last executing test programs: 28m34.81409088s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10001000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') readv(r5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x715, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x1000000}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) 28m31.959397245s ago: executing program 2 (id=30): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x81, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x9, 0x32}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xbc, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x40, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0x8}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x41}, {0xffffffffffffffff, 0x2081}], 0x23, 0x0, &(0x7f00000000c0)={[0x101]}, 0x8) 28m25.573786043s ago: executing program 2 (id=38): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) 28m23.66502214s ago: executing program 2 (id=41): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x26, 0xe1, 0x99, 0x8, 0x66f, 0x8000, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x41, 0x0, 0x0, 0xd8, 0xcb, 0x4c, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0xf7}, [@mixer_unit={0x9, 0x24, 0x4, 0x8, 0x83, "c954863b"}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x2, 0x4, [0x8, 0x2, 0x2, 0xa], 0x8}]}]}}]}}]}}, 0x0) 28m19.34997673s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000003e00290200000000fc250a00a601040000000000f77efb0bb188aa15e5eb719426a00e9c133155e140e24270963e9091a4446e386534d2cdd6b9e42144e533539f4a8f2041a79b56bd11be4e4b"], 0x18}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x8}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000780)}}, 0x10) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40605414, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) 28m15.827786891s ago: executing program 2 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x0, 0x4, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r4, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000700)={&(0x7f0000000100)=[0x0], 0x1}) 28m0.600692916s ago: executing program 32 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x0, 0x4, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r4, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000700)={&(0x7f0000000100)=[0x0], 0x1}) 25m2.750272982s ago: executing program 3 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4c6, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) 25m1.108612807s ago: executing program 3 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 24m59.671397662s ago: executing program 3 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x1015, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x84, @remote, 0x4e20, 0x3, 'wlc\x00', 0x28, 0x323b, 0x55}, {@broadcast, 0x4e23, 0x1, 0xfffffffd, 0x12d5c, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 24m57.976634988s ago: executing program 3 (id=384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 24m56.65755252s ago: executing program 3 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10001000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') readv(r5, 0x0, 0x0) accept4(r5, 0x0, &(0x7f00000000c0), 0x80000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x715, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x1000000}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) 24m55.057737947s ago: executing program 3 (id=389): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000300)=@usbdevfs_connect={0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 24m39.758347597s ago: executing program 33 (id=389): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000300)=@usbdevfs_connect={0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21m2.221213746s ago: executing program 6 (id=705): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20m58.777959856s ago: executing program 6 (id=708): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r3, 0x0, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 20m58.108375681s ago: executing program 6 (id=709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0x0, 0x0, 0x1}, 0x10) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000026c0)=ANY=[@ANYBLOB="2e12011b00000000fe8000ff6a00000000000000000000aafe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000000000000001fc000000000000000000000000000000ff020000000000000000000000000001ff020000000000000001200100000000000000000f0000000000ff01000000faff00000000000000000100000000000002f8530bcf19ac0de34df9cc8faad7ca26123ada1f9c7abc88d5dd18e8578d49e1a68a4c5cc3ac55186806373a35ac7e2f559e36ed5bfb84d5b7eaba7c78e1ba286af6474d85e46bd9678c28191e8f96f54a70fad959116a7b54b9c88d8b7defb8e4adb73b54aab7fa4aea5ff180f96974e2dfc632fdcb6ddc9eff8de4f6e9994754e20bbb3cfc0709a1a8861aca1a31f80afc4713941d21a5899760363230daf62af7e0ee9b60cd5bc516c1b1d8be87ca8254dedfc72688765a482a3cdd2b9b180be991745db8acbff1d6c3f38c3c2e364f55bc1b823f6dc52e0b7bd1902dbea9759a9cdd3091"], 0x98) socket(0x2, 0x5, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in=@local, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0xa0, 0x100, 0x5e}, {0x6, 0x6, 0x7fffffffffffffff, 0x7, 0x4, 0x9, 0x8, 0xb8}, {0x0, 0xfb3, 0x0, 0xc}, 0x7f, 0x6e6bbb, 0x2, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xe7}, 0x2, @in=@multicast2, 0x3500, 0x1, 0x3, 0x0, 0x4, 0x40, 0x19}}, 0xe8) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0xfffffffe, 0x0, 0x0, 0x256}, &(0x7f0000c57000), 0x0) 20m56.195789754s ago: executing program 6 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) epoll_pwait(r2, 0x0, 0x0, 0x4c6, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) shutdown(r4, 