last executing test programs: 24m49.502301149s ago: executing program 32 (id=143): unshare(0x4a000200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) 24m19.927125317s ago: executing program 33 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) unshare(0x8040480) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x2c}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r2, r1, 0x0, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x21800}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xc3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x5c}}, 0x0) unshare(0x40000280) 22m58.465495598s ago: executing program 34 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 22m54.310902905s ago: executing program 35 (id=542): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) ptrace(0x4206, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x20, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22m28.095364092s ago: executing program 36 (id=707): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 21m15.995653587s ago: executing program 37 (id=922): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21m15.207347092s ago: executing program 38 (id=924): madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 15m45.801837658s ago: executing program 39 (id=1024): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41c", 0x25}], 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {}, {0x5, 0x1}}}, 0x24}}, 0x40004) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) r8 = syz_open_dev$usbfs(0x0, 0x1, 0x351000) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 12m3.940247216s ago: executing program 40 (id=1378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 8m51.750500457s ago: executing program 41 (id=1743): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r3}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000006480), 0x0, 0x20008000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) 8m29.354909369s ago: executing program 42 (id=1824): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420f, r0) 7m58.983511136s ago: executing program 5 (id=1929): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) userfaultfd(0x80001) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 7m58.577650114s ago: executing program 5 (id=1930): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa8201, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7m56.758053139s ago: executing program 5 (id=1936): listen(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001480)=""/4096) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000000)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, 0x0, 0x0, 0x1, 0x7f, 0xfffffffb, 0x28, 0x1, 0x0}) 7m56.287796537s ago: executing program 5 (id=1938): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000200)={0x77359400}, 0x8) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0xfffffffffffffe00, 0x171cc0) sendmmsg$unix(r2, 0x0, 0x0, 0x811) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) 7m54.992982082s ago: executing program 43 (id=1940): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 7m53.320130337s ago: executing program 5 (id=1944): connect$unix(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 7m52.248817514s ago: executing program 5 (id=1945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015400000000020"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 7m37.07547828s ago: executing program 44 (id=1945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015400000000020"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 1m56.762632905s ago: executing program 9 (id=2754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1m54.207605025s ago: executing program 9 (id=2761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x3a, 0xe0, 0x1}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x8004}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m53.982201875s ago: executing program 9 (id=2763): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 1m53.402294978s ago: executing program 9 (id=2767): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 1m52.861826454s ago: executing program 9 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000240)) 1m51.813081513s ago: executing program 9 (id=2775): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x65, 0x0, 0x3, 0x2, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x15, 0x10, 0x0, @loopback}}}, 0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x4, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a045}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) 1m50.820199439s ago: executing program 45 (id=2775): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x65, 0x0, 0x3, 0x2, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x15, 0x10, 0x0, @loopback}}}, 0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x4, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a045}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) 1m50.268696753s ago: executing program 1 (id=2784): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, 0x0, 0x10) 1m50.051585282s ago: executing program 6 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000240)) 1m49.540994692s ago: executing program 6 (id=2786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x3a, 0xe0, 0x1}, 0x28) r1 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0xe, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0x1, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x2, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x7, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0x3, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x1, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) sendmsg$unix(r1, &(0x7f00000023c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002380), 0x0, 0x4}, 0x20000800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}], 0x1, 0x20004810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) close(0x3) 1m49.147032549s ago: executing program 1 (id=2787): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1m48.94320737s ago: executing program 6 (id=2788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m48.87625947s ago: executing program 8 (id=2789): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0) 1m48.796866164s ago: executing program 1 (id=2790): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 1m48.735228153s ago: executing program 8 (id=2791): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 1m48.703367978s ago: executing program 6 (id=2792): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 1m48.516809831s ago: executing program 8 (id=2793): syz_emit_ethernet(0xbe, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "69eb047c187e143bddcbe699ef7a74fd2c1a7c6b59dd637719d6395dda566f42", "6e8ae37dc217c78b70a4dc5eeb6f624200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea411688bf272fdef179d", "ff2a09d662def3d2eb45734d1b7067384ff2442258e9fc1dfc1701ba", {"18b0a3516f6b94835c625da017fdd035", "7fa6bc2b0e933988c64a103320cfe3d2"}}}}}}}, 0x0) 1m48.423529593s ago: executing program 6 (id=2794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24000080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m48.283187637s ago: executing program 8 (id=2795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001480)={r8, 0x65, "c38d58f316cfb1e050a05e45def314115479b42b422aa3700e14b9b555e4c13ba61e68ec25fc30ea0d76727827e3f59c64a75adea656269dce1c9a643f81cb459206bfaf8e4eb784c2bdca40b8e202c59ccc58b203696645bfefd98d2a3ba1589d13b9864d"}, &(0x7f0000001500)=0x6d) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x800) close(0x3) 1m48.123047899s ago: executing program 1 (id=2797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0xc}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000200)=""/224, 0x3a, 0xe0, 0x1}, 0x28) r1 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0xe, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0x1, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x80000001, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x2, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x7, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0x3, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x1, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) sendmsg$unix(r1, &(0x7f00000023c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002380), 0x0, 0x4}, 0x20000800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}], 0x1, 0x20004810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) close(0x3) 1m47.912791268s ago: executing program 6 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m47.839649022s ago: executing program 1 (id=2799): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1m47.251444082s ago: executing program 1 (id=2800): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, 0x0) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r6, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 1m47.229481772s ago: executing program 8 (id=2801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m46.917417549s ago: executing program 8 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x24040184) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4000000004, 0xb2, 0xe9, 0x8, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m32.466156924s ago: executing program 46 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m31.622143732s ago: executing program 47 (id=2800): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, 0x0) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r6, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 1m31.501222556s ago: executing program 48 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x24040184) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4000000004, 0xb2, 0xe9, 0x8, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.993108479s ago: executing program 3 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x480402, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x0, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240410c0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000fc8d9fe300090000000100005e4fc35f00", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xe48}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3b67}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 4.27376922s ago: executing program 0 (id=3136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='>', 0x1) 4.084944299s ago: executing program 0 (id=3137): unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 3.910451672s ago: executing program 4 (id=3138): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 3.872973767s ago: executing program 0 (id=3139): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x1}], 0x2}, 0xb00) 3.762075088s ago: executing program 2 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 3.720500533s ago: executing program 7 (id=3141): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, r9, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3.597686758s ago: executing program 0 (id=3142): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff11, &(0x7f0000000000)={0x0, 0xffffffffffffff72}}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) unshare(0x2a020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x800000a, 0x9, 0x2, 0x2, 0x3, 0x400}, 0x0, 0x0) 3.340830525s ago: executing program 4 (id=3143): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) close(r2) 3.317085461s ago: executing program 3 (id=3144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4a9755f127db2e6a6e33e74ac1d01f71b0af372c9084fa0c0f8d2cc8bddb720886b4cee57e929130c8bfb011dfd7dfac4754e4234c0e13eace1dd7112ae49d2b1cd888692a14dfa7dfd2e8d318d48bd853af19f752b8b00fdefd827f375fe8d9646231822076a7933ba6ae8ad38e084c6059fb291a03aeec145381175e615667ddeb80c8454f3461586cfb0eb8e5e79e02f9949cb94a6e6b2d8ee87ffb005a676113ceff17ca36f6f73edc4a0e97653d14912ccccfe65b8f01488e8c7c65b78bfdec75d47a6bfab0186f896502d8f29092140fbab4eaf8c4fcc6cfc1e697b84c5d73118ee2ec85897fa37ff97e29fc602c1f9ac2"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private0, 0x10}}, 0xe07c, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.096339497s ago: executing program 2 (id=3145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440), &(0x7f00000004c0)=0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.095818913s ago: executing program 4 (id=3146): r0 = io_uring_setup(0x2522, &(0x7f00000002c0)={0x0, 0xed2b, 0x800, 0x1, 0x284}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 2.948919427s ago: executing program 2 (id=3147): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000080)="0b000300010001", 0x7) 2.848845434s ago: executing program 4 (id=3148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) 2.839724164s ago: executing program 7 (id=3149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.69869166s ago: executing program 4 (id=3150): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x400261f2, 0x0) unshare(0x20000400) sendmsg$nl_generic(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc0d0) 2.640795224s ago: executing program 2 (id=3151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x6, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x6c, &(0x7f0000001500)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.423374221s ago: executing program 3 (id=3152): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 1.397749496s ago: executing program 7 (id=3153): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.204361514s ago: executing program 0 (id=3154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x480402, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd31, 0x25dfdc03, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x0, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x240410c0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000fc8d9fe300090000000100005e4fc35f00", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xe48}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3b67}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1.119804713s ago: executing program 2 (id=3155): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.073424405s ago: executing program 3 (id=3156): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e1f}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x1}}, 0x10) 1.049234511s ago: executing program 7 (id=3157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, 0x0, 0x0, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440), &(0x7f00000004c0)=0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 845.369086ms ago: executing program 3 (id=3158): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x40, 0x7ffffff7}}], 0x1, 0x4880) 763.58004ms ago: executing program 7 (id=3159): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x78, r9, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) 554.149118ms ago: executing program 3 (id=3160): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000faff00000000ab180415b6000000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x74, 0x4, 0xe60e, 0x8, 0x9}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 533.090006ms ago: executing program 0 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x400261f2, 