last executing test programs: 28m14.311286607s ago: executing program 2 (id=3): ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(0xffffffffffffffff, 0xc0106440, 0x0) pipe2$9p(0x0, 0x84800) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r5 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r4}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, 0x0, 0x0, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 28m12.46953724s ago: executing program 2 (id=10): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x801, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x6, &(0x7f00000000c0), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 28m9.562635048s ago: executing program 2 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) 28m7.84821993s ago: executing program 2 (id=15): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 28m6.345191143s ago: executing program 2 (id=18): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 28m3.137901515s ago: executing program 2 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x25dfdbff}, 0x14}, 0x1, 0x2b1e}, 0x200408d4) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0xc2f5, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x51e, 0x8, 0x772, 0xffffffffffffffa6}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xafa}}, @uexit={0x0, 0x18, 0xffffffffffffffaf}, @set_irq_handler={0xc8, 0x20, {0x92}}], 0xc0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 27m56.643456687s ago: executing program 32 (id=9): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x541b, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27m47.924126902s ago: executing program 33 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x25dfdbff}, 0x14}, 0x1, 0x2b1e}, 0x200408d4) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0xc2f5, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x51e, 0x8, 0x772, 0xffffffffffffffa6}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xafa}}, @uexit={0x0, 0x18, 0xffffffffffffffaf}, @set_irq_handler={0xc8, 0x20, {0x92}}], 0xc0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 25m56.947827374s ago: executing program 4 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) 25m55.751148283s ago: executing program 4 (id=205): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 25m55.05531667s ago: executing program 4 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 25m54.58347896s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 25m53.149713961s ago: executing program 4 (id=210): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 25m51.034857381s ago: executing program 4 (id=211): r0 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x2, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) syz_open_dev$usbfs(0x0, 0x76, 0x109301) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e05003e20", @ANYRES64, @ANYRES64=0x0, @ANYRES64], 0x8) 25m35.875823824s ago: executing program 34 (id=211): r0 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x2, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) syz_open_dev$usbfs(0x0, 0x76, 0x109301) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e05003e20", @ANYRES64, @ANYRES64=0x0, @ANYRES64], 0x8) 12m50.047431183s ago: executing program 1 (id=1191): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m48.874024167s ago: executing program 1 (id=1192): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1}, 0x4) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 12m47.515734158s ago: executing program 1 (id=1193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 12m47.354238886s ago: executing program 1 (id=1195): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0x7bfe, 0xfdfdfffd, 0xffff}) 12m47.081805659s ago: executing program 1 (id=1197): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) 12m46.916370624s ago: executing program 1 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x7, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x1, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x4, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x4, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x1, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0x96, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x200, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 12m29.799255418s ago: executing program 35 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x7, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x1, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x4, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x4, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x1, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0x96, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x200, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 4m32.994363038s ago: executing program 3 (id=1950): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[], 0xf}, 0x400008c) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 4m29.492788945s ago: executing program 3 (id=1958): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) 4m29.022623562s ago: executing program 3 (id=1961): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000030000fffd0e0003106269746d61703a697000000005000400000000000900020073797a3100000000100007800c00018008000140ffffffff05000500020000000500010006000000"], 0x58}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="039fb174af00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0018008001001b35ae15e402e8ad188b58720000020000c0"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x20) readv(r0, &(0x7f00000003c0), 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='5\x00'/12, @ANYRES32, @ANYBLOB="392c01515ccd52ae7ce2b2cf845c497c6f15e2857ed34bd225c38c451e2d236654a8855654ff584cf0eab6f2264c0b8c7eff7b77588ee5e51761ca7311fe4c1999e22d2b", @ANYRES64=0x0], 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4m26.104032295s ago: executing program 3 (id=1969): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1217000, 0x800, 0x13, 0x7}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000004c0)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 4m23.130665149s ago: executing program 3 (id=1980): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x2000844) 4m22.748423401s ago: executing program 3 (id=1982): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040007}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x8014) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 4m6.380372737s ago: executing program 36 (id=1982): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040007}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, 0x0, 0x8014) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3m48.774642348s ago: executing program 8 (id=2131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018"], 0x20) 3m48.308606982s ago: executing program 8 (id=2137): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) io_uring_setup(0x5d59, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x7}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7fffffffffffe, 0x957}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m48.115231143s ago: executing program 8 (id=2141): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500002c0000ff"], 0x0) 3m47.812438541s ago: executing program 8 (id=2145): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3m47.517783276s ago: executing program 8 (id=2149): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 3m47.176509942s ago: executing program 8 (id=2153): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xedbde134798091f0) 3m30.085192251s ago: executing program 37 (id=2153): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xedbde134798091f0) 12.093146066s ago: executing program 9 (id=3304): socket$inet6(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) open(0x0, 0x80, 0x122) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000001cc0), 0x800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 10.605152709s ago: executing program 9 (id=3308): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @bcast}, [@remote, @null, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000540)=0x48, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000480)={0x3, 'tunl0\x00', {}, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001d00)={0x14, 0x4, {0xff, @usage=0x367, 0x0, 0x8, 0x7, 0x200, 0x6, 0x100000000, 0x8, @usage=0xa10b, 0x10, 0x0, [0x40, 0x7fffffff, 0x5265, 0x37, 0xcca, 0x4]}, {0x2, @struct={0x9, 0xe}, 0x0, 0x6, 0x80, 0x5, 0x1, 0x4, 0xc, @usage=0x8, 0x7f, 0x1, [0x6, 0x7, 0x9, 0x2, 0x3, 0x2]}, {0x3, @usage=0x4, 0x0, 0x7, 0x5f, 0x683c4232, 0x3, 0x5, 0x30, @usage=0xfffffffffffffffa, 0x9, 0x6, [0x8, 0xc0ce, 0x80, 0x6, 0x2, 0x1]}, {0x9edc, 0x6, 0x7}}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="240003"], 0x10e0}}, 0x0) 10.354205976s ago: executing program 9 (id=3309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0xfff2, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 8.883446823s ago: executing program 0 (id=3313): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)}], 0x5}}], 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 8.872734969s ago: executing program 7 (id=3314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 7.321881803s ago: executing program 7 (id=3315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 7.318899883s ago: executing program 0 (id=3317): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 7.31832724s ago: executing program 9 (id=3318): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) 6.880716462s ago: executing program 0 (id=3320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000040), 0x4) write(r3, &(0x7f0000000980)="2000000012005f0214f9f4070000fbe40a01ec86f5e7", 0x16) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xfff9, 0x3, 0x9, 0x9, 0x3}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r8, 0xd1, "ec9a03d3f532687624af0b332add7d2013e76ff8638bd324f1b304cdb0019ec841f3a10c64c96aa532df7ca9a444a8400e7c6a869c31b25b496806fa6dc7f67466b76604790c4efb6dd482f2032596af6a456ee89eeca75627d7241e5e6efc7eb21bc5b719cd344bdbbe7a7e30348aa37ee9d864605309fa15a8a3be88bc7da3b126faef090159521fcf28e027256c5eaa70f1fe0769e4d839f42e353db470c8af49c060b604015e3dec221f9a1d623dd6800585fb3892e43e682a2ea56974b311bbcec9371315706881a58411a8377248"}, &(0x7f0000000580)=0xd9) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r10) getsockopt$inet_udp_int(r9, 0x11, 0x6c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r5) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x4) 6.826510215s ago: executing program 6 (id=3321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.395069371s ago: executing program 6 (id=3322): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 6.237088711s ago: executing program 9 (id=3323): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0xe84df000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x480) msgctl$IPC_RMID(r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x0) setuid(0x0) lchown(0x0, 0x0, 0x0) geteuid() lstat(0x0, 0x0) getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x34, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 6.217356384s ago: executing program 0 (id=3324): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.103863013s ago: executing program 7 (id=3325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000011}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) unshare(0xa00) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x208040, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000003c0)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5.884530496s ago: executing program 6 (id=3326): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 5.576026396s ago: executing program 7 (id=3327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 5.573732884s ago: executing program 6 (id=3328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_io_uring_setup(0x12bb, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 5.091273767s ago: executing program 7 (id=3329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000000)=@ng={0x4, 0x22}, 0x2, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200000079, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup3(r3, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r7, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) recvmmsg(r9, 0x0, 0x0, 0x400000f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 4.904437498s ago: executing program 5 (id=3330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 3.620331138s ago: executing program 7 (id=3331): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.515023933s ago: executing program 6 (id=3332): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) r4 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.425444272s ago: executing program 5 (id=3333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.695050832s ago: executing program 5 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="100001"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 1.453376638s ago: executing program 5 (id=3335): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) 1.313522504s ago: executing program 9 (id=3336): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x80) 616.385319ms ago: executing program 0 (id=3337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000011}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) unshare(0xa00) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x208040, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000003c0)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 338.237874ms ago: executing program 5 (id=3338): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 142.016215ms ago: executing program 0 (id=3339): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) 46.465861ms ago: executing program 6 (id=3340): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 0s ago: executing program 5 (id=3341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r0}, 0x38) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.050367][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.108538][T12143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1217.767388][T12143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1217.829276][T12143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1218.174829][T12247] hsr_slave_0: entered promiscuous mode [ 1218.175915][T12247] hsr_slave_1: entered promiscuous mode [ 1218.181967][T12247] debugfs: 'hsr0' already exists in 'hsr' [ 1218.182044][T12247] Cannot create hsr debugfs directory [ 1221.775552][ T1465] bridge_slave_1: left allmulticast mode [ 1221.775584][ T1465] bridge_slave_1: left promiscuous mode [ 1221.775856][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.866164][ T1465] bridge_slave_0: left allmulticast mode [ 1221.866195][ T1465] bridge_slave_0: left promiscuous mode [ 1221.866467][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.369088][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1222.387763][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1222.395673][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1222.420553][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1222.427642][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1225.693908][ T5806] Bluetooth: hci0: command tx timeout [ 