0x0) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) 20m50.954243805s ago: executing program 6 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_create1(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socket$inet6_sctp(0xa, 0x5, 0x84) 20m47.435539455s ago: executing program 6 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x9c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6808}, 0x30000010) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000140)={{@host, 0xe}, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 20m31.488002217s ago: executing program 34 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x9c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6808}, 0x30000010) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000140)={{@host, 0xe}, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 13m41.753653816s ago: executing program 4 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 13m40.639081571s ago: executing program 4 (id=1426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0025}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) socket$pptp(0x18, 0x1, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) 13m38.913396372s ago: executing program 4 (id=1429): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005dc0)=""/17, 0x11}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)}, 0xffff8000}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x1000}], 0x4, 0x2, 0x0) 13m37.531554926s ago: executing program 4 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 13m28.644570295s ago: executing program 4 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x4c6, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)) shutdown(r6, 0x0) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x2000200b}) 13m27.282733916s ago: executing program 4 (id=1449): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2b}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002", 0x36}], 0x1) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000580)={0x0, 0x2e11, 0x4000, 0x3, 0x2df}, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#syz1.backup\x00\x00'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) shutdown(0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 13m18.338883243s ago: executing program 5 (id=1467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x4, 0xb}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff9, 0x7f}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m13.006543944s ago: executing program 5 (id=1478): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000021c0)="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", 0x387}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13m12.739762101s ago: executing program 5 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x9c}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6808}, 0x30000010) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000140)={{@host, 0xe}, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 13m9.950220466s ago: executing program 35 (id=1449): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2b}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002", 0x36}], 0x1) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000580)={0x0, 0x2e11, 0x4000, 0x3, 0x2df}, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#syz1.backup\x00\x00'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) shutdown(0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 13m7.573775619s ago: executing program 5 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x5c}}, 0x0) 13m6.925974471s ago: executing program 5 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x4c6, 0x0, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x2000200b}) 13m2.012273306s ago: executing program 5 (id=1492): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2b}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002", 0x36}], 0x1) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x499, &(0x7f0000000580)={0x0, 0x2e11, 0x4000, 0x3, 0x2df}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#syz1.backup\x00\x00'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) shutdown(r5, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 12m46.695736722s ago: executing program 36 (id=1492): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b00)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2b}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002", 0x36}], 0x1) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x499, &(0x7f0000000580)={0x0, 0x2e11, 0x4000, 0x3, 0x2df}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#syz1.backup\x00\x00'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) shutdown(r5, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x0, 0x0) 5.46941158s ago: executing program 7 (id=5429): vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0x80}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000000500)}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6c", 0x63}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b8", 0x3c}], 0x9, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff8500000006000000851000000400"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[r0, r2, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x94) r5 = socket(0x8000000010, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4.264920111s ago: executing program 7 (id=5438): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0xffffffffffffffff, {0x7, 0x29, 0x4001, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.7731823s ago: executing program 7 (id=5441): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.743838232s ago: executing program 1 (id=5442): r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x3c}}, 0x4) 3.614714208s ago: executing program 0 (id=5443): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 3.426210371s ago: executing program 1 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 3.181033624s ago: executing program 0 (id=5446): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) syz_emit_ethernet(0x0, 0x0, 0x0) 3.174099862s ago: executing program 8 (id=5447): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x28, 0x8, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0xa, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x4000800) 3.034539507s ago: executing program 7 (id=5448): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x24000000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x83, 0x44}, 0x48) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 3.0238143s ago: executing program 1 (id=5449): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.987964817s ago: executing program 0 (id=5450): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 2.898547237s ago: executing program 1 (id=5451): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0xffffffffffffffff, {0x7, 0x29, 0x4001, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.797578181s ago: executing program 9 (id=5452): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df60000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0) 2.780732072s ago: executing program 1 (id=5453): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.687532608s ago: executing program 0 (id=5454): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 2.687103884s ago: executing program 9 (id=5455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) 2.505872657s ago: executing program 7 (id=5456): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 2.318235558s ago: executing program 9 (id=5457): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) 2.111542387s ago: executing program 0 (id=5458): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x3ff}, 0x94) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe14) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640), 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 2.058893002s ago: executing program 8 (id=5459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.886165147s ago: executing program 9 (id=5460): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) syz_emit_ethernet(0x0, 0x0, 0x0) 1.870531866s ago: executing program 8 (id=5461): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.656273012s ago: executing program 1 (id=5462): listen(0xffffffffffffffff, 0x400004) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffe40, &(0x7f00000000c0)={0x0, 0xfffffe9e}}, 0x4c8d1) syz_genetlink_get_family_id$tipc2(0x0, r0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffa6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 1.282242717s ago: executing program 7 (id=5463): vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0x80}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000000500)}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6c", 0x63}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b8", 0x3c}], 0x9, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff8500000006000000851000000400"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[r0, r2, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x94) r5 = socket(0x8000000010, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.031088547s ago: executing program 8 (id=5464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 749.124686ms ago: executing program 8 (id=5465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 617.255535ms ago: executing program 0 (id=5466): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20008004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 506.456199ms ago: executing program 9 (id=5467): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8e", 0x60}], 0x2) unshare(0x8040480) ppoll(&(0x7f0000000240)=[{r0, 0x2}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 89.637105ms ago: executing program 8 (id=5468): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 0s ago: executing program 9 (id=5469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x28, 0x8, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0xa, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x4000800) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.0.3906'. [ 1579.376246][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3903'. [ 1579.524557][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1579.603994][T20397] block nbd0: NBD_DISCONNECT [ 1579.805573][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1579.812864][T20411] tipc: Enabled bearer , priority 0 [ 1579.837930][T20411] tipc: Resetting bearer [ 1580.024569][T20410] tipc: Disabling bearer [ 1580.228199][T20413] wg1 speed is unknown, defaulting to 1000 [ 1580.537967][T20422] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3915'. [ 1580.541695][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3915'. [ 1580.722167][T20427] siw: device registration error -23 [ 1580.735680][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3919'. [ 1581.064906][T20436] block nbd8: NBD_DISCONNECT [ 1581.278232][T20442] tipc: Enabled bearer , priority 0 [ 1581.286934][T20442] tipc: Resetting bearer [ 1581.918493][T20439] tipc: Disabling bearer [ 1582.471891][T20466] __nla_validate_parse: 11 callbacks suppressed [ 1582.471913][T20466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1582.545981][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3934'. [ 1582.590971][T20458] wg1 speed is