0x0) unshare(0x20000400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$nl_generic(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc0d0) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r0) sendmsg$FOU_CMD_DEL(r2, 0x0, 0x4040000) socket$netlink(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x24000040) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8788, 0x20}, 0xc) 436.898847ms ago: executing program 2 (id=3162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4a9755f127db2e6a6e33e74ac1d01f71b0af372c9084fa0c0f8d2cc8bddb720886b4cee57e929130c8bfb011dfd7dfac4754e4234c0e13eace1dd7112ae49d2b1cd888692a14dfa7dfd2e8d318d48bd853af19f752b8b00fdefd827f375fe8d9646231822076a7933ba6ae8ad38e084c6059fb291a03aeec145381175e615667ddeb80c8454f3461586cfb0eb8e5e79e02f9949cb94a6e6b2d8ee87ffb005a676113ceff17ca36f6f73edc4a0e97653d14912ccccfe65b8f01488e8c7c65b78bfdec75d47a6bfab0186f896502d8f29092140fbab4eaf8c4fcc6cfc1e697b84c5d73118ee2ec85897fa37ff97e29fc602c1f9ac2"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private0, 0x10}}, 0xe07c, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 92.888265ms ago: executing program 4 (id=3163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 0s ago: executing program 7 (id=3164): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff11, &(0x7f0000000000)={0x0, 0xffffffffffffff72}}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) unshare(0x2a020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x800000a, 0x9, 0x2, 0x2, 0x3, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): bond0 (unregistering): Released all slaves [ 1142.990933][ T9488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.086436][ T6031] tipc: Left network mode [ 1144.132324][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.673114][T12500] lo speed is unknown, defaulting to 1000 [ 1144.843601][ T5842] Bluetooth: hci2: command tx timeout [ 1145.348838][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.348861][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.724531][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.724555][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.434584][T12500] chnl_net:caif_netlink_parms(): no params data found [ 1146.625344][T12586] netlink: 'syz.0.1775': attribute type 4 has an invalid length. [ 1146.676738][T12587] netlink: 'syz.0.1775': attribute type 4 has an invalid length. [ 1146.693896][ T6031] hsr_slave_0: left promiscuous mode [ 1146.773678][ T6031] hsr_slave_1: left promiscuous mode [ 1146.774886][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.021633][ T5842] Bluetooth: hci2: command tx timeout [ 1147.044630][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.525979][T12595] block device autoloading is deprecated and will be removed. [ 1150.313996][T10238] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1150.394858][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 1150.473630][T10238] usb 6-1: Using ep0 maxpacket: 8 [ 1150.479452][T10238] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1150.479483][T10238] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1150.479507][T10238] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1150.479535][T10238] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.479588][T10238] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1150.479611][T10238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.701304][T10238] usb 6-1: usb_control_msg returned -32 [ 1150.701352][T10238] usbtmc 6-1:16.0: can't read capabilities [ 1150.806110][T10238] usb 6-1: USB disconnect, device number 3 [ 1151.774373][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1152.014501][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1156.040687][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1156.483570][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 1156.536050][ T5908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1156.536086][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1156.536115][ T5908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1156.536144][ T5908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.536192][ T5908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.536218][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.842113][ T5908] usb 1-1: usb_control_msg returned -32 [ 1156.842166][ T5908] usbtmc 1-1:16.0: can't read capabilities [ 1156.952915][ T5908] usb 1-1: USB disconnect, device number 2 [ 1157.305610][T12500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.305762][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.305978][T12500] bridge_slave_0: entered allmulticast mode [ 1157.335394][T12500] bridge_slave_0: entered promiscuous mode [ 1157.361915][T12500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.372127][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.372398][T12500] bridge_slave_1: entered allmulticast mode [ 1157.392255][T12500] bridge_slave_1: entered promiscuous mode [ 1157.486508][ T38] kauditd_printk_skb: 35 callbacks suppressed [ 1157.486530][ T38] audit: type=1804 audit(1757211129.564:92): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.1878" name="/newroot/127/file0/file0" dev="ramfs" ino=64111 res=1 errno=0 [ 1157.983173][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'. [ 1157.999139][T12500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.089382][T12679] overlayfs: failed to clone upperpath [ 1158.124253][T12500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.493326][T12500] team0: Port device team_slave_0 added [ 1158.498878][T12500] team0: Port device team_slave_1 added [ 1158.531839][ T6031] IPVS: stop unused estimator thread 0... [ 1158.899689][T12687] openvswitch: netlink: EtherType 0 is less than min 600 [ 1159.004203][T12686] bridge0: entered promiscuous mode [ 1159.577597][T12500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.577616][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.577646][T12500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.800413][T12500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.800433][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.800464][T12500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.038415][T12500] hsr_slave_0: entered promiscuous mode [ 1161.039820][T12500] hsr_slave_1: entered promiscuous mode [ 1161.040809][T12500] debugfs: 'hsr0' already exists in 'hsr' [ 1161.040836][T12500] Cannot create hsr debugfs directory [ 1161.205502][T12715] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1165.267381][T12773] 9pnet_fd: Insufficient options for proto=fd [ 1169.785297][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.824598][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.849261][ T6031] bond0 (unregistering): Released all slaves [ 1170.409128][ T6031] tipc: Left network mode [ 1172.391510][ T6031] hsr_slave_0: left promiscuous mode [ 1172.415729][ T6031] hsr_slave_1: left promiscuous mode [ 1172.416865][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.486837][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.867185][ T9953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1172.893829][ T9953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1172.897382][ T9953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1172.898678][ T9953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1172.899594][ T9953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1174.169523][T12841] openvswitch: netlink: EtherType 0 is less than min 600 [ 1175.075118][ T9953] Bluetooth: hci3: command tx timeout [ 1177.163809][ T9953] Bluetooth: hci3: command tx timeout [ 1177.592265][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1177.972359][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1179.309287][ T9953] Bluetooth: hci3: command tx timeout [ 1181.404683][ T9953] Bluetooth: hci3: command tx timeout [ 1181.921763][T12840] bridge0: entered promiscuous mode [ 1182.281266][T12500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1183.034373][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.037051][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.068514][T12500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1183.251850][T12500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1183.373908][T12500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1184.242995][T12833] chnl_net:caif_netlink_parms(): no params data found [ 1184.290819][ T6031] IPVS: stop unused estimator thread 0... [ 1184.387724][T12891] nvme_fabrics: missing parameter 'transport=%s' [ 1184.387741][T12891] nvme_fabrics: missing parameter 'nqn=%s' [ 1186.541348][ T6031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.701126][T12912] bridge0: left promiscuous mode [ 1186.701982][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.702450][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.704614][T12833] bridge_slave_0: entered allmulticast mode [ 1186.713028][T12833] bridge_slave_0: entered promiscuous mode [ 1187.030410][ T6031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.077944][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.078124][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.078374][T12833] bridge_slave_1: entered allmulticast mode [ 1187.094889][T12833] bridge_slave_1: entered promiscuous mode [ 1188.572366][ T6031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.666849][T12833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.700455][T12833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.883710][T12500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.244043][ T6031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.484252][T12833] team0: Port device team_slave_0 added [ 1189.529718][T12833] team0: Port device team_slave_1 added [ 1190.052578][T12833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.052598][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.052629][T12833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.114729][T12833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.114747][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1190.114780][T12833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.164930][T12500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.536489][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1190.542240][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1190.558165][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1190.560115][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1190.577771][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1191.027705][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.027861][T12652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.307891][T12833] hsr_slave_0: entered promiscuous mode [ 1191.309325][T12833] hsr_slave_1: entered promiscuous mode [ 1191.310036][T12833] debugfs: 'hsr0' already exists in 'hsr' [ 1191.310059][T12833] Cannot create hsr debugfs directory [ 1191.419010][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.419636][ T9488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.763720][ T9953] Bluetooth: hci4: command tx timeout [ 1192.850776][ T6031] bridge_slave_1: left allmulticast mode [ 1192.850812][ T6031] bridge_slave_1: left promiscuous mode [ 1192.851072][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.945845][ T6031] bridge_slave_0: left allmulticast mode [ 1192.945881][ T6031] bridge_slave_0: left promiscuous mode [ 1192.946180][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.022556][T12963] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1981'. [ 1194.833838][ T9953] Bluetooth: hci4: command tx timeout [ 1195.450142][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.534623][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.579286][ T6031] bond0 (unregistering): Released all slaves [ 1196.444178][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'. [ 1196.913625][ T9953] Bluetooth: hci4: command tx timeout [ 1198.699911][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1198.710601][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1198.715701][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1198.734602][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1198.737551][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1198.747320][ T6031] hsr_slave_0: left promiscuous mode [ 1198.853051][ T6031] hsr_slave_1: left promiscuous mode [ 1198.854463][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.854500][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.914797][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.914849][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.993722][ T9953] Bluetooth: hci4: command tx timeout [ 1199.104432][ T6031] veth1_macvtap: left promiscuous mode [ 1199.104561][ T6031] veth0_macvtap: left promiscuous mode [ 1199.104862][ T6031] veth1_vlan: left promiscuous mode [ 1199.105075][ T6031] veth0_vlan: left promiscuous mode [ 1200.854190][ T9953] Bluetooth: hci0: command tx timeout [ 1202.926581][ T9953] Bluetooth: hci0: command tx timeout [ 1203.221188][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1203.474480][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1205.007489][ T9953] Bluetooth: hci0: command tx timeout [ 1208.183547][ T9953] Bluetooth: hci0: command tx timeout [ 1209.018288][T12942] chnl_net:caif_netlink_parms(): no params data found [ 1209.523106][T13063] overlayfs: failed to clone upperpath [ 1210.207259][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.207491][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.207740][T12942] bridge_slave_0: entered allmulticast mode [ 1210.210692][T12942] bridge_slave_0: entered promiscuous mode [ 1210.276230][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.276404][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.276649][T12942] bridge_slave_1: entered allmulticast mode [ 1210.279566][T12942] bridge_slave_1: entered promiscuous mode [ 1210.929858][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.150245][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.912201][T13094] kvm: user requested TSC rate below hardware speed [ 1213.404096][T12942] team0: Port device team_slave_0 added [ 1213.482819][T12942] team0: Port device team_slave_1 added [ 1213.490801][T12995] chnl_net:caif_netlink_parms(): no params data found [ 1214.484664][T12833] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1214.523891][T13118] 9pnet_fd: Insufficient options for proto=fd [ 1214.640050][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.640070][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.640100][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.642054][T12833] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1215.278769][T13124] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1215.278791][T13124] File: /dev/nullb0 PID: 13124 Comm: syz.8.2026 [ 1215.923839][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.923859][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.923891][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.924991][T12833] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1216.101307][T12833] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1217.132631][T12942] hsr_slave_0: entered promiscuous mode [ 1217.135617][T12942] hsr_slave_1: entered promiscuous mode [ 1217.150359][T12942] debugfs: 'hsr0' already exists in 