1226.326798][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1226.326892][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1226.565157][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.172184][ T5806] Bluetooth: hci0: command tx timeout [ 1228.204809][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.261211][ T1465] bond0 (unregistering): Released all slaves [ 1228.776004][ T1465] hsr_slave_0: left promiscuous mode [ 1228.829057][ T1465] hsr_slave_1: left promiscuous mode [ 1228.830115][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.886167][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.998661][ T1465] veth1_vlan: left promiscuous mode [ 1228.998869][ T1465] veth0_vlan: left promiscuous mode [ 1230.331602][ T5806] Bluetooth: hci0: command tx timeout [ 1231.120031][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1231.136620][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1231.163504][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1231.185858][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1231.188107][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1231.401627][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1231.682039][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1232.568015][ T5806] Bluetooth: hci0: command tx timeout [ 1233.431260][ T5806] Bluetooth: hci3: command tx timeout [ 1234.009830][T12143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.155607][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.489631][ T5806] Bluetooth: hci3: command tx timeout [ 1236.673528][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.673652][ T1380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.982973][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.983092][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.360807][T12247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1237.439921][T12247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1237.664603][T12247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1237.880924][T12247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.206993][T12399] chnl_net:caif_netlink_parms(): no params data found [ 1239.387823][ T5806] Bluetooth: hci3: command tx timeout [ 1239.871985][T12451] chnl_net:caif_netlink_parms(): no params data found [ 1241.709931][ T5806] Bluetooth: hci3: command tx timeout [ 1242.028869][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.029018][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.029274][T12399] bridge_slave_0: entered allmulticast mode [ 1242.081242][T12399] bridge_slave_0: entered promiscuous mode [ 1242.149500][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.149643][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.149892][T12399] bridge_slave_1: entered allmulticast mode [ 1242.152700][T12399] bridge_slave_1: entered promiscuous mode [ 1242.341969][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.362583][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.657675][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.658094][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.658335][T12451] bridge_slave_0: entered allmulticast mode [ 1242.661121][T12451] bridge_slave_0: entered promiscuous mode [ 1242.666205][T12399] team0: Port device team_slave_0 added [ 1242.734464][T12399] team0: Port device team_slave_1 added [ 1242.774681][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.774856][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.775075][T12451] bridge_slave_1: entered allmulticast mode [ 1242.799746][T12451] bridge_slave_1: entered promiscuous mode [ 1243.090985][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.091004][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.091035][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.109557][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.162186][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.162207][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.162239][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.176504][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.742010][T12451] team0: Port device team_slave_0 added [ 1243.810244][T12451] team0: Port device team_slave_1 added [ 1243.910988][T12399] hsr_slave_0: entered promiscuous mode [ 1243.917994][T12399] hsr_slave_1: entered promiscuous mode [ 1243.918801][T12399] debugfs: 'hsr0' already exists in 'hsr' [ 1243.918820][T12399] Cannot create hsr debugfs directory [ 1246.042188][T12451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.042219][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.042249][T12451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.162193][T12451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.162214][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.162244][T12451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.708393][T12451] hsr_slave_0: entered promiscuous mode [ 1246.710762][T12451] hsr_slave_1: entered promiscuous mode [ 1246.713308][T12451] debugfs: 'hsr0' already exists in 'hsr' [ 1246.713375][T12451] Cannot create hsr debugfs directory [ 1247.665822][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1247.680442][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1247.681888][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1247.709671][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1247.729107][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1249.070122][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.307935][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.541808][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.542082][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.702752][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.714263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.917849][ T60] Bluetooth: hci2: command tx timeout [ 1250.004222][ T1465] bridge_slave_1: left allmulticast mode [ 1250.004254][ T1465] bridge_slave_1: left promiscuous mode [ 1250.004521][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.901083][ T1465] bridge_slave_0: left allmulticast mode [ 1251.901115][ T1465] bridge_slave_0: left promiscuous mode [ 1251.901374][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.006170][ T1465] bridge_slave_1: left allmulticast mode [ 1252.006205][ T1465] bridge_slave_1: left promiscuous mode [ 1252.006462][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.089218][ T1465] bridge_slave_0: left allmulticast mode [ 1252.089250][ T1465] bridge_slave_0: left promiscuous mode [ 1252.089513][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.140444][ T60] Bluetooth: hci2: command tx timeout [ 1254.364050][ T60] Bluetooth: hci2: command tx timeout [ 1255.605168][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.669963][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.701528][ T1465] bond0 (unregistering): Released all slaves [ 1256.236712][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1256.259099][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1256.260725][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1256.261974][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1256.262788][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1256.593990][ T60] Bluetooth: hci2: command tx timeout [ 1256.951953][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.037839][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.060992][ T1465] bond0 (unregistering): Released all slaves [ 1258.363177][ T1465] hsr_slave_0: left promiscuous mode [ 1258.383947][ T1465] hsr_slave_1: left promiscuous mode [ 1258.385027][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.408551][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.555011][ T60] Bluetooth: hci4: command tx timeout [ 1258.597748][ T1465] hsr_slave_0: left promiscuous mode [ 1258.640856][ T1465] hsr_slave_1: left promiscuous mode [ 1258.641717][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.684048][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.063183][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1260.340773][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1260.792382][ T60] Bluetooth: hci4: command tx timeout [ 1263.002131][ T60] Bluetooth: hci4: command tx timeout [ 1263.916189][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1264.190898][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1265.225939][ T60] Bluetooth: hci4: command tx timeout [ 1266.465185][T12590] chnl_net:caif_netlink_parms(): no params data found [ 1266.729374][T12647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 1267.204629][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.204864][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.205126][T12590] bridge_slave_0: entered allmulticast mode [ 1267.207985][T12590] bridge_slave_0: entered promiscuous mode [ 1267.283904][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.284059][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.284317][T12590] bridge_slave_1: entered allmulticast mode [ 1267.286221][T12590] bridge_slave_1: entered promiscuous mode [ 1267.518797][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.557732][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.885561][T12590] team0: Port device team_slave_0 added [ 1267.886319][T12620] chnl_net:caif_netlink_parms(): no params data found [ 1267.907340][T12590] team0: Port device team_slave_1 added [ 1268.115552][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.115572][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.115604][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.175084][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.175118][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.175144][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.568295][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.568424][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.568596][T12620] bridge_slave_0: entered allmulticast mode [ 1268.570500][T12620] bridge_slave_0: entered promiscuous mode [ 1268.655196][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.655334][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.655596][T12620] bridge_slave_1: entered allmulticast mode [ 1268.661567][T12620] bridge_slave_1: entered promiscuous mode [ 1268.766695][T12590] hsr_slave_0: entered promiscuous mode [ 1268.768344][T12590] hsr_slave_1: entered promiscuous mode [ 1268.769295][T12590] debugfs: 'hsr0' already exists in 'hsr' [ 1268.769319][T12590] Cannot create hsr debugfs directory [ 1269.054540][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.088958][T12399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1269.180206][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.206875][T12399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1269.395260][T12399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1269.492206][T12399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1271.290242][T12620] team0: Port device team_slave_0 added [ 1271.419562][T12620] team0: Port device team_slave_1 added [ 1271.564582][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.564603][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.564634][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.663704][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.663727][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.663748][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.897133][T12451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1272.108733][T12451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1272.176575][T12451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1274.657281][T12451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1274.789755][T12620] hsr_slave_0: entered promiscuous mode [ 1274.791192][T12620] hsr_slave_1: entered promiscuous mode [ 1274.792150][T12620] debugfs: 'hsr0' already exists in 'hsr' [ 1274.792175][T12620] Cannot create hsr debugfs directory [ 1277.967584][ T1465] bridge_slave_1: left allmulticast mode [ 1277.967615][ T1465] bridge_slave_1: left promiscuous mode [ 1277.967892][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.340758][ T1465] bridge_slave_0: left allmulticast mode [ 1278.340791][ T1465] bridge_slave_0: left promiscuous mode [ 1278.341075][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.504641][ T1465] bridge_slave_1: left allmulticast mode [ 1278.504667][ T1465] bridge_slave_1: left promiscuous mode [ 1278.504862][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.590821][ T1465] bridge_slave_0: left allmulticast mode [ 1278.590852][ T1465] bridge_slave_0: left promiscuous mode [ 1278.591112][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.086691][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.172895][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.201733][ T1465] bond0 (unregistering): Released all slaves [ 1281.295185][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.380099][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.404364][ T1465] bond0 (unregistering): Released all slaves [ 1281.665811][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.550308][ T1465] hsr_slave_0: left promiscuous mode [ 1283.598032][ T1465] hsr_slave_1: left promiscuous mode [ 1283.608931][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.636084][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.850638][ T1465] hsr_slave_0: left promiscuous mode [ 1283.891781][ T1465] hsr_slave_1: left promiscuous mode [ 1283.896766][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.945306][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.043493][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 1284.886561][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1285.047104][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1287.659665][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1287.922654][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1288.670973][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1288.679538][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1288.681515][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1288.706218][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1288.706994][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1290.251972][T12451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.329089][T12815] tipc: Enabled bearer , priority 0 [ 1290.370580][T12815] syzkaller0: entered promiscuous mode [ 1290.370611][T12815] syzkaller0: entered allmulticast mode [ 1290.736442][T12818] tipc: Resetting bearer [ 1290.761068][T12451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.799347][T12814] tipc: Resetting bearer [ 1290.980979][ T5806] Bluetooth: hci5: command tx timeout [ 1290.997501][T12814] tipc: Disabling bearer [ 1291.480005][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.480333][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.611003][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.611168][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.943301][T12590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1291.997749][T12590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1292.003359][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1292.003434][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1292.106700][T12590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1293.203352][ T5806] Bluetooth: hci5: command tx timeout [ 1293.363572][T12590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1293.657092][T12811] chnl_net:caif_netlink_parms(): no params data found [ 1293.779837][T12620] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1293.915023][T12620] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1294.016239][T12620] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1294.167920][T12620] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1294.365880][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.375758][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.376040][T12811] bridge_slave_0: entered allmulticast mode [ 1294.387342][T12811] bridge_slave_0: entered promiscuous mode [ 1294.420759][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.420900][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.421172][T12811] bridge_slave_1: entered allmulticast mode [ 1294.444107][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 1294.462951][T12811] bridge_slave_1: entered promiscuous mode [ 1294.618243][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.639269][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.696112][T12863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1492'. [ 1294.872094][T12811] team0: Port device team_slave_0 added [ 1295.796546][ T5806] Bluetooth: hci5: command tx timeout [ 1296.214091][T12811] team0: Port device team_slave_1 added [ 1296.726623][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.726638][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.726660][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.779077][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.779092][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.779115][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.134646][T12811] hsr_slave_0: entered promiscuous mode [ 1297.135703][T12811] hsr_slave_1: entered promiscuous mode [ 1297.695733][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.865112][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.982019][ T5806] Bluetooth: hci5: command tx timeout [ 1298.055199][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.055444][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.130649][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.161271][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.193768][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.195106][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.211210][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.305130][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.305294][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.322970][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.171814][ T1465] bridge_slave_1: left allmulticast mode [ 1300.171846][ T1465] bridge_slave_1: left promiscuous mode [ 1300.172135][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.271098][ T1465] bridge_slave_0: left allmulticast mode [ 1300.271132][ T1465] bridge_slave_0: left promiscuous mode [ 1300.271426][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.462613][ T5806] Bluetooth: hci0: command tx timeout [ 1302.696586][ T5806] Bluetooth: hci0: command tx timeout [ 1304.909233][ T5806] Bluetooth: hci0: command tx timeout [ 1305.027565][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.091750][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.146613][ T1465] bond0 (unregistering): Released all slaves [ 1305.487231][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.745424][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.745654][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.914519][ T1465] hsr_slave_0: left promiscuous mode [ 1305.957292][ T1465] hsr_slave_1: left promiscuous mode [ 1305.958290][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.000867][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.802485][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1306.966661][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1307.154217][ T5806] Bluetooth: hci0: command tx timeout [ 1307.929111][T12910] syz_tun: entered allmulticast mode [ 1307.933925][T12912] dvmrp6: left allmulticast mode [ 1308.149855][T12910] syz_tun: left allmulticast mode [ 1308.192375][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.192724][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.468202][T12811] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1310.519213][T12875] chnl_net:caif_netlink_parms(): no params data found [ 1310.592193][T12811] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1310.646543][T12811] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1310.791281][T12811] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1311.135928][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.211036][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.211179][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.211418][T12875] bridge_slave_0: entered allmulticast mode [ 1311.216416][T12875] bridge_slave_0: entered promiscuous mode [ 1311.267120][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.267255][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.267497][T12875] bridge_slave_1: entered allmulticast mode [ 1311.293136][T12875] bridge_slave_1: entered promiscuous mode [ 1311.556673][T12875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.834986][T12875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.905893][T12620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.910269][T12875] team0: Port device team_slave_0 added [ 1311.948425][T12875] team0: Port device team_slave_1 added [ 1312.897893][T12875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.897908][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.897930][T12875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.903510][T12875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.903525][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.903546][T12875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.240751][T12875] hsr_slave_0: entered promiscuous mode [ 1313.241803][T12875] hsr_slave_1: entered promiscuous mode [ 1313.242526][T12875] debugfs: 'hsr0' already exists in 'hsr' [ 1313.242544][T12875] Cannot create hsr debugfs directory [ 1315.459693][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1315.479742][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1315.497095][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1315.514533][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1315.523221][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1315.718091][T12620] veth0_vlan: entered promiscuous mode [ 1315.768433][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.010504][T12620] veth1_vlan: entered promiscuous mode [ 1316.058404][ T1465] bridge_slave_1: left allmulticast mode [ 1316.058435][ T1465] bridge_slave_1: left promiscuous mode [ 1316.058701][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.147102][ T1465] bridge_slave_0: left allmulticast mode [ 1316.147133][ T1465] bridge_slave_0: left promiscuous mode [ 1316.147398][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.631900][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.718658][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.738116][ T5806] Bluetooth: hci2: command tx timeout [ 1317.743316][ T1465] bond0 (unregistering): Released all slaves [ 1318.149496][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.332265][ T1465] hsr_slave_0: left promiscuous mode [ 1318.347533][ T1465] hsr_slave_1: left promiscuous mode [ 1318.348404][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.391444][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.491916][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1319.782288][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1319.961613][ T5806] Bluetooth: hci2: command tx timeout [ 1320.951008][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1320.958055][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1320.964189][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1321.007492][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1321.012102][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1323.119151][ T5806] Bluetooth: hci2: command tx timeout [ 1323.139551][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.139757][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.320848][ T5806] Bluetooth: hci3: command tx timeout [ 1323.397654][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.397807][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.851725][T12959] chnl_net:caif_netlink_parms(): no params data found [ 1326.548257][ T5806] Bluetooth: hci2: command tx timeout [ 1326.548467][ T5806] Bluetooth: hci3: command tx timeout [ 1326.945249][T12875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1327.167166][T12875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1327.247332][T12875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1327.546881][T12875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1327.638692][T12959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.638845][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.639018][T12959] bridge_slave_0: entered allmulticast mode [ 1327.640882][T12959] bridge_slave_0: entered promiscuous mode [ 1327.951131][T12976] chnl_net:caif_netlink_parms(): no params data found [ 1327.984504][T12959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.984637][T12959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.984909][T12959] bridge_slave_1: entered allmulticast mode [ 1327.987643][T12959] bridge_slave_1: entered promiscuous mode [ 1328.350099][T12959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.409765][T12959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.734716][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.746932][T12959] team0: Port device team_slave_0 added [ 1328.778731][ T5806] Bluetooth: hci3: command tx timeout [ 1328.824633][T12959] team0: Port device team_slave_1 added [ 1328.845938][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.846033][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.846230][T12976] bridge_slave_0: entered allmulticast mode [ 1328.848079][T12976] bridge_slave_0: entered promiscuous mode [ 1328.922756][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.922891][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.923112][T12976] bridge_slave_1: entered allmulticast mode [ 1328.927061][T12976] bridge_slave_1: entered promiscuous mode [ 1329.070734][T12959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.070750][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.070772][T12959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.211824][T12959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.211844][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.211875][T12959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.445279][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.497130][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.805559][T12976] team0: Port device team_slave_0 added [ 1329.839216][T12959] hsr_slave_0: entered promiscuous mode [ 1329.851984][T12959] hsr_slave_1: entered promiscuous mode [ 1329.856988][T12959] debugfs: 'hsr0' already exists in 'hsr' [ 1329.857019][T12959] Cannot create hsr debugfs directory [ 1329.880433][T12976] team0: Port device team_slave_1 added [ 1330.137656][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.137686][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.137719][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.179360][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.179421][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.179499][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.994547][ T5806] Bluetooth: hci3: command tx timeout [ 1331.076706][T12976] hsr_slave_0: entered promiscuous mode [ 1331.078280][T12976] hsr_slave_1: entered promiscuous mode [ 1331.079330][T12976] debugfs: 'hsr0' already exists in 'hsr' [ 1331.079358][T12976] Cannot create hsr debugfs directory [ 1332.088430][T12875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.351466][T12811] veth0_vlan: entered promiscuous mode [ 1332.550799][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.632685][T12811] veth1_vlan: entered promiscuous mode [ 1332.667597][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.667765][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.859714][ T1465] bridge_slave_1: left allmulticast mode [ 1332.859748][ T1465] bridge_slave_1: left promiscuous mode [ 1332.860049][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.934798][ T1465] bridge_slave_0: left allmulticast mode [ 1332.934829][ T1465] bridge_slave_0: left promiscuous mode [ 1332.935058][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.030216][ T1465] bridge_slave_1: left allmulticast mode [ 1333.030249][ T1465] bridge_slave_1: left promiscuous mode [ 1333.030548][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.102042][ T1465] bridge_slave_0: left allmulticast mode [ 1333.102074][ T1465] bridge_slave_0: left promiscuous mode [ 1333.102327][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.605477][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.662750][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.686524][ T1465] bond0 (unregistering): Released all slaves [ 1335.870668][ T1465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.956276][ T1465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.979096][ T1465] bond0 (unregistering): Released all slaves [ 1336.040324][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.040471][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.764904][T12811] veth0_macvtap: entered promiscuous mode [ 1338.937714][ T1465] hsr_slave_0: left promiscuous mode [ 1338.962063][ T1465] hsr_slave_1: left promiscuous mode [ 1338.963182][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.013535][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.226279][ T1465] hsr_slave_0: left promiscuous mode [ 1339.283082][ T1465] hsr_slave_1: left promiscuous mode [ 1339.284143][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.312628][ T1465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.517454][ T1465] veth1_vlan: left promiscuous mode [ 1339.517650][ T1465] veth0_vlan: left promiscuous mode [ 1341.697382][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1341.963610][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1345.184011][ T1465] team0 (unregistering): Port device team_slave_1 removed [ 1345.472344][ T1465] team0 (unregistering): Port device team_slave_0 removed [ 1347.726587][T12811] veth1_macvtap: entered promiscuous mode [ 1347.824864][T12811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.898578][T12811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.218537][ T1380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.218909][ T1380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.219153][ T1380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.219391][ T1380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.288447][ T8343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.288472][ T8343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.330323][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.529347][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.529371][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.755760][T12959] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1353.342361][T12959] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1353.390640][T12959] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1353.551605][T12959] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1354.216485][T12976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.264821][T12976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.322470][T12976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.371223][T12976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1354.606576][T12875] veth0_vlan: entered promiscuous mode [ 1354.715654][T12875] veth1_vlan: entered promiscuous mode [ 1355.119112][T12875] veth0_macvtap: entered promiscuous mode [ 1355.136632][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.193078][T12875] veth1_macvtap: entered promiscuous mode [ 1355.323247][T12959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.367207][T12875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.390937][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.411918][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.412064][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.430906][T12875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.483182][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.489083][ T6300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.525797][ T1588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.555102][ T6300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.573538][ T6300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.586150][ T1588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.600143][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.734496][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.734769][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.852372][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.852531][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.248574][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.248597][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.370649][T12976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1356.584931][ T1465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.584965][ T1465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.213610][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.606163][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.606239][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.738838][T12959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.943814][T12976] veth0_vlan: entered promiscuous mode [ 1362.047455][T12976] veth1_vlan: entered promiscuous mode [ 1362.235299][T12976] veth0_macvtap: entered promiscuous mode [ 1362.284029][T12959] veth0_vlan: entered promiscuous mode [ 1362.299055][T12976] veth1_macvtap: entered promiscuous mode [ 1362.360429][T12959] veth1_vlan: entered promiscuous mode [ 1362.448915][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.538975][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.470320][ T1496] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.481782][ T1496] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.544432][T12959] veth0_macvtap: entered promiscuous mode [ 1364.558242][ T1496] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.561176][T13392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1590'. [ 1364.585809][ T1496] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.617122][T12959] veth1_macvtap: entered promiscuous mode [ 1364.963330][T12959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.187351][T12959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.353650][ T6300] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.407454][ T6300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.451577][ T6300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.470492][ T1380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.470519][ T1380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.490095][ T6300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.756437][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.756475][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.362672][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.362695][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.681051][ T1496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.681076][ T1496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.498279][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 1369.498314][T13438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1600'. [ 1372.001699][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1372.035939][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1372.039342][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1372.048433][T12249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1372.063107][T12249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1372.702789][T13472] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1607'. [ 1372.928346][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1607'. [ 1375.709867][ T5806] Bluetooth: hci4: command tx timeout [ 1377.873881][T12249] Bluetooth: hci4: command tx timeout [ 1379.017914][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1616'. [ 1380.192472][T12249] Bluetooth: hci4: command tx timeout [ 1383.057166][T12249] Bluetooth: hci4: command tx timeout [ 1383.845624][T13561] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 1383.878158][T13547] IPVS: stopping backup sync thread 13561 ... [ 1384.298799][T10564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.338954][T10564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.968646][T10564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.147819][T10564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.577095][T13462] chnl_net:caif_netlink_parms(): no params data found [ 1391.998696][T13462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.998785][T13462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.998954][T13462] bridge_slave_0: entered allmulticast mode [ 1392.004253][T13462] bridge_slave_0: entered promiscuous mode [ 1392.029747][T13462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.030077][T13462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.030777][T13462] bridge_slave_1: entered allmulticast mode [ 1392.068366][T13462] bridge_slave_1: entered promiscuous mode [ 1403.017743][T10564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.124691][T10564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.177695][T10564] bond0 (unregistering): Released all slaves [ 1404.975440][T10564] tipc: Left network mode [ 1404.980730][T13462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.013018][T13462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.411024][T13462] team0: Port device team_slave_0 added [ 1405.430848][T13462] team0: Port device team_slave_1 added [ 1405.990234][T13462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.990255][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.990287][T13462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.240964][T13462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.240986][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.241018][T13462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.102282][T13462] hsr_slave_0: entered promiscuous mode [ 1409.109934][T13462] hsr_slave_1: entered promiscuous mode [ 1409.143287][T13462] debugfs: 'hsr0' already exists in 'hsr' [ 1409.143354][T13462] Cannot create hsr debugfs directory [ 1412.115497][T10564] hsr_slave_0: left promiscuous mode [ 1412.157996][T10564] hsr_slave_1: left promiscuous mode [ 1412.158745][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.158769][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.222473][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.222496][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.700362][T10564] veth1_macvtap: left promiscuous mode [ 1412.700472][T10564] veth0_macvtap: left promiscuous mode [ 1412.709917][T10564] veth1_vlan: left promiscuous mode [ 1412.710443][T10564] veth0_vlan: left promiscuous mode [ 1414.285486][T13775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1417.117918][T12249] Bluetooth: hci4: command tx timeout [ 1420.111633][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 1420.261529][T10564] team0 (unregistering): Port device team_slave_1 removed [ 1420.611008][T10564] team0 (unregistering): Port device team_slave_0 removed [ 1424.109561][ T5958] infiniband syz0: ib_query_port failed (-19) [ 1425.219573][T13829] netlink: 'syz.6.1709': attribute type 46 has an invalid length. [ 1428.289853][T13462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1428.430698][T13462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1428.530514][T13462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1428.627859][T13462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1428.849654][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.849730][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.108102][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.191738][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.223444][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.223662][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.258453][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.262012][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.380890][T13462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.831348][T13462] veth0_vlan: entered promiscuous mode [ 1430.964607][T13462] veth1_vlan: entered promiscuous mode [ 1431.058772][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 1431.272831][T13462] veth0_macvtap: entered promiscuous mode [ 1431.361104][T13462] veth1_macvtap: entered promiscuous mode [ 1431.559727][T13462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.618460][T13462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.681223][ T1588] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.747109][ T1588] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.749393][ T1588] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.772593][ T1588] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.974018][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.974044][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.894223][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.900837][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.918146][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.968091][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.971707][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1438.157138][T12249] Bluetooth: hci1: command tx timeout [ 1439.761803][T13982] tipc: Can't bind to reserved service type 1 [ 1440.392148][T12249] Bluetooth: hci1: command tx timeout [ 1441.245571][ T1376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.464582][T13941] chnl_net:caif_netlink_parms(): no params data found [ 1442.374728][ T1376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.606359][T12249] Bluetooth: hci1: command tx timeout [ 1443.131955][ T1376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.258395][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.258528][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.258793][T13941] bridge_slave_0: entered allmulticast mode [ 1443.261864][T13941] bridge_slave_0: entered promiscuous mode [ 1443.265817][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.266015][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.266205][T13941] bridge_slave_1: entered allmulticast mode [ 1443.343677][T13941] bridge_slave_1: entered promiscuous mode [ 1445.161210][T12249] Bluetooth: hci1: command tx timeout [ 1445.707061][ T1376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.011522][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.040835][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.298213][T13941] team0: Port device team_slave_0 added [ 1446.317096][T13941] team0: Port device team_slave_1 added [ 1446.613951][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.613971][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.614001][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.616574][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.616590][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.616619][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.326527][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 1448.744967][T13941] hsr_slave_0: entered promiscuous mode [ 1448.746524][T13941] hsr_slave_1: entered promiscuous mode [ 1448.747516][T13941] debugfs: 'hsr0' already exists in 'hsr' [ 1448.747543][T13941] Cannot create hsr debugfs directory [ 1449.194772][ T1376] bridge_slave_1: left allmulticast mode [ 1449.194805][ T1376] bridge_slave_1: left promiscuous mode [ 1449.195059][ T1376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.469074][ T1376] bridge_slave_0: left allmulticast mode [ 1449.469099][ T1376] bridge_slave_0: left promiscuous mode [ 1449.469298][ T1376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.981659][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 1455.818808][ T1376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.904962][ T1376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.950866][ T1376] bond0 (unregistering): Released all slaves [ 1462.447542][ T1376] hsr_slave_0: left promiscuous mode [ 1462.550396][ T1376] hsr_slave_1: left promiscuous mode [ 1462.551528][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1462.551557][ T1376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.779905][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.779929][ T1376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.585934][ T1376] veth1_macvtap: left promiscuous mode [ 1464.586056][ T1376] veth0_macvtap: left promiscuous mode [ 1464.586371][ T1376] veth1_vlan: left promiscuous mode [ 1464.586578][ T1376] veth0_vlan: left promiscuous mode [ 1473.782295][ T1376] team0 (unregistering): Port device team_slave_1 removed [ 1474.238740][ T1376] team0 (unregistering): Port device team_slave_0 removed [ 1481.337343][T14280] tipc: Started in network mode [ 1481.337384][T14280] tipc: Node identity 3aebf1b56ab9, cluster identity 4711 [ 1481.338112][T14280] tipc: Enabled bearer , priority 0 [ 1481.341315][T14280] syzkaller0: entered promiscuous mode [ 1481.341340][T14280] syzkaller0: entered allmulticast mode [ 1481.591534][T14280] tipc: Resetting bearer [ 1482.492681][T14273] tipc: Resetting bearer [ 1482.823457][T14273] tipc: Disabling bearer [ 1483.720438][T13706] tipc: Node number set to 1347613109 [ 1487.092651][T13941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1487.207170][T13941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1487.608869][T13941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1487.919890][T13941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1489.884711][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.935746][T13941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.001401][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.001571][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.038056][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.048298][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.263817][T13941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.045116][T13941] veth0_vlan: entered promiscuous mode [ 1492.113592][T13941] veth1_vlan: entered promiscuous mode [ 1492.222252][T13941] veth0_macvtap: entered promiscuous mode [ 1493.553286][T13941] veth1_macvtap: entered promiscuous mode [ 1493.754427][T13941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.825680][T13941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.930663][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.933550][ T6300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.958995][ T6300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.965022][ T6300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.505598][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.505622][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.528624][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.528701][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.681696][ T1376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.681720][ T1376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.645318][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1858'. [ 1498.645344][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1858'. [ 1505.614509][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1873'. [ 1505.614556][T14504] openvswitch: netlink: Flow actions attr not present in new flow. [ 1505.696061][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1874'. [ 1506.016418][T14510] syzkaller0: entered promiscuous mode [ 1507.731615][T14545] netlink: 'syz.5.1882': attribute type 12 has an invalid length. [ 1510.115979][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1510.116007][T14559] openvswitch: netlink: Flow actions attr not present in new flow. [ 1515.427220][T14607] kthread_run failed with err -4 [ 1516.139153][T14626] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1900'. [ 1516.604993][T14633] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 1516.690827][T14625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.870164][T14625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.571222][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1911'. [ 1518.148811][T14625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.185712][T14625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.338244][T14650] kthread_run failed with err -4 [ 1523.543213][T14700] netlink: 'syz.5.1919': attribute type 1 has an invalid length. [ 1523.641195][ T1588] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.756781][ T1588] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.790944][T14704] syzkaller0: entered promiscuous mode [ 1523.790977][T14704] syzkaller0: entered allmulticast mode [ 1523.805861][ T1588] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.805990][ T1588] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.851403][T14707] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1921'. [ 1524.219612][T14717] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1922'. [ 1526.236971][T14723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 1526.455614][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1922'. [ 1526.472532][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1922'. [ 1532.279785][T14770] netlink: 'syz.8.1933': attribute type 12 has an invalid length. [ 1535.304592][T14794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input30 [ 1539.775911][T14828] netlink: 'syz.6.1949': attribute type 12 has an invalid length. [ 1542.121894][T14855] netlink: 'syz.6.1955': attribute type 9 has an invalid length. [ 1545.906417][T14886] netlink: 'syz.3.1961': attribute type 12 has an invalid length. [ 1546.135474][T14894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input31 [ 1549.567279][T14947] netlink: 'syz.8.1979': attribute type 12 has an invalid length. [ 1549.719381][T14949] trusted_key: syz.5.1981 sent an empty control message without MSG_MORE. [ 1553.572427][T14982] vlan2: entered promiscuous mode [ 1553.572452][T14982] bond0: entered promiscuous mode [ 1553.572467][T14982] bond_slave_0: entered promiscuous mode [ 1553.583760][T14982] bond_slave_1: entered promiscuous mode [ 1554.336621][T14999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.337169][T14999] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1554.338339][T14999] bond0: (slave gre0): Error -95 calling set_mac_address [ 1554.605768][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1997'. [ 1554.805992][T15010] netlink: 'syz.5.1996': attribute type 12 has an invalid length. [ 1558.537375][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2009'. [ 1559.791373][T15071] netlink: 'syz.7.2012': attribute type 12 has an invalid length. [ 1560.210362][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1560.210468][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.371406][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2020'. [ 1562.517823][T15099] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input32 [ 1564.389486][T15142] netlink: 'syz.5.2030': attribute type 12 has an invalid length. [ 1566.619387][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1566.635737][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1566.646359][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1566.680001][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1566.680842][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1567.506666][T15159] chnl_net:caif_netlink_parms(): no params data found [ 1568.116292][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.116582][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.117193][T15159] bridge_slave_0: entered allmulticast mode [ 1568.135566][T15159] bridge_slave_0: entered promiscuous mode [ 1568.185122][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.198543][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.198813][T15159] bridge_slave_1: entered allmulticast mode [ 1568.258555][T15159] bridge_slave_1: entered promiscuous mode [ 1568.424007][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.497723][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.764836][T15159] team0: Port device team_slave_0 added [ 1568.805995][T15159] team0: Port device team_slave_1 added [ 1568.924631][T12249] Bluetooth: hci4: command tx timeout [ 1569.058041][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.058062][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.058088][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.060345][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.060364][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.060394][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.835314][T15159] hsr_slave_0: entered promiscuous mode [ 1569.836838][T15159] hsr_slave_1: entered promiscuous mode [ 1569.837848][T15159] debugfs: 'hsr0' already exists in 'hsr' [ 1569.837874][T15159] Cannot create hsr debugfs directory [ 1569.979591][T14955] Set syz1 is full, maxelem 65536 reached [ 1570.251660][T15237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1570.655905][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.671691][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.148281][T12249] Bluetooth: hci4: command tx timeout [ 1571.627141][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.684528][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.703483][T15260] tipc: Started in network mode [ 1572.703519][T15260] tipc: Node identity deabbe3bb1ed, cluster identity 4711 [ 1572.703798][T15260] tipc: Enabled bearer , priority 0 [ 1572.729612][T15263] syzkaller0: entered promiscuous mode [ 1572.729639][T15263] syzkaller0: entered allmulticast mode [ 1573.118900][T15278] tipc: Resetting bearer [ 1573.119875][ T1465] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.233112][T15254] tipc: Resetting bearer [ 1573.372016][T12249] Bluetooth: hci4: command tx timeout [ 1573.372908][T15254] tipc: Disabling bearer [ 1573.519288][ T1465] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.555744][ T1465] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.557620][ T1465] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.752388][T15335] geneve0: entered promiscuous mode [ 1575.321524][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1575.454035][T15359] tipc: Enabled bearer , priority 0 [ 1575.467698][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1575.546044][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1575.552966][T15159] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1575.603322][T12249] Bluetooth: hci4: command tx timeout [ 1575.713558][ T57] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1575.714086][T15361] syzkaller0: entered promiscuous mode [ 1575.714111][T15361] syzkaller0: entered allmulticast mode [ 1575.753809][T15353] tipc: Resetting bearer [ 1575.966910][T15353] tipc: Disabling bearer [ 1576.168718][T15159] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1576.254797][ T57] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.257886][T15159] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1576.345717][ T57] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.354919][T15159] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1576.434093][ T57] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.437831][ T1440] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438071][ T1440] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438114][ T1440] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438165][ T1440] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438207][ T1440] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438246][ T1440] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438285][ T1440] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438324][ T1440] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.438364][ T1440] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 20000 - 0 [ 1576.814526][T15394] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2077'. [ 1577.140915][T15404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2080'. [ 1577.665054][T15159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.687703][T15417] lo: entered allmulticast mode [ 1577.771541][T15159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.864540][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.865489][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.901040][T15419] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1577.917002][T11591] IPVS: starting estimator thread 0... [ 1577.973632][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.973740][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.044098][T15425] IPVS: using max 9 ests per chain, 21600 per kthread [ 1579.435300][T15464] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2094'. [ 1579.949885][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.438574][T15529] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2109'. [ 1581.608565][T15159] veth0_vlan: entered promiscuous mode [ 1581.662811][T15159] veth1_vlan: entered promiscuous mode [ 1581.788488][T15159] veth0_macvtap: entered promiscuous mode [ 1581.820725][T15159] veth1_macvtap: entered promiscuous mode [ 1581.889127][T15159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.931456][T15159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.002656][ T1465] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.027316][ T1465] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.030538][ T1465] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.129130][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2113'. [ 1582.155799][ T1465] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.207359][T15541] bond_slave_0: entered promiscuous mode [ 1582.207418][T15541] bond_slave_1: entered promiscuous mode [ 1582.209020][T15541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1582.210807][T15541] bond_slave_0: left promiscuous mode [ 1582.210858][T15541] bond_slave_1: left promiscuous mode [ 1583.091258][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.091283][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.144385][T15569] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2121'. [ 1583.309209][ T1465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.309232][ T1465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.549612][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2127'. [ 1584.553235][T15619] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2135'. [ 1584.755098][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2142'. [ 1585.008863][T15609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.009665][T15609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.686369][T15609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.710322][T15609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.549936][T15660] wg1 speed is unknown, defaulting to 1000 [ 1588.551360][ T1496] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.605975][ T1496] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.607484][ T1448] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.607564][T15660] wg1 speed is unknown, defaulting to 1000 [ 1588.614894][ T1448] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.627782][T15660] wg1 speed is unknown, defaulting to 1000 [ 1590.270421][T15731] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2178'. [ 1590.690103][T15743] ip6gretap0: entered promiscuous mode [ 1590.729361][T15743] ip6gretap0: left promiscuous mode [ 1590.819818][T15660] infiniband syz0: set down [ 1590.819836][T15660] infiniband syz0: added wg1 [ 1591.051934][T15660] RDS/IB: syz0: added [ 1591.053047][T15660] smc: adding ib device syz0 with port count 1 [ 1591.053328][T15660] smc: ib device syz0 port 1 has no pnetid [ 1591.081315][ T5958] wg1 speed is unknown, defaulting to 1000 [ 1591.202507][T15760] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1591.213564][T11591] wg1 speed is unknown, defaulting to 1000 [ 1591.335915][T15660] wg1 speed is unknown, defaulting to 1000 [ 1591.827333][T15781] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2191'. [ 1592.464788][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.497673][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.351154][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.368570][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.528993][T15804] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2198'. [ 1594.534570][T15660] wg1 speed is unknown, defaulting to 1000 [ 1594.598926][ T24] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.809590][ T24] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.810338][T15823] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1594.810525][T15823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1594.812742][ T24] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.812787][ T24] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.604132][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2212'. [ 1596.062925][T15865] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2217'. [ 1596.066637][T15865] gretap0: entered promiscuous mode [ 1596.126325][T15865] gretap0: left promiscuous mode [ 