unknown, defaulting to 1000 [ 1582.752999][T20471] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3937'. [ 1583.554877][T20480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1583.562081][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1584.233335][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3946'. [ 1584.233362][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3946'. [ 1584.247871][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3946'. [ 1584.247937][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3946'. [ 1584.331258][T20496] tipc: Enabled bearer , priority 0 [ 1584.386440][T20496] tipc: Resetting bearer [ 1584.459251][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3949'. [ 1584.604732][T20494] tipc: Disabling bearer [ 1584.754208][T20509] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 1584.955259][T20509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1585.001665][T20518] bond6: (slave dummy0): making interface the new active one [ 1585.015533][T20518] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1586.834779][T20521] bond6 (unregistering): (slave dummy0): Releasing active interface [ 1586.883409][T20521] bond6 (unregistering): Released all slaves [ 1587.227912][T20541] can: request_module (can-proto-4) failed. [ 1587.420675][T20547] syzkaller0: entered promiscuous mode [ 1587.420705][T20547] syzkaller0: entered allmulticast mode [ 1587.533104][T20561] __nla_validate_parse: 9 callbacks suppressed [ 1587.533128][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3969'. [ 1587.533157][T20561] netlink: 'syz.8.3969': attribute type 10 has an invalid length. [ 1587.596959][T20563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1587.600417][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1587.675452][T20565] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3970'. [ 1587.894314][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3971'. [ 1587.957967][T20571] wg1 speed is unknown, defaulting to 1000 [ 1588.056400][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1588.056425][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1588.059031][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1588.059056][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1588.274834][T20578] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3976'. [ 1588.298120][T20574] wg1 speed is unknown, defaulting to 1000 [ 1589.200196][T20598] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 1589.610027][T20610] syzkaller0: entered promiscuous mode [ 1589.614550][T20610] syzkaller0: entered allmulticast mode [ 1589.934816][T20614] netlink: 'syz.7.3985': attribute type 13 has an invalid length. [ 1589.934844][T20614] netlink: 'syz.7.3985': attribute type 17 has an invalid length. [ 1590.383051][T20614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.397364][T20614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.456590][T20614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1590.839061][T20620] ip6gretap1: entered allmulticast mode [ 1591.131254][T20622] wg1 speed is unknown, defaulting to 1000 [ 1591.727467][T20643] netlink: 'syz.9.3995': attribute type 12 has an invalid length. [ 1592.965494][T20662] __nla_validate_parse: 10 callbacks suppressed [ 1592.965518][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1593.308377][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1593.350532][T20663] syzkaller0: entered promiscuous mode [ 1593.350562][T20663] syzkaller0: entered allmulticast mode [ 1593.863895][T12058] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1594.019160][T12058] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1594.019195][T12058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.028210][T12058] usb 1-1: config 0 descriptor?? [ 1595.201619][T20692] netlink: 'syz.7.4009': attribute type 12 has an invalid length. [ 1595.202558][T20692] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4009'. [ 1595.505266][T12058] pegasus 1-1:0.0: can't reset MAC [ 1595.505685][T12058] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1595.556165][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1595.556198][T20694] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1595.556218][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1595.556473][T20694] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1595.968365][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4014'. [ 1595.969331][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4014'. [ 1596.169665][T20707] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4016'. [ 1596.734408][T12058] usb 1-1: USB disconnect, device number 34 [ 1596.785637][T14090] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.786523][T20717] syzkaller0: entered promiscuous mode [ 1596.786615][T20717] syzkaller0: entered allmulticast mode [ 1596.790409][T14090] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.791435][T14090] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.791482][T14090] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.306475][T12058] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1597.466761][T12058] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1597.466796][T12058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.472604][T12058] usb 1-1: config 0 descriptor?? [ 1597.843227][T20738] bridge0: port 3(gretap0) entered disabled state [ 1599.527951][T20767] __nla_validate_parse: 5 callbacks suppressed [ 1599.527982][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1599.581153][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1599.733533][T12058] pegasus 1-1:0.0: setup Pegasus II specific registers [ 