'hsr' [ 1217.150389][T12942] Cannot create hsr debugfs directory [ 1217.169910][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.170116][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.170396][T12995] bridge_slave_0: entered allmulticast mode [ 1217.204836][T12995] bridge_slave_0: entered promiscuous mode [ 1217.376013][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.376166][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.376508][T12995] bridge_slave_1: entered allmulticast mode [ 1217.384787][T12995] bridge_slave_1: entered promiscuous mode [ 1219.365602][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.587238][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.061933][T12995] team0: Port device team_slave_0 added [ 1220.367480][T12995] team0: Port device team_slave_1 added [ 1222.496476][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.496491][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.496511][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.549533][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.549547][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.549568][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.460689][T12995] hsr_slave_0: entered promiscuous mode [ 1225.462072][T12995] hsr_slave_1: entered promiscuous mode [ 1225.463006][T12995] debugfs: 'hsr0' already exists in 'hsr' [ 1225.463029][T12995] Cannot create hsr debugfs directory [ 1227.387326][ T6031] bridge_slave_1: left allmulticast mode [ 1227.387364][ T6031] bridge_slave_1: left promiscuous mode [ 1227.387692][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.458028][ T6031] bridge_slave_0: left allmulticast mode [ 1227.458067][ T6031] bridge_slave_0: left promiscuous mode [ 1227.458484][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.557076][ T6031] bridge_slave_1: left allmulticast mode [ 1227.557112][ T6031] bridge_slave_1: left promiscuous mode [ 1227.557463][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.684772][ T6031] bridge_slave_0: left allmulticast mode [ 1227.684797][ T6031] bridge_slave_0: left promiscuous mode [ 1227.684987][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.554726][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.636321][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.705917][ T6031] bond0 (unregistering): Released all slaves [ 1233.515409][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1233.560447][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1233.562649][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1233.566207][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1233.568678][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1235.713634][ T9953] Bluetooth: hci2: command tx timeout [ 1236.694371][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.804744][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.860070][ T6031] bond0 (unregistering): Released all slaves [ 1237.394639][T12942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1238.120336][ T9953] Bluetooth: hci2: command tx timeout [ 1238.120520][T12942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1238.524666][T12942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1238.611503][T12942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1240.199055][ T9953] Bluetooth: hci2: command tx timeout [ 1241.083799][ T6031] hsr_slave_0: left promiscuous mode [ 1241.133007][ T6031] hsr_slave_1: left promiscuous mode [ 1241.139929][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.175654][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.403772][ T6031] hsr_slave_0: left promiscuous mode [ 1241.443995][ T6031] hsr_slave_1: left promiscuous mode [ 1241.444982][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.499231][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.273641][ T9953] Bluetooth: hci2: command tx timeout [ 1243.436308][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1243.681349][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1244.207667][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.207750][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.015129][ T9953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1251.047921][ T9953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1251.084442][ T9953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1251.091986][ T9953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1251.106586][ T9953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1251.534234][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1251.866229][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1253.165996][ T5842] Bluetooth: hci3: command tx timeout [ 1255.243542][ T5842] Bluetooth: hci3: command tx timeout [ 1255.765123][T13236] chnl_net:caif_netlink_parms(): no params data found [ 1256.026056][T12995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1256.684191][T12995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1256.808323][T12995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1256.900100][T12995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1257.262752][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.262903][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.263185][T13236] bridge_slave_0: entered allmulticast mode [ 1257.304053][T13236] bridge_slave_0: entered promiscuous mode [ 1257.323537][ T5842] Bluetooth: hci3: command tx timeout [ 1257.363976][T13236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.364123][T13236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.364389][T13236] bridge_slave_1: entered allmulticast mode [ 1257.367086][T13236] bridge_slave_1: entered promiscuous mode [ 1257.851460][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.959805][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.647699][ T9953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1258.682772][ T9953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1258.697838][ T9953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1258.700272][ T9953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1258.702800][ T9953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1258.931452][T13236] team0: Port device team_slave_0 added [ 1259.190192][T13236] team0: Port device team_slave_1 added [ 1259.396013][ T5842] Bluetooth: hci3: command tx timeout [ 1259.826269][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.826289][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.826322][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.830066][T13333] chnl_net:caif_netlink_parms(): no params data found [ 1259.851543][ T6031] IPVS: stop unused estimator thread 0... [ 1259.904114][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.904130][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.904153][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.562764][T13236] hsr_slave_0: entered promiscuous mode [ 1260.564802][T13236] hsr_slave_1: entered promiscuous mode [ 1260.753757][ T5842] Bluetooth: hci4: command tx timeout [ 1260.990648][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.990849][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.991039][T13333] bridge_slave_0: entered allmulticast mode [ 1260.995060][T13333] bridge_slave_0: entered promiscuous mode [ 1261.081637][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.081785][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.082042][T13333] bridge_slave_1: entered allmulticast mode [ 1261.085223][T13333] bridge_slave_1: entered promiscuous mode [ 1261.805157][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2109'. [ 1262.081112][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.530532][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.837474][ T5842] Bluetooth: hci4: command tx timeout [ 1263.411736][T13333] team0: Port device team_slave_0 added [ 1263.867691][T13333] team0: Port device team_slave_1 added [ 1264.385098][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.385116][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.385157][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.573011][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.573031][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.573063][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.941671][ T5842] Bluetooth: hci4: command tx timeout [ 1266.385128][T13333] hsr_slave_0: entered promiscuous mode [ 1266.395064][T13333] hsr_slave_1: entered promiscuous mode [ 1266.406022][T13333] debugfs: 'hsr0' already exists in 'hsr' [ 1266.406044][T13333] Cannot create hsr debugfs directory [ 1266.826724][T13386] chnl_net:caif_netlink_parms(): no params data found [ 1266.993712][ T5842] Bluetooth: hci4: command tx timeout [ 1270.373887][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.373992][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.374210][T13386] bridge_slave_0: entered allmulticast mode [ 1270.398153][T13386] bridge_slave_0: entered promiscuous mode [ 1270.480549][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.480702][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.480988][T13386] bridge_slave_1: entered allmulticast mode [ 1270.497414][T13386] bridge_slave_1: entered promiscuous mode [ 1271.834472][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.888666][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.435611][T13386] team0: Port device team_slave_0 added [ 1272.562723][T13386] team0: Port device team_slave_1 added [ 1272.628420][T13236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1272.764131][T13509] openvswitch: netlink: EtherType 0 is less than min 600 [ 1272.855718][T13508] bridge2: entered promiscuous mode [ 1272.856335][T13236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.271261][T13236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1273.300689][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.300703][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.300723][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.302686][T13236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1273.408255][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.408274][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.408313][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.929871][ T6031] bridge_slave_1: left allmulticast mode [ 1273.929907][ T6031] bridge_slave_1: left promiscuous mode [ 1273.930202][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.975537][ T6031] bridge_slave_0: left allmulticast mode [ 1273.975575][ T6031] bridge_slave_0: left promiscuous mode [ 1273.975888][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.060881][ T6031] bridge_slave_1: left allmulticast mode [ 1274.060917][ T6031] bridge_slave_1: left promiscuous mode [ 1274.061209][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.125175][ T6031] bridge_slave_0: left allmulticast mode [ 1274.125211][ T6031] bridge_slave_0: left promiscuous mode [ 1274.125494][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.231785][ T6031] bridge_slave_1: left allmulticast mode [ 1274.231823][ T6031] bridge_slave_1: left promiscuous mode [ 1274.232244][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.346806][ T6031] bridge_slave_0: left allmulticast mode [ 1274.346844][ T6031] bridge_slave_0: left promiscuous mode [ 1274.347123][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.454575][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.534320][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.586988][ T6031] bond0 (unregistering): Released all slaves [ 1277.415403][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.453313][T13545] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2145'. [ 1277.573088][ T38] audit: type=1326 audit(1757211249.794:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13548 comm="syz.8.2147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90038ebe9 code=0x0 [ 1277.597607][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.693843][ T6031] bond0 (unregistering): Released all slaves [ 1278.186303][T13550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1278.186367][T13550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1280.384543][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.514419][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.598487][ T6031] bond0 (unregistering): Released all slaves [ 1281.136254][T13386] hsr_slave_0: entered promiscuous mode [ 1281.139449][T13386] hsr_slave_1: entered promiscuous mode [ 1281.141163][T13386] debugfs: 'hsr0' already exists in 'hsr' [ 1281.141192][T13386] Cannot create hsr debugfs directory [ 1282.368199][T13570] nvme_fabrics: missing parameter 'transport=%s' [ 1282.368219][T13570] nvme_fabrics: missing parameter 'nqn=%s' [ 1282.813476][ T38] audit: type=1326 audit(1757211255.034:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13574 comm="syz.1.2155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa792d7ebe9 code=0x0 [ 1283.193555][ T6031] hsr_slave_0: left promiscuous mode [ 1283.213547][ T6031] hsr_slave_1: left promiscuous mode [ 1283.214717][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.264382][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.366917][T13578] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1283.366982][T13578] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1283.405672][ T6031] hsr_slave_0: left promiscuous mode [ 1283.424128][ T6031] hsr_slave_1: left promiscuous mode [ 1283.425259][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.465467][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.603782][ T6031] hsr_slave_0: left promiscuous mode [ 1283.623763][ T6031] hsr_slave_1: left promiscuous mode [ 1283.625006][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.667375][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.233742][T13587] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2158'. [ 1287.084355][T13595] overlayfs: missing 'lowerdir' [ 1287.134594][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1288.598292][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1288.880727][ T38] audit: type=1326 audit(1757211261.104:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.8.2164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90038ebe9 code=0x0 [ 1289.454285][T13609] overlayfs: missing 'lowerdir' [ 1291.034636][T13619] overlayfs: missing 'lowerdir' [ 1291.355878][T13625] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1292.006951][T13629] nvme_fabrics: missing parameter 'transport=%s' [ 1292.006974][T13629] nvme_fabrics: missing parameter 'nqn=%s' [ 1292.950092][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1293.284494][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1293.657387][ T9953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1293.729800][ T9953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1293.756442][ T9953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1293.773787][ T9953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1293.778384][ T9953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1294.300713][ T38] audit: type=1326 audit(1757211266.524:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13644 comm="syz.1.2174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa792d7ebe9 code=0x0 [ 