1596.190721][T15865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.192531][T15865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.340163][T15865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1596.340653][T15660] wg1 speed is unknown, defaulting to 1000 [ 1596.678212][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 1597.224511][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2225'. [ 1597.424813][T15901] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2226'. [ 1597.709663][T15660] wg1 speed is unknown, defaulting to 1000 [ 1598.293966][T15920] gretap0: entered promiscuous mode [ 1598.294356][T15920] vlan2: entered promiscuous mode [ 1598.833802][T15660] wg1 speed is unknown, defaulting to 1000 [ 1598.933781][T15942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1600.114126][T15979] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2252'. [ 1601.907729][T15660] wg1 speed is unknown, defaulting to 1000 [ 1604.716390][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1604.726814][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1604.751718][T16014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2265'. [ 1604.761231][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1604.777568][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1604.780096][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1605.079072][T16021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1605.530039][T16009] wg1 speed is unknown, defaulting to 1000 [ 1607.164994][ T5806] Bluetooth: hci1: command tx timeout [ 1607.509342][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2271'. [ 1608.048997][T16012] wg1 speed is unknown, defaulting to 1000 [ 1608.221461][T16058] pim6reg: entered allmulticast mode [ 1608.261072][T16058] pim6reg: left allmulticast mode [ 1608.629694][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2275'. [ 1609.531288][ T5806] Bluetooth: hci1: command tx timeout [ 1610.877545][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2281'. [ 1611.687108][ T5806] Bluetooth: hci1: command tx timeout [ 1611.810558][T16104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.356839][T16116] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 1612.356868][T16116] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2291'. [ 1612.356900][T16116] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2291'. [ 1612.356916][T16116] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 1612.356932][T16116] netlink: 634 bytes leftover after parsing attributes in process `syz.7.2291'. [ 1613.497078][T16012] chnl_net:caif_netlink_parms(): no params data found [ 1613.669425][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1613.749525][T16145] netlink: 'syz.7.2296': attribute type 12 has an invalid length. [ 1613.910728][ T5806] Bluetooth: hci1: command tx timeout [ 1614.137932][T16155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1614.634290][T16012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.634501][T16012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.634768][T16012] bridge_slave_0: entered allmulticast mode [ 1614.639883][T16012] bridge_slave_0: entered promiscuous mode [ 1614.676125][T16012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.676259][T16012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.676546][T16012] bridge_slave_1: entered allmulticast mode [ 1614.715594][T16012] bridge_slave_1: entered promiscuous mode [ 1614.967437][T16012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.979815][T16178] wg1 speed is unknown, defaulting to 1000 [ 1615.024103][T16012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.275985][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2309'. [ 1615.292440][ T6300] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 20000 - 0 [ 1615.355453][T16188] netlink: 'syz.9.2309': attribute type 12 has an invalid length. [ 1615.722912][T16012] team0: Port device team_slave_0 added [ 1615.752135][T16167] wg1 speed is unknown, defaulting to 1000 [ 1615.752293][ T1376] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 20000 - 0 [ 1615.782018][T16012] team0: Port device team_slave_1 added [ 1616.148903][T16197] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1616.149039][ T1448] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 20000 - 0 [ 1616.176299][T16012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.176318][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.176347][T16012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.275255][T16012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.275275][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.275306][T16012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.342837][ T1448] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 20000 - 0 [ 1616.426390][ T1496] bridge_slave_1: left allmulticast mode [ 1616.426433][ T1496] bridge_slave_1: left promiscuous mode [ 1616.426666][ T1496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.510007][ T1496] bridge_slave_0: left allmulticast mode [ 1616.510039][ T1496] bridge_slave_0: left promiscuous mode [ 1616.510336][ T1496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.315757][ T1496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.380048][ T1496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.402207][ T1496] bond0 (unregistering): Released all slaves [ 1618.663709][T16201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1618.915718][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2321'. [ 1618.968277][T16217] netlink: 'syz.9.2321': attribute type 12 has an invalid length. [ 1619.497524][T16012] hsr_slave_0: entered promiscuous mode [ 1619.498918][T16012] hsr_slave_1: entered promiscuous mode [ 1619.499846][T16012] debugfs: 'hsr0' already exists in 'hsr' [ 1619.499869][T16012] Cannot create hsr debugfs directory [ 1620.226825][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 1620.297945][T16243] netlink: 'syz.6.2332': attribute type 12 has an invalid length. [ 1620.467230][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2334'. [ 1620.467262][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2334'. [ 1621.731064][T16269] syzkaller0: entered promiscuous mode [ 1621.731095][T16269] syzkaller0: entered allmulticast mode [ 1622.684074][T16012] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1622.955004][ T1496] hsr_slave_0: left promiscuous mode [ 1622.997891][ T1496] hsr_slave_1: left promiscuous mode [ 1622.998973][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1623.056076][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.893265][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1625.893368][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1626.174658][ T1496] team0 (unregistering): Port device team_slave_1 removed [ 1626.473700][ T1496] team0 (unregistering): Port device team_slave_0 removed [ 1627.949681][ T1440] smc: removing ib device syz0 [ 1630.095988][T16012] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1630.553636][T16012] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1630.643210][T16342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1631.247578][T16012] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1631.989784][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2378'. [ 1631.989808][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2378'. [ 1632.451263][T16012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1632.559987][T16012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1632.663668][T16012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1632.804616][T16012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1632.825556][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2388'. [ 1632.825581][T16403] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2388'. [ 1632.825601][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2388'. [ 1632.951538][T16413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1633.444676][T16415] syz.6.2390 (16415) used greatest stack depth: 17456 bytes left [ 1633.611463][T16012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.679040][T16012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.708412][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.708623][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.747575][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.747811][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.576349][T16012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.841101][T16462] team_slave_0: entered promiscuous mode [ 1634.841219][T16462] team_slave_1: entered promiscuous mode [ 1634.871670][T16462] vlan2: entered promiscuous mode [ 1634.871696][T16462] team0: entered promiscuous mode [ 1635.142726][T16012] veth0_vlan: entered promiscuous mode [ 1635.185211][T16468] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2408'. [ 1635.261888][T16012] veth1_vlan: entered promiscuous mode [ 1635.482917][T16012] veth0_macvtap: entered promiscuous mode [ 1635.523715][T16012] veth1_macvtap: entered promiscuous mode [ 1635.623839][T16480] Bluetooth: MGMT ver 1.23 [ 1635.687144][T16012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.738515][T16012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.771635][ T1448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.771900][ T1448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.771943][ T1448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.771984][ T1448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.302500][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.302523][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.375535][T16498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1636.523426][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.523449][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.698043][T16502] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2420'. [ 1638.304969][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2436'. [ 1638.450152][T16547] netlink: 'syz.5.2436': attribute type 12 has an invalid length. [ 1639.607482][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2455'. [ 1639.607507][T16598] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2455'. [ 1639.607527][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2455'. [ 1639.641366][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'. [ 1641.005181][T16639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2470'. [ 1641.169760][T16641] syzkaller0: entered promiscuous mode [ 1641.169788][T16641] syzkaller0: entered allmulticast mode [ 1642.052594][T11996] IPVS: starting estimator thread 0... [ 1642.176778][T16653] IPVS: using max 9 ests per chain, 21600 per kthread [ 1644.611719][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2484'. [ 1645.298654][T16700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1645.782820][T16702] syzkaller0: entered promiscuous mode [ 1645.782850][T16702] syzkaller0: entered allmulticast mode [ 1648.284545][T11995] IPVS: starting estimator thread 0... [ 1648.388050][T16736] IPVS: using max 9 ests per chain, 21600 per kthread [ 1648.584605][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2481'. [ 1648.584630][T16744] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2481'. [ 1648.584650][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2481'. [ 1651.862563][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2511'. [ 1651.992132][T16775] netlink: 'syz.6.2511': attribute type 12 has an invalid length. [ 1652.216400][T16789] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2517'. [ 1652.285628][T16786] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1652.698571][T16795] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1654.407839][T16843] geneve2: entered promiscuous mode [ 1654.575671][T16840] kvm: kvm [16837]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 1654.629090][T16844] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1654.630189][ T24] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1654.668870][ T24] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1654.704365][ T24] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1654.704431][ T24] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1655.157958][T16858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2537'. [ 1656.099044][T16872] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1656.787742][T16900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1657.893471][T16926] netlink: 'syz.6.2560': attribute type 12 has an invalid length. [ 1659.586859][T16971] pim6reg: entered allmulticast mode [ 1659.746941][T16977] tipc: Enabled bearer , priority 0 [ 1659.767436][T16977] tipc: Resetting bearer [ 1659.768449][T16968] pim6reg: left allmulticast mode [ 1659.954405][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2580'. [ 1659.954635][T16984] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2580'. [ 1659.954657][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2580'. [ 1660.868656][T16976] tipc: Disabling bearer [ 1661.114646][T16988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1661.118364][T16989] netlink: 'syz.0.2579': attribute type 12 has an invalid length. [ 1661.541297][T17016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1662.724958][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 1663.044948][T17045] netlink: 'syz.6.2594': attribute type 12 has an invalid length. [ 1663.046523][T17037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1664.639771][T17083] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1664.995598][T17093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1665.197776][T17103] netlink: 'syz.6.2612': attribute type 12 has an invalid length. [ 1666.014856][T17118] pim6reg: entered allmulticast mode [ 1666.101440][T17124] pim6reg: left allmulticast mode [ 1666.690532][T17137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2625'. [ 1671.777631][T17158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1671.800377][T17160] netlink: 'syz.6.2631': attribute type 12 has an invalid length. [ 1672.094542][T17164] syzkaller0: entered promiscuous mode [ 1672.094570][T17164] syzkaller0: entered allmulticast mode [ 1672.462571][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2637'. [ 1672.946043][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1673.072967][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1673.072994][T17193] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1673.073015][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1673.401044][ T1150] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.401103][ T1150] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.401141][ T1150] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1673.401182][ T1150] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1675.962155][T17239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1676.566292][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1676.566326][T17252] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1676.566347][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1679.008738][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2670'. [ 1679.008755][T17272] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2670'. [ 1679.008769][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2670'. [ 1679.610299][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 1679.610330][T17278] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2674'. [ 