1599.799958][T20773] tipc: Enabled bearer , priority 0 [ 1599.831039][T20769] syzkaller0: entered promiscuous mode [ 1599.831070][T20769] syzkaller0: entered allmulticast mode [ 1599.924837][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1600.223167][T20779] gretap0: left allmulticast mode [ 1600.223287][T20779] gretap0: left promiscuous mode [ 1600.237108][T20779] bridge0: port 3(gretap0) entered disabled state [ 1600.312749][T20779] bridge_slave_1: left allmulticast mode [ 1600.312773][T20779] bridge_slave_1: left promiscuous mode [ 1600.313077][T20779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.387420][T20779] bridge_slave_0: left allmulticast mode [ 1600.387533][T20779] bridge_slave_0: left promiscuous mode [ 1600.388239][T20779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.751307][T12058] pegasus 1-1:0.0: can't locate MII phy, using default [ 1601.014444][T20785] tipc: Resetting bearer [ 1601.014661][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4034'. [ 1601.014685][T20789] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4034'. [ 1601.014702][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4034'. [ 1601.014965][T20789] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4034'. [ 1601.095081][T20768] tipc: Resetting bearer [ 1601.234667][T20768] tipc: Disabling bearer [ 1601.395130][T20793] syzkaller0: entered promiscuous mode [ 1601.395162][T20793] syzkaller0: entered allmulticast mode [ 1601.492547][T12058] pegasus 1-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 86:f0:06:73:4c:f0 [ 1601.559982][T12058] usb 1-1: USB disconnect, device number 35 [ 1602.004207][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1602.261746][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4044'. [ 1602.365441][T20838] wg1 speed is unknown, defaulting to 1000 [ 1602.392686][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4045'. [ 1602.884096][T12556] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1603.059234][T12556] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1603.059270][T12556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.130753][T12556] usb 1-1: config 0 descriptor?? [ 1603.271375][T20862] syzkaller0: entered promiscuous mode [ 1603.271407][T20862] syzkaller0: entered allmulticast mode [ 1603.283953][T18239] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1603.453854][T18239] usb 9-1: Using ep0 maxpacket: 16 [ 1603.530650][T18239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.530771][T18239] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1603.530798][T18239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.638997][T18239] usb 9-1: config 0 descriptor?? [ 1604.174935][T18239] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1604.174982][T18239] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1604.175012][T18239] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1604.175099][T18239] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1604.175129][T18239] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 1604.302396][T18239] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1604.465946][T18239] usb 9-1: USB disconnect, device number 6 [ 1605.416745][T20906] __nla_validate_parse: 4 callbacks suppressed [ 1605.416770][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4064'. [ 1605.442462][T12556] pegasus 1-1:0.0: setup Pegasus II specific registers [ 1605.528485][T20908] netlink: 'syz.9.4065': attribute type 1 has an invalid length. [ 1605.597503][T20910] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4065'. [ 1605.650834][T20908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1605.714618][T20913] bond5: (slave dummy0): making interface the new active one [ 1605.716408][T20913] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1606.280622][T20926] netlink: 'syz.1.4070': attribute type 1 has an invalid length. [ 1606.306697][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1606.495481][T12556] pegasus 1-1:0.0: can't locate MII phy, using default [ 1606.552001][T20933] netlink: 'syz.7.4072': attribute type 13 has an invalid length. [ 1606.552019][T20933] netlink: 'syz.7.4072': attribute type 17 has an invalid length. [ 1607.296829][T20908] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1607.328421][T20908] bond5 (unregistering): Released all slaves [ 1607.383610][T20926] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1607.477137][T12556] pegasus 1-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, ce:cb:48:d7:98:fb [ 1607.504889][T12556] usb 1-1: USB disconnect, device number 36 [ 1607.564046][T20933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1607.652498][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4076'. [ 1608.340135][T20966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1608.607250][T20973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1608.630913][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4087'. [ 1609.554503][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4088'. [ 1609.635161][T20973] wg1 speed is unknown, defaulting to 1000 [ 1610.008842][T20998] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4095'. [ 1610.200569][T20999] wg1 speed is unknown, defaulting to 1000 [ 1611.630256][T21020] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4100'. [ 1611.884275][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4104'. [ 1612.186337][T21037] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4107'. [ 1612.569049][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1612.569181][T21055] netlink: 'syz.7.4115': attribute type 4 has an invalid length. [ 1612.685760][T21050] wg1 speed is unknown, defaulting to 1000 [ 