1294.922788][T13647] overlayfs: missing 'lowerdir' [ 1296.293515][ T5842] Bluetooth: hci0: command tx timeout [ 1296.429744][T13655] overlayfs: missing 'lowerdir' [ 1297.947547][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1298.357249][ T5842] Bluetooth: hci0: command tx timeout [ 1298.609166][T13668] openvswitch: netlink: EtherType 0 is less than min 600 [ 1298.963591][T13669] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2181'. [ 1299.201833][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1299.999093][T13667] bridge3: entered promiscuous mode [ 1300.433555][ T5842] Bluetooth: hci0: command tx timeout [ 1301.575109][ T38] audit: type=1326 audit(1757211273.804:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13680 comm="syz.8.2184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90038ebe9 code=0x0 [ 1301.857481][T13684] overlayfs: missing 'workdir' [ 1302.336529][T13691] overlayfs: missing 'lowerdir' [ 1302.546125][ T5842] Bluetooth: hci0: command tx timeout [ 1304.341115][T13704] bridge1: entered promiscuous mode [ 1304.391987][T13704] openvswitch: netlink: EtherType 0 is less than min 600 [ 1304.707253][T13333] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1305.123664][T13333] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1306.243294][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.243587][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.445255][T13333] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1306.753684][T13333] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1308.105757][T13717] overlayfs: missing 'workdir' [ 1308.752755][ T38] audit: type=1326 audit(1757211280.974:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13725 comm="syz.1.2195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa792d7ebe9 code=0x0 [ 1309.682958][T13731] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1309.767853][T13639] chnl_net:caif_netlink_parms(): no params data found [ 1309.968021][T13733] overlayfs: missing 'workdir' [ 1310.505472][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 1312.156310][T13754] overlayfs: missing 'workdir' [ 1312.191067][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.191228][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.191521][T13639] bridge_slave_0: entered allmulticast mode [ 1312.216368][T13639] bridge_slave_0: entered promiscuous mode [ 1312.232335][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.252075][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.252357][T13639] bridge_slave_1: entered allmulticast mode [ 1312.268975][T13639] bridge_slave_1: entered promiscuous mode [ 1312.411325][ T9953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1312.422544][ T9953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1312.432038][ T9953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1312.447604][ T9953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1312.451088][ T9953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1312.816290][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.851280][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.384903][T13386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1313.675740][T13639] team0: Port device team_slave_0 added [ 1313.770241][T13766] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2203'. [ 1314.141630][T13386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1314.205167][T13639] team0: Port device team_slave_1 added [ 1314.214468][T13386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1314.543073][ T5842] Bluetooth: hci2: command tx timeout [ 1315.565862][T13386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1315.604733][ T38] audit: type=1326 audit(1757211287.814:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13773 comm="syz.1.2205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa792d7ebe9 code=0x0 [ 1315.854801][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.854815][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.854837][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.956290][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.956304][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.956326][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.176090][T13781] overlayfs: missing 'workdir' [ 1316.593886][ T5842] Bluetooth: hci2: command tx timeout [ 1316.695620][T13639] hsr_slave_0: entered promiscuous mode [ 1316.696775][T13639] hsr_slave_1: entered promiscuous mode [ 1316.698652][T13639] debugfs: 'hsr0' already exists in 'hsr' [ 1316.698672][T13639] Cannot create hsr debugfs directory [ 1317.083611][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1318.149627][T13797] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1318.149808][T13797] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1318.676986][ T5842] Bluetooth: hci2: command tx timeout [ 1318.826342][ T9953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1318.856061][ T9953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1318.860666][ T9953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1318.881049][ T9953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1318.887836][ T9953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1320.328817][T13811] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1320.760012][ T9953] Bluetooth: hci2: command tx timeout [ 1320.772964][ T38] audit: type=1326 audit(1757211292.994:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13813 comm="syz.8.2213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90038ebe9 code=0x0 [ 1320.993564][ T9953] Bluetooth: hci3: command tx timeout [ 1321.399040][T13815] overlayfs: missing 'workdir' [ 1321.918306][T13825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1321.918500][T13825] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1323.073707][ T9953] Bluetooth: hci3: command tx timeout [ 1323.518619][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2218'. [ 1324.712414][ T38] audit: type=1326 audit(1757211296.934:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13847 comm="syz.1.2222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa792d7ebe9 code=0x0 [ 1324.952320][T13759] chnl_net:caif_netlink_parms(): no params data found [ 1325.153579][ T9953] Bluetooth: hci3: command tx timeout [ 1325.318094][T13849] overlayfs: failed to clone upperpath [ 1326.099723][T13859] overlayfs: failed to clone upperpath [ 1326.653217][T13868] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2229'. [ 1327.112633][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.112977][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.113283][T13759] bridge_slave_0: entered allmulticast mode [ 1327.148617][T13759] bridge_slave_0: entered promiscuous mode [ 1327.233620][ T9953] Bluetooth: hci3: command tx timeout [ 1327.412629][ T38] audit: type=1326 audit(1757211299.634:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13871 comm="syz.8.2230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90038ebe9 code=0x0 [ 1327.547796][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.547913][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.548124][T13759] bridge_slave_1: entered allmulticast mode [ 1327.587591][T13759] bridge_slave_1: entered promiscuous mode [ 1327.999571][ T6031] bridge_slave_1: left allmulticast mode [ 1327.999617][ T6031] bridge_slave_1: left promiscuous mode [ 1328.005271][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.119988][ T6031] bridge_slave_0: left allmulticast mode [ 1328.120016][ T6031] bridge_slave_0: left promiscuous mode [ 1328.120312][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.179915][ T6031] bridge_slave_1: left allmulticast mode [ 1328.179953][ T6031] bridge_slave_1: left promiscuous mode [ 1328.180219][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.263186][ T6031] bridge_slave_0: left allmulticast mode [ 1328.263222][ T6031] bridge_slave_0: left promiscuous mode [ 1328.263630][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.623839][T13880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1328.624030][T13880] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1329.677380][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.890832][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.969079][ T6031] bond0 (unregistering): Released all slaves [ 1330.904334][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.074296][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.167759][ T6031] bond0 (unregistering): Released all slaves [ 1331.242194][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.548072][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.311117][T13759] team0: Port device team_slave_0 added [ 1332.533652][ T6031] hsr_slave_0: left promiscuous mode [ 1332.583579][ T6031] hsr_slave_1: left promiscuous mode [ 1332.584618][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.606282][T13902] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2238'. [ 1332.624529][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.055432][ T6031] hsr_slave_0: left promiscuous mode [ 1333.166865][ T6031] hsr_slave_1: left promiscuous mode [ 1333.186598][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.231636][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.384572][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1336.054514][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1339.454333][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1339.654526][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1340.915465][T13940] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2248'. [ 1341.443112][T13759] team0: Port device team_slave_1 added [ 1341.452078][T13806] chnl_net:caif_netlink_parms(): no params data found [ 1342.145120][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.145139][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.145168][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.401591][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.401610][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.401754][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.745614][T13639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1342.873676][T13639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1342.984827][T13639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1343.424967][T13639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1343.774699][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.774931][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.775177][T13806] bridge_slave_0: entered allmulticast mode [ 1343.781778][T13806] bridge_slave_0: entered promiscuous mode [ 1343.801086][T13759] hsr_slave_0: entered promiscuous mode [ 1343.805042][T13759] hsr_slave_1: entered promiscuous mode [ 1343.810672][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.810835][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.811092][T13806] bridge_slave_1: entered allmulticast mode [ 1343.816072][T13806] bridge_slave_1: entered promiscuous mode [ 1344.959142][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.003188][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.420116][T13979] 9pnet_fd: Insufficient options for proto=fd [ 1345.770016][T13806] team0: Port device team_slave_0 added [ 1345.889255][T13806] team0: Port device team_slave_1 added [ 1346.236748][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.236762][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.236783][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.412858][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.412874][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.412896][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.921571][T13806] hsr_slave_0: entered promiscuous mode [ 1347.922484][T13806] hsr_slave_1: entered promiscuous mode [ 1347.923094][T13806] debugfs: 'hsr0' already exists in 'hsr' [ 1347.923112][T13806] Cannot create hsr debugfs directory [ 1348.182788][T13985] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2258'. [ 1351.759583][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.772188][T13759] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1351.953926][ T6031] bridge_slave_1: left allmulticast mode [ 1351.953967][ T6031] bridge_slave_1: left promiscuous mode [ 1351.954264][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.975208][T14011] 9pnet_fd: Insufficient options for proto=fd [ 1352.071151][T14015] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2267'. [ 1352.165294][ T6031] bridge_slave_0: left allmulticast mode [ 1352.165322][ T6031] bridge_slave_0: left promiscuous mode [ 1352.165559][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.311751][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.464123][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.577878][ T6031] bond0 (unregistering): Released all slaves [ 1353.638780][T13759] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1353.800100][T13759] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1353.979357][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.997966][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1354.000833][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1354.022461][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1354.042324][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1354.190548][T13759] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1354.650137][ T6031] hsr_slave_0: left promiscuous mode [ 1354.680063][ T6031] hsr_slave_1: left promiscuous mode [ 1354.683236][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.724538][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.193671][ T9953] Bluetooth: hci4: command tx timeout [ 1357.415479][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1357.604687][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1358.278989][ T9953] Bluetooth: hci4: command tx timeout [ 1358.590693][T14057] 9pnet_fd: Insufficient options for proto=fd [ 1360.413988][ T9953] Bluetooth: hci4: command tx timeout [ 1361.489671][T13806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1361.672492][T13806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1361.943736][T13806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1362.104897][T13806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1362.443062][ T9953] Bluetooth: hci4: command tx timeout [ 1364.489638][T14087] bridge4: entered promiscuous mode [ 1364.595119][T14020] chnl_net:caif_netlink_parms(): no params data found [ 1364.782314][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.323958][T14020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.324056][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.324260][T14020] bridge_slave_0: entered allmulticast mode [ 1366.326331][T14020] bridge_slave_0: entered promiscuous mode [ 1366.405546][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.407693][T14020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.407848][T14020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.408129][T14020] bridge_slave_1: entered allmulticast mode [ 1366.411232][T14020] bridge_slave_1: entered promiscuous mode [ 