1679.610361][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 1680.548314][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1685.126200][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2684'. [ 1685.126222][T17353] IPv6: NLM_F_CREATE should be specified when creating new route [ 1685.170398][T17357] netlink: 'syz.0.2695': attribute type 12 has an invalid length. [ 1685.170423][T17357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1685.536128][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1685.536171][T17370] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1685.536189][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2701'. [ 1686.089886][T17386] netlink: 'syz.0.2704': attribute type 12 has an invalid length. [ 1687.171056][T17436] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1688.823821][T17487] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1691.574821][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1691.574873][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1692.447978][T17591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1695.760102][T17644] tipc: Started in network mode [ 1695.760135][T17644] tipc: Node identity 96930fe69444, cluster identity 4711 [ 1695.760282][T17644] tipc: Enabled bearer , priority 0 [ 1695.764893][T17644] tipc: Resetting bearer [ 1696.493066][T17643] tipc: Disabling bearer [ 1698.355734][T13706] tipc: Node number set to 47648742 [ 1701.909633][T17745] tipc: Started in network mode [ 1701.909669][T17745] tipc: Node identity 3a6adb989bd6, cluster identity 4711 [ 1701.909954][T17745] tipc: Enabled bearer , priority 0 [ 1701.999525][T17745] tipc: Resetting bearer [ 1702.707753][T17744] tipc: Disabling bearer [ 1704.640607][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 1704.640636][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 1707.072980][T17865] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2806'. [ 1707.209258][T17869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2807'. [ 1708.294767][T17903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1708.405863][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2815'. [ 1708.405893][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2815'. [ 1709.304561][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1709.304592][T17943] IPv6: NLM_F_CREATE should be specified when creating new route [ 1709.967311][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2830'. [ 1710.533950][T17974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1711.374565][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1711.972853][T18023] tipc: Enabled bearer , priority 0 [ 1712.021002][T18017] tipc: Resetting bearer [ 1712.347244][T18015] tipc: Disabling bearer [ 1712.516233][T11591] IPVS: starting estimator thread 0... [ 1712.606565][T18036] IPVS: using max 12 ests per chain, 28800 per kthread [ 1712.639011][T18039] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1712.708085][T18025] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1713.389628][ T5806] Bluetooth: hci5: command 0x0406 tx timeout [ 1713.902520][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2857'. [ 1715.237627][T18055] comedi comedi2: reset error (fatal) [ 1715.410295][T18087] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1716.022385][T18107] vlan2: entered promiscuous mode [ 1716.022410][T18107] bond0: entered promiscuous mode [ 1716.022426][T18107] bond_slave_0: entered promiscuous mode [ 1716.022718][T18107] bond_slave_1: entered promiscuous mode [ 1716.704380][T18137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2885'. [ 1717.629863][T18147] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1718.198113][T18152] syzkaller0: entered promiscuous mode [ 1718.198147][T18152] syzkaller0: entered allmulticast mode [ 1718.200727][T18163] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1719.201319][T18197] pim6reg: entered allmulticast mode [ 1719.695480][T18193] pim6reg: left allmulticast mode [ 1720.150739][T18206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1720.151348][T18213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1722.533178][T18244] binder_alloc: 18242: binder_alloc_buf, no vma [ 1723.246409][T18251] syzkaller0: entered promiscuous mode [ 1723.246431][T18251] syzkaller0: entered allmulticast mode [ 1723.596711][T18258] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2912'. [ 1723.609791][T18260] pim6reg: entered allmulticast mode [ 1723.884038][T18268] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1724.099190][T18259] pim6reg: left allmulticast mode [ 1724.390600][T18279] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1725.386056][T18296] binder_alloc: 18292: binder_alloc_buf, no vma [ 1727.050459][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 1727.399032][T18315] netlink: 'syz.6.2929': attribute type 12 has an invalid length. [ 1728.012896][T18331] pim6reg: entered allmulticast mode [ 1728.013348][T18327] pim6reg: left allmulticast mode [ 1728.518560][T18346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2937'. [ 1730.098414][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1730.134802][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1730.162734][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1730.177463][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1730.178426][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1732.372305][T18417] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2957'. [ 1732.449020][ T60] Bluetooth: hci2: command tx timeout [ 1733.725893][T18368] chnl_net:caif_netlink_parms(): no params data found [ 1733.938882][T18438] netlink: 'syz.9.2962': attribute type 16 has an invalid length. [ 1733.938910][T18438] netlink: 'syz.9.2962': attribute type 17 has an invalid length. [ 1734.034570][T18438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1734.037308][T18438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1734.297836][T18438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.294410][ T60] Bluetooth: hci2: command tx timeout [ 1735.567516][T18368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.567649][T18368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.568024][T18368] bridge_slave_0: entered allmulticast mode [ 1735.592002][T18368] bridge_slave_0: entered promiscuous mode [ 1735.602089][T18447] binder: BINDER_SET_CONTEXT_MGR already set [ 1735.602106][T18447] binder: 18446:18447 ioctl 4018620d 200000004a80 returned -16 [ 1735.829189][T18368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.829320][T18368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.829593][T18368] bridge_slave_1: entered allmulticast mode [ 1735.959531][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 1735.961471][T18455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'. [ 1735.981613][T18368] bridge_slave_1: entered promiscuous mode [ 1737.439738][T18368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.490510][T18368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.494559][ T60] Bluetooth: hci2: command tx timeout [ 1738.705365][T18368] team0: Port device team_slave_0 added [ 1738.843941][T18368] team0: Port device team_slave_1 added [ 1739.185090][T18368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.185110][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.185139][T18368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.187591][T18368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.187608][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.187637][T18368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.440213][T18368] hsr_slave_0: entered promiscuous mode [ 1739.441879][T18368] hsr_slave_1: entered promiscuous mode [ 1739.443513][T18368] debugfs: 'hsr0' already exists in 'hsr' [ 1739.443541][T18368] Cannot create hsr debugfs directory [ 1739.717837][ T60] Bluetooth: hci2: command tx timeout [ 1740.500637][T18512] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1741.965658][T18537] netlink: 'syz.0.2991': attribute type 12 has an invalid length. [ 1745.945595][T18368] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1746.036553][T18368] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1746.113562][T18368] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1746.187859][T18368] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1746.307827][T12249] block nbd0: Receive control failed (result -22) [ 1746.673488][T18368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.713195][T18368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.732338][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.732455][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.774434][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.774638][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1746.848390][ T5958] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1747.008959][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 1747.018450][ T5958] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1747.018529][ T5958] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1747.018556][ T5958] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1747.018609][ T5958] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1747.018638][ T5958] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1747.018687][ T5958] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1747.018715][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.830779][T18648] process 'syz.9.3021' launched './file0' with NULL argv: empty string added [ 1751.904160][ T8907] usb 1-1: USB disconnect, device number 2 [ 1754.851149][T18368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.332012][T18713] binder: BINDER_SET_CONTEXT_MGR already set [ 1755.332030][T18713] binder: 18712:18713 ioctl 4018620d 200000004a80 returned -16 [ 1755.555405][T18720] ptrace attach of "./syz-executor exec"[12875] was attempted by "./syz-executor exec"[18720] [ 1755.567822][T18719] random: crng reseeded on system resumption [ 1756.004786][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 1757.131090][T18368] veth0_vlan: entered promiscuous mode [ 1757.221499][T18368] veth1_vlan: entered promiscuous mode [ 1757.256511][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1757.256613][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1757.875599][T18368] veth0_macvtap: entered promiscuous mode [ 1757.896952][T18368] veth1_macvtap: entered promiscuous mode [ 1758.090554][T18368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.327417][T18368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.432700][T18759] binder: BINDER_SET_CONTEXT_MGR already set [ 1758.432726][T18759] binder: 18758:18759 ioctl 4018620d 200000004a80 returned -16 [ 1758.460130][T17428] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.460187][T17428] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.460227][T17428] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.460265][T17428] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.902079][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3050'. [ 1760.161544][ T1465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.161571][ T1465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.400808][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.400842][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.812431][T18794] geneve2: entered promiscuous mode [ 1760.834488][ T1465] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1760.868169][ T1465] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1760.868233][ T1465] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1760.868274][ T1465] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1760.982871][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1761.278128][T18809] binder: BINDER_SET_CONTEXT_MGR already set [ 1761.278146][T18809] binder: 18808:18809 ioctl 4018620d 200000004a80 returned -16 [ 1762.591044][T18843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3073'. [ 1763.511365][T18871] team_slave_0: entered promiscuous mode [ 1763.511426][T18871] team_slave_1: entered promiscuous mode [ 1763.511575][T18871] vlan2: entered promiscuous mode [ 1763.511590][T18871] team0: entered promiscuous mode [ 1765.438877][T18904] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3090'. [ 1765.534285][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1765.534312][T18905] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1765.534332][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1766.143223][T18911] netlink: 'syz.0.3094': attribute type 16 has an invalid length. [ 1766.143248][T18911] netlink: 'syz.0.3094': attribute type 17 has an invalid length. [ 1766.380221][T18911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1766.382314][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1766.382337][T18924] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1766.382358][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1766.656514][T18936] netlink: 'syz.0.3100': attribute type 12 has an invalid length. [ 1766.892225][T18938] vlan2: entered promiscuous mode [ 1766.991069][T18940] tmpfs: Unknown parameter 'fscontext' [ 1767.740886][ T38] audit: type=1326 audit(1770713813.644:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.740959][ T38] audit: type=1326 audit(1770713813.654:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741007][ T38] audit: type=1326 audit(1770713813.654:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741059][ T38] audit: type=1326 audit(1770713813.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741107][ T38] audit: type=1326 audit(1770713813.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741162][ T38] audit: type=1326 audit(1770713813.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741211][ T38] audit: type=1326 audit(1770713813.663:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741260][ T38] audit: type=1326 audit(1770713813.663:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741308][ T38] audit: type=1326 audit(1770713813.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1767.741357][ T38] audit: type=1326 audit(1770713813.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18931 comm="syz.6.