.813924][T19938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1643.822101][T19938] [ 1643.825526][T19938] Kernel Offset: disabled [ 1643.829924][T19938] Rebooting in 86400 seconds..