1366.860488][T14020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.887388][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.887613][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.918862][T14020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.310786][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.310871][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.421070][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.421237][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.632045][T14020] team0: Port device team_slave_0 added [ 1367.816123][T14020] team0: Port device team_slave_1 added [ 1369.037707][T14118] bridge2: entered promiscuous mode [ 1369.430395][T14020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.430418][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.430439][T14020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.485574][T14020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.485707][T14020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.485740][T14020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.516923][ T12] bridge_slave_1: left allmulticast mode [ 1369.516966][ T12] bridge_slave_1: left promiscuous mode [ 1369.517275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.592464][ T12] bridge_slave_0: left allmulticast mode [ 1369.592493][ T12] bridge_slave_0: left promiscuous mode [ 1369.592738][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.630552][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1372.679683][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1372.717269][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1372.718656][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1372.720567][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1373.294591][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.374550][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.440952][ T12] bond0 (unregistering): Released all slaves [ 1373.928031][T14020] hsr_slave_0: entered promiscuous mode [ 1373.929501][T14020] hsr_slave_1: entered promiscuous mode [ 1373.930477][T14020] debugfs: 'hsr0' already exists in 'hsr' [ 1373.930505][T14020] Cannot create hsr debugfs directory [ 1374.393669][ T12] hsr_slave_0: left promiscuous mode [ 1374.486268][ T12] hsr_slave_1: left promiscuous mode [ 1374.487257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.535032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.846253][ T5842] Bluetooth: hci0: command tx timeout [ 1376.821418][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1376.933566][ T5842] Bluetooth: hci0: command tx timeout [ 1378.141623][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1379.003839][ T5842] Bluetooth: hci0: command tx timeout [ 1380.478101][ T9953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1380.493997][ T9953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1380.514280][ T9953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1380.522474][ T9953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1380.534921][ T9953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1381.094247][ T9953] Bluetooth: hci0: command tx timeout [ 1382.593628][ T9953] Bluetooth: hci2: command tx timeout [ 1384.673495][ T9953] Bluetooth: hci2: command tx timeout [ 1385.211367][T14219] 9pnet_fd: Insufficient options for proto=fd [ 1386.337803][T14140] chnl_net:caif_netlink_parms(): no params data found [ 1386.754451][ T9953] Bluetooth: hci2: command tx timeout [ 1387.055844][T14185] chnl_net:caif_netlink_parms(): no params data found [ 1387.564734][T14230] netlink: 'syz.8.2326': attribute type 10 has an invalid length. [ 1387.637825][T14230] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1388.372393][T14231] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 1388.833559][ T9953] Bluetooth: hci2: command tx timeout [ 1389.286363][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.286525][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.287255][T14140] bridge_slave_0: entered allmulticast mode [ 1389.289322][T14140] bridge_slave_0: entered promiscuous mode [ 1389.346305][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.346566][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.346891][T14140] bridge_slave_1: entered allmulticast mode [ 1389.406162][T14140] bridge_slave_1: entered promiscuous mode [ 1390.427680][T14185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.427832][T14185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.428100][T14185] bridge_slave_0: entered allmulticast mode [ 1390.431514][T14185] bridge_slave_0: entered promiscuous mode [ 1390.500515][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.517060][T14185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.517207][T14185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.517498][T14185] bridge_slave_1: entered allmulticast mode [ 1390.564705][T14185] bridge_slave_1: entered promiscuous mode [ 1390.624630][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.094467][T14020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1391.500723][T14020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1391.805316][T14185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.833082][T14140] team0: Port device team_slave_0 added [ 1391.835755][T14020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1391.894790][T14185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.898665][T14140] team0: Port device team_slave_1 added [ 1391.899017][T14020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1392.758591][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.758612][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.758643][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.766380][T14185] team0: Port device team_slave_0 added [ 1392.837100][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.837252][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.837286][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.846420][T14270] 9pnet_fd: Insufficient options for proto=fd [ 1393.839126][T14185] team0: Port device team_slave_1 added [ 1394.914028][T14185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.914050][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.914082][T14185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.211538][T14185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.211558][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.363443][T14185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.281560][T14140] hsr_slave_0: entered promiscuous mode [ 1396.284564][T14140] hsr_slave_1: entered promiscuous mode [ 1396.290939][T14140] debugfs: 'hsr0' already exists in 'hsr' [ 1396.290978][T14140] Cannot create hsr debugfs directory [ 1397.069235][T14185] hsr_slave_0: entered promiscuous mode [ 1397.071681][T14185] hsr_slave_1: entered promiscuous mode [ 1397.088183][T14185] debugfs: 'hsr0' already exists in 'hsr' [ 1397.088214][T14185] Cannot create hsr debugfs directory [ 1399.592801][T14318] IPVS: Error connecting to the multicast addr [ 1399.780724][ T12] bridge_slave_1: left allmulticast mode [ 1399.780763][ T12] bridge_slave_1: left promiscuous mode [ 1399.781053][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.830201][T14327] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2352'. [ 1399.869496][ T12] bridge_slave_0: left allmulticast mode [ 1399.869525][ T12] bridge_slave_0: left promiscuous mode [ 1399.869755][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.940492][ T12] bridge_slave_1: left allmulticast mode [ 1399.940529][ T12] bridge_slave_1: left promiscuous mode [ 1399.940823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.018841][ T12] bridge_slave_0: left allmulticast mode [ 1400.018879][ T12] bridge_slave_0: left promiscuous mode [ 1400.023669][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.254544][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.354750][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.451657][ T12] bond0 (unregistering): Released all slaves [ 1404.013126][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.455618][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.497356][ T12] bond0 (unregistering): Released all slaves [ 1405.331474][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.564009][ T12] hsr_slave_0: left promiscuous mode [ 1405.583972][ T12] hsr_slave_1: left promiscuous mode [ 1405.585073][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.624601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.843605][ T12] hsr_slave_0: left promiscuous mode [ 1405.875001][ T12] hsr_slave_1: left promiscuous mode [ 1405.877172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.919673][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.492657][T14384] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2374'. [ 1408.105158][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1408.745363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1411.873026][T14420] fuse: Bad value for 'fd' [ 1412.705211][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1412.954302][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1413.187090][T14441] fuse: Bad value for 'fd' [ 1414.709123][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1414.772106][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1414.777346][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1414.785213][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1414.786791][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1416.913641][ T5842] Bluetooth: hci3: command tx timeout [ 1417.130781][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2410'. [ 1419.013497][ T5842] Bluetooth: hci3: command tx timeout [ 1419.550337][T14501] netlink: 'syz.1.2416': attribute type 4 has an invalid length. [ 1419.550357][T14501] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2416'. [ 1420.708532][T14457] chnl_net:caif_netlink_parms(): no params data found [ 1421.073443][ T5842] Bluetooth: hci3: command tx timeout [ 1421.449406][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.449541][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.449799][T14457] bridge_slave_0: entered allmulticast mode [ 1421.489408][T14457] bridge_slave_0: entered promiscuous mode [ 1421.506845][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.511204][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.511482][T14457] bridge_slave_1: entered allmulticast mode [ 1421.554002][T14457] bridge_slave_1: entered promiscuous mode [ 1422.223348][T14457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.260703][T14457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.120446][T14536] IPVS: Scheduler module ip_vs_sip not found [ 1423.122839][T14539] IPVS: length: 24 != 7992 [ 1423.153701][ T5842] Bluetooth: hci3: command tx timeout [ 1423.252442][T14457] team0: Port device team_slave_0 added [ 1423.549641][T14457] team0: Port device team_slave_1 added [ 1423.550013][T14140] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1423.581922][T14548] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1423.787336][T14140] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1424.140049][T14140] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.490064][T14457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.490083][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.490116][T14457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.491035][T14140] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1424.572629][T14457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.572650][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.572683][T14457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.788489][T14457] hsr_slave_0: entered promiscuous mode [ 1426.793026][T14457] hsr_slave_1: entered promiscuous mode [ 1426.802919][T14185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1427.186769][T14185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1427.385041][T14185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1427.460233][T14185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1427.924336][ T12] bridge_slave_1: left allmulticast mode [ 1427.924373][ T12] bridge_slave_1: left promiscuous mode [ 1427.924643][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.997815][ T12] bridge_slave_0: left allmulticast mode [ 1427.997841][ T12] bridge_slave_0: left promiscuous mode [ 1428.000405][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.520956][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.521043][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.390563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.387654][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.479955][ T12] bond0 (unregistering): Released all slaves [ 1433.106928][ T12] hsr_slave_0: left promiscuous mode [ 1433.144102][ T12] hsr_slave_1: left promiscuous mode [ 1433.145136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.216532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.360761][ T9953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1433.391552][ T9953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1433.393138][ T9953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1433.413150][ T9953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1433.422186][ T9953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1435.459069][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1435.573810][ T9953] Bluetooth: hci0: command tx timeout [ 1436.364211][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1437.633581][ T9953] Bluetooth: hci0: command tx timeout [ 1439.713442][ T9953] Bluetooth: hci0: command tx timeout [ 1441.793507][ T9953] Bluetooth: hci0: command tx timeout [ 1442.114220][T14619] chnl_net:caif_netlink_parms(): no params data found [ 1442.145790][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1442.156319][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1442.169274][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1442.171939][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1442.173019][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1443.444179][T14691] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1443.887999][T14457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1444.041106][T14457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1444.202784][T14457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1444.267444][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.268452][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.268674][T14619] bridge_slave_0: entered allmulticast mode [ 1444.274261][ T5842] Bluetooth: hci2: command tx timeout [ 1444.285158][T14619] bridge_slave_0: entered promiscuous mode [ 1444.314377][T14457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1444.373648][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.373808][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.374031][T14619] bridge_slave_1: entered allmulticast mode [ 1444.387036][T14619] bridge_slave_1: entered promiscuous mode [ 1444.871303][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.937465][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.493212][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2476'. [ 1445.507953][T14619] team0: Port device team_slave_0 added [ 1445.530825][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2476'. [ 