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1768.406051][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 1768.406076][T18954] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3105'. [ 1768.406096][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 1770.314643][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1770.314671][T18988] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1770.314693][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1770.359554][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3115'. [ 1770.359581][T18986] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3115'. [ 1770.359600][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3115'. [ 1770.638506][T18997] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1771.259705][T19019] vlan2: entered promiscuous mode [ 1771.429540][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3131'. [ 1771.752679][T19035] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1772.585854][T19060] tipc: Enabled bearer , priority 0 [ 1772.626925][T19060] tipc: Resetting bearer [ 1772.865010][T19059] tipc: Disabling bearer [ 1773.192909][T19074] tipc: Enabled bearer , priority 0 [ 1773.218030][T19074] tipc: Resetting bearer [ 1773.835943][T19073] tipc: Disabling bearer [ 1775.208843][T19111] __nla_validate_parse: 9 callbacks suppressed [ 1775.208875][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1775.208893][T19111] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1775.208912][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1775.276480][T19113] tipc: Enabling of bearer rejected, failed to enable media [ 1775.403252][T19118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1775.833078][T13706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1776.015525][T13706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.015587][T13706] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1776.015612][T13706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.054676][T13706] usb 1-1: config 0 descriptor?? [ 1776.107698][T13706] pwc: Askey VC010 type 2 USB webcam detected. [ 1776.515013][T13706] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1776.517070][T13706] pwc: recv_control_msg error -32 req 02 val 2700 [ 1776.518171][T13706] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1776.519409][T13706] pwc: recv_control_msg error -32 req 04 val 1000 [ 1776.520367][T13706] pwc: recv_control_msg error -32 req 04 val 1300 [ 1776.521361][T13706] pwc: recv_control_msg error -32 req 04 val 1400 [ 1776.522385][T13706] pwc: recv_control_msg error -32 req 02 val 2000 [ 1776.523892][T13706] pwc: recv_control_msg error -32 req 02 val 2100 [ 1776.525312][T13706] pwc: recv_control_msg error -32 req 04 val 1500 [ 1776.602382][T13706] pwc: recv_control_msg error -71 req 02 val 2500 [ 1776.605932][T13706] pwc: recv_control_msg error -71 req 02 val 2400 [ 1776.606531][T13706] pwc: recv_control_msg error -71 req 02 val 2600 [ 1776.607475][T13706] pwc: recv_control_msg error -71 req 02 val 2900 [ 1776.608013][T13706] pwc: recv_control_msg error -71 req 02 val 2800 [ 1776.608815][T13706] pwc: recv_control_msg error -71 req 04 val 1100 [ 1776.609557][T13706] pwc: recv_control_msg error -71 req 04 val 1200 [ 1776.685283][T13706] pwc: Registered as video103. [ 1776.701964][T19145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3166'. [ 1776.728223][T13706] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 1777.576612][T13706] usb 1-1: USB disconnect, device number 3 [ 1778.115267][T19163] tipc: Enabled bearer , priority 0 [ 1778.961400][T19155] tipc: Disabling bearer [ 1779.314043][T19184] tipc: Enabling of bearer rejected, failed to enable media [ 1779.483442][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1779.512377][T19196] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3177'. [ 1779.562022][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1779.697307][T19202] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3181'. [ 1780.254139][T19213] netlink: 'syz.5.3184': attribute type 16 has an invalid length. [ 1780.254165][T19213] netlink: 'syz.5.3184': attribute type 17 has an invalid length. [ 1781.648924][T19213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1781.901554][T19235] tipc: Enabled bearer , priority 0 [ 1781.927897][T19235] tipc: Resetting bearer [ 1783.527020][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3193'. [ 1783.541958][T19234] tipc: Disabling bearer [ 1783.781501][T19267] tipc: Enabling of bearer rejected, failed to enable media [ 1783.897132][T19272] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3196'. [ 1784.005765][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3197'. [ 1784.132140][ T1376] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1784.132461][ T1376] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1784.154744][ T1376] bond0: now running without any active interface! [ 1784.808275][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3204'. [ 1784.932693][T19305] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3206'. [ 1785.530132][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3211'. [ 1785.821165][T19334] tipc: Enabling of bearer rejected, failed to enable media [ 1785.946723][T19340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3215'. [ 1786.004406][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3217'. [ 1786.846629][T12249] Bluetooth: hci1: command 0x0406 tx timeout [ 1786.935308][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1787.629956][T19396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3229'. [ 1787.745191][T19394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1787.767646][T19398] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1788.392135][T19410] tipc: Enabling of bearer rejected, failed to enable media [ 1788.898352][T19430] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1789.080731][T19436] __nla_validate_parse: 2 callbacks suppressed [ 1789.080758][T19436] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3239'. [ 1791.641146][T19451] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1792.027078][T19467] netlink: 'syz.7.3248': attribute type 12 has an invalid length. [ 1792.288820][T19469] geneve2: entered promiscuous mode [ 1792.407956][ T1376] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1792.409655][ T1376] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1792.409710][ T1376] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1792.409751][ T1376] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1792.671644][T19485] tipc: Enabling of bearer rejected, failed to enable media [ 1792.797425][T19491] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3252'. [ 1793.683004][T19513] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1794.088588][T19525] netlink: 'syz.6.3261': attribute type 12 has an invalid length. [ 1794.566531][T19536] team_slave_0: entered promiscuous mode [ 1794.566596][T19536] team_slave_1: entered promiscuous mode [ 1794.566795][T19536] vlan2: entered promiscuous mode [ 1794.566812][T19536] team0: entered promiscuous mode [ 1795.547023][T19561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1796.009820][T19575] netlink: 'syz.7.3274': attribute type 12 has an invalid length. [ 1797.871327][T19609] vlan2: entered promiscuous mode [ 1797.871353][T19609] team0: entered promiscuous mode [ 1797.871368][T19609] team_slave_0: entered promiscuous mode [ 1797.871692][T19609] team_slave_1: entered promiscuous mode [ 1798.287974][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3288'. [ 1798.591367][T19617] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1799.988778][T19668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1802.302114][T19695] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1802.302174][T19695] CIFS mount error: No usable UNC path provided in device string! [ 1802.302174][T19695] [ 1802.302578][T19695] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1804.864386][ T38] kauditd_printk_skb: 121 callbacks suppressed [ 1804.864411][ T38] audit: type=1326 audit(1770713848.235:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864462][ T38] audit: type=1326 audit(1770713848.235:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864726][ T38] audit: type=1326 audit(1770713848.235:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864803][ T38] audit: type=1326 audit(1770713848.245:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864853][ T38] audit: type=1326 audit(1770713848.245:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864912][ T38] audit: type=1326 audit(1770713848.245:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.864960][ T38] audit: type=1326 audit(1770713848.245:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.865015][ T38] audit: type=1326 audit(1770713848.245:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.865065][ T38] audit: type=1326 audit(1770713848.254:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1804.865115][ T38] audit: type=1326 audit(1770713848.254:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19710 comm="syz.6.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbe80af79 code=0x7fc00000 [ 1805.386249][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3315'. [ 1805.846545][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3321'. [ 1806.043875][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3321'. [ 1806.220153][T19744] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1808.969954][T19778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1814.294533][ T5809] ------------[ cut here ]------------ [ 1814.294549][ T5809] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1814.294588][ T5809] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:3/5809 [ 1814.294821][ T5809] Modules linked in: [ 1814.294867][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1814.294897][ T5809] Tainted: [L]=SOFTLOCKUP [ 1814.294906][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1814.294921][ T5809] Workqueue: events drm_fb_helper_damage_work [ 1814.295019][ T5809] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1814.295055][ T5809] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 df 24 dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1814.295074][ T5809] RSP: 0018:ffffc90004f6f860 EFLAGS: 00010246 [ 1814.295092][ T5809] RAX: 1ffff110283ee400 RBX: ffffffff8f534080 RCX: 0000000000000000 [ 1814.295110][ T5809] RDX: ffffffff8b9ef3e0 RSI: ffffffff8ba0b140 RDI: ffffffff8f534080 [ 1814.295127][ T5809] RBP: ffffc90004f6f948 R08: 0000000000000000 R09: 0000000000000000 [ 1814.295142][ T5809] R10: dffffc0000000000 R11: fffffbfff1e90f2f R12: ffffffff8ba0b140 [ 1814.295158][ T5809] R13: ffff888141f72000 R14: 1ffff920009edf10 R15: ffffffff8b9ef3e0 [ 1814.295176][ T5809] FS: 0000000000000000(0000) GS:ffff8881266b1000(0000) knlGS:0000000000000000 [ 1814.295195][ T5809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1814.295224][ T5809] CR2: 00007f355a574180 CR3: 000000000d9b4000 CR4: 00000000003526f0 [ 1814.295294][ T5809] Call Trace: [ 1814.295309][ T5809] [ 1814.295325][ T5809] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1814.295362][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 1814.295469][ T5809] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1814.295539][ T5809] ? rt_spin_unlock+0x160/0x200 [ 1814.295569][ T5809] ? drm_vblank_get+0x147/0x260 [ 1814.295605][ T5809] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1814.295663][ T5809] drm_fb_helper_damage_work+0x131/0x6f0 [ 1814.295701][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.295736][ T5809] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1814.295778][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.295799][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.295825][ T5809] process_scheduled_works+0xaec/0x17a0 [ 1814.295879][ T5809] ? __pfx_process_scheduled_works+0x10/0x10 [ 1814.295900][ T5809] ? do_raw_spin_lock+0x12b/0x2f0 [ 1814.295931][ T5809] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1814.295950][ T5809] ? schedule+0x90/0x360 [ 1814.296014][ T5809] worker_thread+0xda6/0x1360 [ 1814.296065][ T5809] kthread+0x726/0x8b0 [ 1814.296098][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 1814.296121][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.296148][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 1814.296180][ T5809] ? rt_spin_unlock+0x160/0x200 [ 1814.296206][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.296237][ T5809] ret_from_fork+0x51b/0xa40 [ 1814.296282][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 1814.296305][ T5809] ? __switch_to+0xc82/0x1410 [ 1814.296363][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.296392][ T5809] ret_from_fork_asm+0x1a/0x30 [ 1814.296466][ T5809] [ 1814.296483][ T5809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1814.296510][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1814.296543][ T5809] Tainted: [L]=SOFTLOCKUP [ 1814.296551][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1814.296566][ T5809] Workqueue: events drm_fb_helper_damage_work [ 1814.296603][ T5809] Call Trace: [ 1814.296611][ T5809] [ 1814.296621][ T5809] vpanic+0x1e0/0x670 [ 1814.296669][ T5809] panic+0xc5/0xd0 [ 1814.296702][ T5809] ? __pfx_panic+0x10/0x10 [ 1814.296745][ T5809] ? ret_from_fork_asm+0x1a/0x30 [ 1814.296783][ T5809] __warn+0x315/0x4a0 [ 1814.296812][ T5809] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1814.296848][ T5809] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1814.296883][ T5809] __report_bug+0x29a/0x540 [ 1814.296979][ T5809] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1814.297014][ T5809] ? __pfx___report_bug+0x10/0x10 [ 1814.297069][ T5809] report_bug_entry+0x19a/0x290 [ 1814.297102][ T5809] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 1814.297133][ T5809] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 1814.297166][ T5809] handle_bug+0xca/0x200 [ 1814.297215][ T5809] exc_invalid_op+0x1a/0x50 [ 1814.297235][ T5809] asm_exc_invalid_op+0x1a/0x20 [ 1814.297333][ T5809] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1814.297366][ T5809] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 df 24 dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1814.297386][ T5809] RSP: 0018:ffffc90004f6f860 EFLAGS: 00010246 [ 1814.297407][ T5809] RAX: 1ffff110283ee400 RBX: ffffffff8f534080 RCX: 0000000000000000 [ 1814.297423][ T5809] RDX: ffffffff8b9ef3e0 RSI: ffffffff8ba0b140 RDI: ffffffff8f534080 [ 1814.297439][ T5809] RBP: ffffc90004f6f948 R08: 0000000000000000 R09: 0000000000000000 [ 1814.297453][ T5809] R10: dffffc0000000000 R11: fffffbfff1e90f2f R12: ffffffff8ba0b140 [ 1814.297476][ T5809] R13: ffff888141f72000 R14: 1ffff920009edf10 R15: ffffffff8b9ef3e0 [ 1814.297525][ T5809] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1814.297559][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 1814.297585][ T5809] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1814.297612][ T5809] ? rt_spin_unlock+0x160/0x200 [ 1814.297643][ T5809] ? drm_vblank_get+0x147/0x260 [ 1814.297680][ T5809] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1814.297713][ T5809] drm_fb_helper_damage_work+0x131/0x6f0 [ 1814.297752][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.297779][ T5809] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1814.297820][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.297842][ T5809] ? process_scheduled_works+0xa0f/0x17a0 [ 1814.297867][ T5809] process_scheduled_works+0xaec/0x17a0 [ 1814.297921][ T5809] ? __pfx_process_scheduled_works+0x10/0x10 [ 1814.297942][ T5809] ? do_raw_spin_lock+0x12b/0x2f0 [ 1814.297966][ T5809] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1814.297985][ T5809] ? schedule+0x90/0x360 [ 1814.298025][ T5809] worker_thread+0xda6/0x1360 [ 1814.298075][ T5809] kthread+0x726/0x8b0 [ 1814.298105][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 1814.298126][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.298152][ T5809] ? rt_spin_unlock+0x14f/0x200 [ 1814.298182][ T5809] ? rt_spin_unlock+0x160/0x200 [ 1814.298204][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.298240][ T5809] ret_from_fork+0x51b/0xa40 [ 1814.298267][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 1814.298288][ T5809] ? __switch_to+0xc82/0x1410 [ 1814.298326][ T5809] ? __pfx_kthread+0x10/0x10 [ 1814.298354][ T5809] ret_from_fork_asm+0x1a/0x30 [ 1814.298404][ T5809] [ 1814.299008][ T5809] Kernel Offset: disabled