1445.530856][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2476'. [ 1445.584008][T14619] team0: Port device team_slave_1 added [ 1445.784358][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2479'. [ 1445.784386][T14730] netlink: 'syz.8.2479': attribute type 7 has an invalid length. [ 1445.784396][T14730] netlink: 'syz.8.2479': attribute type 8 has an invalid length. [ 1445.784405][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2479'. [ 1445.795296][T14730] syz_tun: entered promiscuous mode [ 1445.796400][T14730] batadv_slave_1: entered promiscuous mode [ 1445.797222][T14730] erspan0: entered promiscuous mode [ 1445.798675][T14730] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1445.798692][T14730] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1445.798704][T14730] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 1445.964043][ T12] bridge_slave_1: left allmulticast mode [ 1445.964069][ T12] bridge_slave_1: left promiscuous mode [ 1445.964347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.015073][ T12] bridge_slave_0: left allmulticast mode [ 1446.015242][ T12] bridge_slave_0: left promiscuous mode [ 1446.015486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.363646][ T5842] Bluetooth: hci2: command tx timeout [ 1447.164597][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.294537][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.393798][ T12] bond0 (unregistering): Released all slaves [ 1447.451658][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.451678][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.451710][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.488183][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.488206][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.488243][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.900719][T14742] vlan0: entered promiscuous mode [ 1448.245296][T14619] hsr_slave_0: entered promiscuous mode [ 1448.246769][T14619] hsr_slave_1: entered promiscuous mode [ 1448.247772][T14619] debugfs: 'hsr0' already exists in 'hsr' [ 1448.247799][T14619] Cannot create hsr debugfs directory [ 1448.434616][ T5842] Bluetooth: hci2: command tx timeout [ 1448.491034][ T12] hsr_slave_0: left promiscuous mode [ 1448.515086][T14754] netlink: 'syz.8.2487': attribute type 1 has an invalid length. [ 1448.515112][T14754] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2487'. [ 1448.540688][ T12] hsr_slave_1: left promiscuous mode [ 1448.544083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.594529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.104699][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1450.320627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1450.514684][ T5842] Bluetooth: hci2: command tx timeout [ 1451.568050][T14767] tipc: Started in network mode [ 1451.568081][T14767] tipc: Node identity 4, cluster identity 4711 [ 1451.568096][T14767] tipc: Node number set to 4 [ 1452.080266][T14683] chnl_net:caif_netlink_parms(): no params data found [ 1453.559532][T14683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.560823][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.561252][T14683] bridge_slave_0: entered allmulticast mode [ 1453.583925][T14683] bridge_slave_0: entered promiscuous mode [ 1453.665083][T14683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.665263][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.665574][T14683] bridge_slave_1: entered allmulticast mode [ 1453.668899][T14683] bridge_slave_1: entered promiscuous mode [ 1454.237743][T14683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.268310][T14457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.317569][T14683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.987217][T14683] team0: Port device team_slave_0 added [ 1455.135864][T14683] team0: Port device team_slave_1 added [ 1456.496122][T14683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.496142][T14683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.496174][T14683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.496783][T14809] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2504'. [ 1456.576000][T14683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.576021][T14683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.576054][T14683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.591977][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.067039][T14815] openvswitch: netlink: IP tunnel dst address not specified [ 1457.073208][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.083542][ T9488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.383966][T14817] fuse: Bad value for 'group_id' [ 1457.383989][T14817] fuse: Bad value for 'group_id' [ 1457.891150][T14683] hsr_slave_0: entered promiscuous mode [ 1457.892694][T14683] hsr_slave_1: entered promiscuous mode [ 1457.894703][T14683] debugfs: 'hsr0' already exists in 'hsr' [ 1457.894735][T14683] Cannot create hsr debugfs directory [ 1457.900932][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.901110][ T9488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.908392][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2512'. [ 1458.406609][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 1458.546376][T14619] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1458.651668][T14841] fuse: Bad value for 'group_id' [ 1458.651698][T14841] fuse: Bad value for 'group_id' [ 1458.988475][T14619] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1459.673659][T14619] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1460.081091][T14619] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1460.177321][T14853] netlink: 'syz.1.2522': attribute type 10 has an invalid length. [ 1460.276740][T14859] bridge0: port 1(syz_tun) entered blocking state [ 1460.278939][T14859] bridge0: port 1(syz_tun) entered disabled state [ 1460.279210][T14859] syz_tun: entered allmulticast mode [ 1460.282895][T14859] syz_tun: left allmulticast mode [ 1460.291735][T14863] netlink: 'syz.8.2524': attribute type 10 has an invalid length. [ 1460.420548][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.422737][T14863] team0: Port device bond0 added [ 1460.600345][ T12] bridge_slave_1: left allmulticast mode [ 1460.600378][ T12] bridge_slave_1: left promiscuous mode [ 1460.600620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.622136][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2526'. [ 1460.695516][ T12] bridge_slave_0: left allmulticast mode [ 1460.695555][ T12] bridge_slave_0: left promiscuous mode [ 1460.695856][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.816119][T14878] netlink: 'syz.1.2528': attribute type 21 has an invalid length. [ 1460.816147][T14878] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2528'. [ 1460.820829][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 1461.764333][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.844188][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.911405][ T12] bond0 (unregistering): Released all slaves [ 1463.653721][ T12] hsr_slave_0: left promiscuous mode [ 1463.690765][T14895] netlink: 'syz.8.2532': attribute type 10 has an invalid length. [ 1463.701521][ T12] hsr_slave_1: left promiscuous mode [ 1463.702610][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.734568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.587249][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1464.744274][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1465.497477][T14890] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 1465.498309][T14892] IPVS: Error connecting to the multicast addr [ 1467.421322][T14619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.541846][T14619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.560525][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.560765][ T9488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.592378][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.592641][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.204222][T14457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.369563][T14683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1468.436833][T14683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1468.554086][T14683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1468.623843][T14683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1469.138390][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.302224][T14945] netlink: 'syz.8.2542': attribute type 10 has an invalid length. [ 1469.401064][T14683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.548494][T14683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.614842][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.614997][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.649363][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.653576][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.668916][T14457] veth0_vlan: entered promiscuous mode [ 1469.806380][T14457] veth1_vlan: entered promiscuous mode [ 1470.053424][T14457] veth0_macvtap: entered promiscuous mode [ 1470.088247][T14457] veth1_macvtap: entered promiscuous mode [ 1470.144243][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2544'. [ 1470.264521][T14457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.292892][T14619] veth0_vlan: entered promiscuous mode [ 1470.345621][T14457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.425300][T14619] veth1_vlan: entered promiscuous mode [ 1470.426946][ T6032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.450194][ T6032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.462992][ T6032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.490241][ T6032] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.984801][T14683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.989261][T14619] veth0_macvtap: entered promiscuous mode [ 1471.028261][T14619] veth1_macvtap: entered promiscuous mode [ 1471.063413][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.063440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.315979][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.336013][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.336034][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.415654][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.541532][ T9488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.564200][ T9488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.583544][ T9488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.585809][ T9488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.687640][T14683] veth0_vlan: entered promiscuous mode [ 1472.544698][T14980] openvswitch: netlink: EtherType 0 is less than min 600 [ 1472.845665][T14979] bridge5: entered promiscuous mode [ 1472.850689][T14683] veth1_vlan: entered promiscuous mode [ 1473.017672][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.017697][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.465008][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.465033][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.514319][T14683] veth0_macvtap: entered promiscuous mode [ 1473.584178][T14683] veth1_macvtap: entered promiscuous mode [ 1473.731437][T14683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.772459][T14683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.876432][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.879342][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1473.879397][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.898241][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.942652][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.643816][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.643840][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.860620][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.860644][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.679862][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2563'. [ 1476.684884][T15024] netlink: 'syz.9.2563': attribute type 1 has an invalid length. [ 1476.824884][T15024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1476.874413][T15024] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1477.458197][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2565'. [ 1478.871897][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2570'. [ 1478.871937][T15047] netlink: 'syz.9.2570': attribute type 7 has an invalid length. [ 1478.871953][T15047] netlink: 'syz.9.2570': attribute type 8 has an invalid length. [ 1478.871968][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2570'. [ 1480.985608][T15061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.986501][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.186384][ T9953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1481.215859][ T9953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1481.217766][ T9953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1481.239481][ T9953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1481.261219][ T9953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1482.154162][T15061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.199359][T15061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.808855][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2582'. [ 1482.808896][T15081] netlink: 'syz.8.2582': attribute type 7 has an invalid length. [ 1482.808911][T15081] netlink: 'syz.8.2582': attribute type 8 has an invalid length. [ 1482.808926][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2582'. [ 1483.393476][ T5842] Bluetooth: hci4: command tx timeout [ 1483.836839][ T6032] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.874040][ T6032] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.137433][ T3062] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.165000][ T3062] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.899408][T15095] IPVS: Error connecting to the multicast addr [ 1485.474106][ T5842] Bluetooth: hci4: command tx timeout [ 1485.689102][T15109] Bluetooth: MGMT ver 1.23 [ 1487.553582][ T5842] Bluetooth: hci4: command tx timeout [ 1487.614761][T15135] IPVS: Error connecting to the multicast addr [ 1488.030470][T15077] chnl_net:caif_netlink_parms(): no params data found [ 1489.643126][ T5842] Bluetooth: hci4: command tx timeout [ 1489.983770][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.196721][T15158] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.827136][T15077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.827252][T15077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.827519][T15077] bridge_slave_0: entered allmulticast mode [ 1494.857902][T15077] bridge_slave_0: entered promiscuous mode [ 1494.894118][T15077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.894267][T15077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.894537][T15077] bridge_slave_1: entered allmulticast mode [ 1494.916084][T15077] bridge_slave_1: entered promiscuous mode [ 1496.171168][T15077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.211333][T15077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.111935][ T6031] hsr_slave_0: left promiscuous mode [ 1497.113086][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.169807][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.749970][T15240] IPVS: persistence engine module ip_vs_pe_ not found [ 1498.766558][ T49] IPVS: starting estimator thread 0... [ 1498.923530][T15243] IPVS: using max 8 ests per chain, 19200 per kthread [ 1501.131064][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 1501.485563][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 1505.225892][T15077] team0: Port device team_slave_0 added [ 1505.325484][T15077] team0: Port device team_slave_1 added [ 1505.803615][T15267] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 1506.026601][T15077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.026619][T15077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.026650][T15077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.045485][T15077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.045506][T15077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.045541][T15077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.487033][T15077] hsr_slave_0: entered promiscuous mode [ 1506.488465][T15077] hsr_slave_1: entered promiscuous mode [ 1506.489493][T15077] debugfs: 'hsr0' already exists in 'hsr' [ 1506.489528][T15077] Cannot create hsr debugfs directory [ 1506.760414][T15286] openvswitch: netlink: IP tunnel dst address not specified [ 1507.070751][T15291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 1509.083226][T15316] netlink: 'syz.6.2652': attribute type 1 has an invalid length. [ 1509.765747][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2653'. [ 1509.765785][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2653'. [ 1510.181881][T15328] fuse: Unknown parameter 'group_i00000000000000000000' [ 1510.520113][T15332] tipc: Can't bind to reserved service type 0 [ 1510.573238][T15077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1510.604864][T15077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1510.715103][T15338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1510.738594][T15077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1510.843959][T15077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1510.874816][T15341] syz_tun: entered allmulticast mode [ 1510.923105][T15341] dvmrp1: entered allmulticast mode [ 1511.008837][T15339] syz_tun: left allmulticast mode [ 1511.248285][T15355] netlink: 'syz.8.2664': attribute type 1 has an invalid length. [ 1511.315931][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2665'. [ 1511.501141][T15366] fuse: Unknown parameter 'group_id00000000000000000000' [ 1511.691467][T15077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.755296][T15077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.779515][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.780391][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.894964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.895118][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.102919][T15377] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 1514.515369][T15077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.659912][T15077] veth0_vlan: entered promiscuous mode [ 1514.702729][T15077] veth1_vlan: entered promiscuous mode [ 1514.748819][T15077] veth0_macvtap: entered promiscuous mode [ 1514.807347][T15077] veth1_macvtap: entered promiscuous mode [ 1514.812860][T15402] fuse: Unknown parameter 'group_id00000000000000000000' [ 1514.858258][T15077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.905261][T15077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.952012][ T1108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.975391][ T1108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.976971][ T1108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.977247][ T1108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.579900][T13246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.579926][T13246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.860897][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.860920][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.753384][T14001] IPVS: starting estimator thread 0... [ 1516.853718][T15426] IPVS: using max 10 ests per chain, 24000 per kthread [ 1517.063603][T15428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.151217][T15442] fuse: Unknown parameter 'group_id00000000000000000000' [ 1518.557227][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2691'. [ 1519.043745][T15456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1520.088527][T15471] fuse: Bad value for 'user_id' [ 1520.088549][T15471] fuse: Bad value for 'user_id' [ 1520.353139][T15477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1521.599145][T15496] bridge1: entered promiscuous mode [ 1521.603879][T15496] openvswitch: netlink: EtherType 0 is less than min 600 [ 1521.913472][T14964] IPVS: starting estimator thread 0... [ 1522.013549][T15504] IPVS: using max 6 ests per chain, 14400 per kthread [ 1522.102870][T15508] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 1522.566808][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2719'. [ 1528.499603][T15604] openvswitch: netlink: IP tunnel TTL not specified. [ 1528.856170][T15609] netlink: 596 bytes leftover after parsing attributes in process `syz.9.2750'. [ 1533.153815][ T5842] Bluetooth: hci0: command tx timeout [ 1534.393004][ T5921] IPVS: starting estimator thread 0... [ 1534.473512][T15688] IPVS: using max 7 ests per chain, 16800 per kthread [ 1534.813897][T15685] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1536.692036][T15709] block nbd0: server does not support multiple connections per device. [ 1536.706980][T15709] block nbd0: shutting down sockets [ 1537.425554][T14684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1537.450290][T14684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1537.451625][T14684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1537.472888][T14684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1537.474569][T14684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1537.627204][T15725] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1538.123852][ T9953] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.817143][T15755] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1538.990043][T15721] chnl_net:caif_netlink_parms(): no params data found [ 1539.368994][T15759] tipc: Started in network mode [ 1539.369014][T15759] tipc: Node identity , cluster identity 4711 [ 1539.369030][T15759] tipc: Failed to obtain node identity [ 1539.369055][T15759] tipc: Enabling of bearer rejected, failed to enable media [ 1539.553802][ T5842] Bluetooth: hci0: command tx timeout [ 1540.059565][T15772] block nbd0: server does not support multiple connections per device. [ 1540.059913][T15772] block nbd0: shutting down sockets [ 1541.633533][ T5842] Bluetooth: hci0: command tx timeout [ 1543.716775][ T5842] Bluetooth: hci0: command tx timeout [ 1545.793990][ T5842] Bluetooth: hci0: command tx timeout [ 1551.399296][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.797750][ T9953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1554.822218][ T9953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1554.831377][ T9953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1554.845710][ T9953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1554.847379][ T9953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1554.978828][T15779] tipc: Enabled bearer , priority 0 [ 1554.979774][T15783] syzkaller0: entered promiscuous mode [ 1554.979795][T15783] syzkaller0: entered allmulticast mode [ 1556.223792][T15790] tipc: Resetting bearer [ 1556.439658][ T9953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1556.483588][ T9953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1556.487473][ T9953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1556.514104][ T9953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1556.531216][ T9953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1556.856991][T15790] tipc: Disabling bearer [ 1556.923579][ T9953] Bluetooth: hci5: command tx timeout [ 1557.135528][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1557.163802][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1557.166407][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1557.167640][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1557.168439][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1558.173517][ T9941] syz_tun (unregistering): left promiscuous mode [ 1558.580144][T15721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.580374][T15721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.580613][T15721] bridge_slave_0: entered allmulticast mode [ 1558.593663][ T5842] Bluetooth: hci6: command tx timeout [ 1558.612102][T15721] bridge_slave_0: entered promiscuous mode [ 1558.643174][T15721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.645761][T15721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.646106][T15721] bridge_slave_1: entered allmulticast mode [ 1558.673038][T15721] bridge_slave_1: entered promiscuous mode [ 1558.996519][ T5842] Bluetooth: hci5: command tx timeout [ 1559.010858][T15721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.055839][T15721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.233625][ T5842] Bluetooth: hci3: command tx timeout [ 1559.429386][T15721] team0: Port device team_slave_0 added [ 1559.492722][T15721] team0: Port device team_slave_1 added [ 1559.970397][T15721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.970418][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.970450][T15721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.092893][T15721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.092915][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.092946][T15721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.627445][T15721] hsr_slave_0: entered promiscuous mode [ 1560.628465][T15721] hsr_slave_1: entered promiscuous mode [ 1560.629112][T15721] debugfs: 'hsr0' already exists in 'hsr' [ 1560.629130][T15721] Cannot create hsr debugfs directory [ 1560.673506][ T5842] Bluetooth: hci6: command tx timeout [ 1561.073577][ T5842] Bluetooth: hci5: command tx timeout [ 1561.544048][ T5842] Bluetooth: hci3: command tx timeout [ 1561.784582][T15816] chnl_net:caif_netlink_parms(): no params data found [ 1561.931819][T15799] chnl_net:caif_netlink_parms(): no params data found [ 1562.347107][T15814] chnl_net:caif_netlink_parms(): no params data found [ 1562.753620][ T5842] Bluetooth: hci6: command tx timeout [ 1563.154000][ T5842] Bluetooth: hci5: command tx timeout [ 1563.402863][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.403224][T15816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.418482][T15816] bridge_slave_0: entered allmulticast mode [ 1563.422559][T15816] bridge_slave_0: entered promiscuous mode [ 1563.553436][ T5842] Bluetooth: hci3: command tx timeout [ 1563.570935][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.571083][T15816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.571361][T15816] bridge_slave_1: entered allmulticast mode [ 1563.574866][T15816] bridge_slave_1: entered promiscuous mode [ 1563.746781][T15799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.746935][T15799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.747223][T15799] bridge_slave_0: entered allmulticast mode [ 1563.750251][T15799] bridge_slave_0: entered promiscuous mode [ 1564.037477][T15799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.037654][T15799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.037886][T15799] bridge_slave_1: entered allmulticast mode [ 1564.067291][T15799] bridge_slave_1: entered promiscuous mode [ 1564.486937][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.487157][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.487381][T15814] bridge_slave_0: entered allmulticast mode [ 1564.492350][T15814] bridge_slave_0: entered promiscuous mode [ 1564.522381][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.699177][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.714198][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.714348][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.714539][T15814] bridge_slave_1: entered allmulticast mode [ 1564.723823][T15814] bridge_slave_1: entered promiscuous mode [ 1564.733071][T15799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.840511][ T9953] Bluetooth: hci6: command tx timeout [ 1565.270682][T15799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.633565][ T9953] Bluetooth: hci3: command tx timeout [ 1565.775234][T15816] team0: Port device team_slave_0 added [ 1565.778590][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.009738][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.015658][T15816] team0: Port device team_slave_1 added [ 1566.112008][T15799] team0: Port device team_slave_0 added [ 1566.564938][T15799] team0: Port device team_slave_1 added [ 1567.048587][T15814] team0: Port device team_slave_0 added [ 1567.122203][T15816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.122224][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.122256][T15816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.385734][T15814] team0: Port device team_slave_1 added [ 1567.387212][T15816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.387229][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.387263][T15816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.389184][T15799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.389199][T15799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.389231][T15799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.619278][T15799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.619299][T15799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.619331][T15799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.844355][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.844375][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.844408][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.044328][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.044348][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.044382][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.369342][T15816] hsr_slave_0: entered promiscuous mode [ 1568.370956][T15816] hsr_slave_1: entered promiscuous mode [ 1568.372502][T15816] debugfs: 'hsr0' already exists in 'hsr' [ 1568.372529][T15816] Cannot create hsr debugfs directory [ 1568.507328][T15721] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1568.605472][T15799] hsr_slave_0: entered promiscuous mode [ 1568.607143][T15799] hsr_slave_1: entered promiscuous mode [ 1568.608125][T15799] debugfs: 'hsr0' already exists in 'hsr' [ 1568.608150][T15799] Cannot create hsr debugfs directory [ 1568.608497][T15721] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1568.774491][T15880] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 1568.814835][T15721] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1568.841327][ T9953] Bluetooth: hci2: command 0x0406 tx timeout [ 1569.066501][T15880] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1569.192353][T15721] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1569.395462][T15814] hsr_slave_0: entered promiscuous mode [ 1569.397046][T15814] hsr_slave_1: entered promiscuous mode [ 1569.398080][T15814] debugfs: 'hsr0' already exists in 'hsr' [ 1569.398115][T15814] Cannot create hsr debugfs directory [ 1571.648890][T15896] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2828'. [ 1571.752103][T15896] netlink: 'syz.2.2828': attribute type 10 has an invalid length. [ 1571.865296][T15896] bond0: (slave netdevsim0): Releasing backup interface [ 1571.919051][T15896] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1571.919271][T15896] team0: Failed to send options change via netlink (err -105) [ 1571.919289][T15896] team0: Port device netdevsim0 added [ 1572.129968][T15721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.283040][T15900] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 1572.329984][T15721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.369123][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.369374][ T9488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.407904][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.413542][T13246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.633190][T15721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.925413][T15721] veth0_vlan: entered promiscuous mode [ 1574.972281][T15721] veth1_vlan: entered promiscuous mode [ 1575.001528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.550478][T15721] veth0_macvtap: entered promiscuous mode [ 1575.690968][T15721] veth1_macvtap: entered promiscuous mode [ 1575.704673][T15816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1575.780512][T15816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1575.847124][T15816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1575.982943][T15816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1576.124873][T15721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.268545][T15721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.311838][T15799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1576.374843][T15799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1576.438984][T15799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1576.504922][ T9488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.615777][T15799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1576.667233][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.672144][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.699678][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.951722][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1576.951760][T15950] netlink: 'syz.2.2839': attribute type 7 has an invalid length. [ 1576.951776][T15950] netlink: 'syz.2.2839': attribute type 8 has an invalid length. [ 1576.951790][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1577.213922][T15814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1577.297158][T15814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1577.415722][T15814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1577.535713][T15814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1577.653677][T15954] wg1: entered promiscuous mode [ 1577.653709][T15954] wg1: entered allmulticast mode [ 1577.887502][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.887528][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.237554][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.237578][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.301557][T15816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.485607][T15816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.556417][T15799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.598971][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.599139][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.669562][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.669740][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.770391][T15799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.925036][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.925197][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.049518][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.049748][ T9488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.121667][T15814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.296752][T15814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.364867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.366422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.447546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.447710][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.096031][T15816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.358472][T15994] bridge0: port 3(erspan0) entered blocking state [ 1580.358608][T15994] bridge0: port 3(erspan0) entered disabled state [ 1580.358858][T15994] erspan0: entered allmulticast mode [ 1580.475179][T15994] erspan0: entered promiscuous mode [ 1580.508122][T15994] bridge0: port 3(erspan0) entered blocking state [ 1580.508324][T15994] bridge0: port 3(erspan0) entered listening state [ 1580.606065][T15995] erspan0: left allmulticast mode [ 1580.606102][T15995] erspan0: left promiscuous mode [ 1580.606401][T15995] bridge0: port 3(erspan0) entered disabled state [ 1580.944200][T15816] veth0_vlan: entered promiscuous mode [ 1581.213757][T15799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.219661][T15816] veth1_vlan: entered promiscuous mode [ 1581.476712][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.717436][T15816] veth0_macvtap: entered promiscuous mode [ 1581.755583][T15816] veth1_macvtap: entered promiscuous mode [ 1581.756745][T16008] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 1581.756766][T16008] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2851'. [ 1581.919048][T15814] veth0_vlan: entered promiscuous mode [ 1581.944180][T15816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.096602][T15814] veth1_vlan: entered promiscuous mode [ 1582.116772][T15816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.211750][T12652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.217389][T12652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.221863][T12652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.238118][T12652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.689272][T15814] veth0_macvtap: entered promiscuous mode [ 1582.714733][T15799] veth0_vlan: entered promiscuous mode [ 1582.808025][T15814] veth1_macvtap: entered promiscuous mode [ 1582.831846][T16023] netlink: 'syz.7.2855': attribute type 1 has an invalid length. [ 1582.846796][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.846817][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.944510][T15799] veth1_vlan: entered promiscuous mode [ 1583.137250][T12652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.137274][T12652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.317104][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.447568][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.603611][T16032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.631195][T16032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.668229][T16032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.670605][T16032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.954607][T15799] veth0_macvtap: entered promiscuous mode [ 1591.088571][T16038] openvswitch: netlink: Message has 24 unknown bytes. [ 1591.114127][T15799] veth1_macvtap: entered promiscuous mode [ 1591.661741][T15799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.880292][T15799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.882445][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.882468][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.977972][ T3062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.143390][ T3062] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.176069][ T3062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.181669][ T3062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.233999][T16004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.234025][T16004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.039553][ T49] IPVS: starting estimator thread 0... [ 1593.123625][T16067] IPVS: using max 6 ests per chain, 14400 per kthread [ 1593.534213][T12904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.534237][T12904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.672212][T16076] openvswitch: netlink: Message has 24 unknown bytes. [ 1593.706679][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1594.009956][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1594.161584][T12652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.161602][T12652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.382614][T16089] overlayfs: overlapping lowerdir path [ 1594.868317][T16097] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1596.025039][ T10] IPVS: starting estimator thread 0... [ 1596.114223][T16128] IPVS: using max 10 ests per chain, 24000 per kthread [ 1599.346458][T16150] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1600.120297][T10238] IPVS: starting estimator thread 0... [ 1600.203723][T16163] IPVS: using max 7 ests per chain, 16800 per kthread [ 1601.193085][T16183] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 1601.466789][T16183] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1601.469307][T16187] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1601.732449][T16197] openvswitch: netlink: Flow key attr not present in new flow. [ 1601.960208][T16194] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1604.077606][T16226] netlink: 'syz.7.2914': attribute type 10 has an invalid length. [ 1604.361480][T16226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1605.447089][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 1605.979168][T16246] overlayfs: failed to resolve './file0': -2 [ 1606.701734][T16265] netlink: 'syz.7.2927': attribute type 10 has an invalid length. [ 1607.250022][T16268] syz.4.2930 (16268) used greatest stack depth: 16344 bytes left [ 1608.599245][T16300] overlayfs: failed to resolve './file0': -2 [ 1609.390266][T16315] netlink: 'syz.2.2944': attribute type 10 has an invalid length. [ 1611.144236][T16339] overlayfs: failed to resolve './file0': -2 [ 1611.902127][T16357] netlink: 'syz.7.2960': attribute type 10 has an invalid length. [ 1612.856468][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.308886][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2970'. [ 1614.059520][T16397] netlink: 'syz.4.2974': attribute type 10 has an invalid length. [ 1614.396582][T16397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1615.792348][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1616.164688][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 1616.571765][T16431] erspan0: entered promiscuous mode [ 1616.572168][T16431] macvtap1: entered promiscuous mode [ 1616.572485][T16431] macvtap1: entered allmulticast mode [ 1616.572502][T16431] erspan0: entered allmulticast mode [ 1616.847813][ T5842] block nbd0: Receive control failed (result -104) [ 1617.877010][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1618.471331][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3003'. [ 1619.179396][T16497] overlayfs: failed to resolve './file1': -2 [ 1621.337570][T16536] bridge1: entered promiscuous mode [ 1621.435313][T16536] openvswitch: netlink: EtherType 0 is less than min 600 [ 1622.150839][T16540] overlayfs: failed to resolve './file1': -2 [ 1623.265221][T16572] overlayfs: failed to resolve './file1': -2 [ 1623.348520][T16571] tipc: Started in network mode [ 1623.348554][T16571] tipc: Node identity 3a9e1fcac80c, cluster identity 4711 [ 1623.348784][T16571] tipc: Enabled bearer , priority 0 [ 1623.350029][T16571] syzkaller0: entered promiscuous mode [ 1623.350057][T16571] syzkaller0: entered allmulticast mode [ 1623.674109][T16577] tipc: Resetting bearer [ 1623.766036][T16569] tipc: Resetting bearer [ 1624.039279][T16569] tipc: Disabling bearer [ 1627.418693][T16629] overlayfs: failed to resolve './file1/file0': -2 [ 1627.614420][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 1628.075789][T16644] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3061'. [ 1629.094550][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1629.256733][T16674] overlayfs: failed to resolve './file1/file0': -2 [ 1632.952354][T16719] overlayfs: failed to resolve './file1/file0': -2 [ 1633.304557][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 1633.598400][T16727] bond0: entered promiscuous mode [ 1633.598428][T16727] bond_slave_0: entered promiscuous mode [ 1633.598735][T16727] bond_slave_1: entered promiscuous mode [ 1633.598977][T16727] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 1633.735714][T16727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1633.746333][T16727] bond0: left promiscuous mode [ 1633.771726][T16727] bond_slave_0: left promiscuous mode [ 1633.772022][T16727] bond_slave_1: left promiscuous mode [ 1633.772293][T16727] mac80211_hwsim hwsim56 wlan1: left promiscuous mode [ 1636.848174][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 1637.064838][T16784] bond0: entered promiscuous mode [ 1637.064864][T16784] bond_slave_0: entered promiscuous mode [ 1637.065138][T16784] bond_slave_1: entered promiscuous mode [ 1637.065393][T16784] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 1637.102074][T16784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1637.118301][T16784] bond0: left promiscuous mode [ 1637.118317][T16784] bond_slave_0: left promiscuous mode [ 1637.119991][T16784] bond_slave_1: left promiscuous mode [ 1637.120169][T16784] mac80211_hwsim hwsim56 wlan1: left promiscuous mode [ 1639.364872][T16820] Bluetooth: MGMT ver 1.23 [ 1639.774286][T16822] openvswitch: netlink: EtherType 0 is less than min 600 [ 1640.132570][T16821] bridge1: entered promiscuous mode [ 1640.733500][T16833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1640.733540][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1642.017601][T16861] bridge2: entered promiscuous mode [ 1642.071117][T16861] openvswitch: netlink: EtherType 0 is less than min 600 [ 1643.719310][T16890] Bluetooth: MGMT ver 1.23 [ 1644.930408][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1645.780160][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1647.504353][ T6031] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1647.519835][ T6031] ref_tracker: netdev@ffff88806389c690 has 1/1 users at [ 1647.519835][ T6031] batadv_hard_if_event+0xf0f/0x1740 [ 1647.519835][ T6031] notifier_call_chain+0x1b3/0x3e0 [ 1647.519835][ T6031] register_netdevice+0x163c/0x1b10 [ 1647.519835][ T6031] veth_newlink+0x5cc/0xa50 [ 1647.519835][ T6031] rtnl_newlink_create+0x310/0xb00 [ 1647.519835][ T6031] rtnl_newlink+0x16d6/0x1c70 [ 1647.519835][ T6031] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1647.519835][ T6031] netlink_rcv_skb+0x205/0x470 [ 1647.519835][ T6031] netlink_unicast+0x843/0xa10 [ 1647.519835][ T6031] netlink_sendmsg+0x805/0xb30 [ 1647.519835][ T6031] __sock_sendmsg+0x219/0x270 [ 1647.519835][ T6031] __sys_sendto+0x3c7/0x520 [ 1647.519835][ T6031] __x64_sys_sendto+0xde/0x100 [ 1647.519835][ T6031] do_syscall_64+0xfa/0x3b0 [ 1647.519835][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.519835][ T6031]