1614.063846][ T928] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1614.111193][T21070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1614.182003][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1614.213821][ T928] usb 8-1: Using ep0 maxpacket: 16 [ 1614.216182][ T928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.216236][ T928] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1614.216264][ T928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.331565][ T928] usb 8-1: config 0 descriptor?? [ 1614.738489][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4126'. [ 1614.826243][ T928] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1614.826282][ T928] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1614.826313][ T928] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1614.826488][ T928] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1614.826519][ T928] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1614.872438][ T928] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1615.096061][ T928] usb 8-1: USB disconnect, device number 5 [ 1615.332810][T21083] delete_channel: no stack [ 1615.545324][T21104] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4131'. [ 1615.550065][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1615.718114][T21105] wg1 speed is unknown, defaulting to 1000 [ 1616.893070][T21118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4135'. [ 1617.372256][T21137] netlink: 'syz.9.4141': attribute type 4 has an invalid length. [ 1617.432114][T21133] wg1 speed is unknown, defaulting to 1000 [ 1617.547561][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.547653][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.734223][ T928] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1617.906030][ T928] usb 9-1: Using ep0 maxpacket: 16 [ 1617.912101][ T928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.912157][ T928] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1617.912184][ T928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.992212][ T928] usb 9-1: config 0 descriptor?? [ 1618.310793][T21151] netlink: 'syz.7.4147': attribute type 4 has an invalid length. [ 1618.450194][ T928] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1618.450237][ T928] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1618.450267][ T928] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1618.450296][ T928] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1618.450326][ T928] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1618.497221][ T928] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1618.538184][T21153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4148'. [ 1618.668089][ T928] usb 9-1: USB disconnect, device number 7 [ 1618.698639][T21155] tipc: Enabled bearer , priority 0 [ 1618.713255][T21155] syzkaller0: entered promiscuous mode [ 1618.713278][T21155] syzkaller0: entered allmulticast mode [ 1618.774598][T21155] tipc: Resetting bearer [ 1619.004785][T21154] tipc: Resetting bearer [ 1620.054132][T21164] can: request_module (can-proto-4) failed. [ 1620.315742][T21154] tipc: Disabling bearer [ 1620.465646][ T6046] tipc: Node number set to 1271493489 [ 1620.465970][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4158'. [ 1620.465994][T21180] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4158'. [ 1620.466014][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4158'. [ 1620.466261][T21180] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4158'. [ 1620.838028][T21192] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4162'. [ 1620.885994][T21196] netlink: 'syz.9.4164': attribute type 1 has an invalid length. [ 1620.963301][T21196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1620.966973][T21193] wg1 speed is unknown, defaulting to 1000 [ 1621.091287][T21200] can: request_module (can-proto-4) failed. [ 1622.384151][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1622.384184][T21218] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1622.384205][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1622.384456][T21218] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1622.585968][T21212] wg1 speed is unknown, defaulting to 1000 [ 1622.752841][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4171'. [ 1622.915133][T21235] netlink: 'syz.9.4176': attribute type 1 has an invalid length. [ 1622.964990][T21234] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1623.277881][T21235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1623.459148][T21238] can: request_module (can-proto-4) failed. [ 1623.814661][T21251] netlink: 'syz.7.4181': attribute type 13 has an invalid length. [ 1623.814689][T21251] netlink: 'syz.7.4181': attribute type 17 has an invalid length. [ 1624.103894][T21251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1625.276864][T21261] netlink: 'syz.7.4184': attribute type 1 has an invalid length. [ 1625.293076][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4183'. [ 1625.293098][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4183'. [ 1625.293112][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4183'. [ 1625.293480][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4183'. [ 1625.460892][T21261] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1625.474507][T21264] bond9: entered promiscuous mode [ 1625.474537][T21264] bond9: entered allmulticast mode [ 1625.481129][T21270] nbd: must specify at least one socket [ 1625.568357][T21266] bond8: (slave dummy0): Releasing active interface [ 1625.611958][T21266] bond9: (slave dummy0): making interface the new active one [ 1625.611984][T21266] dummy0: entered promiscuous mode [ 1625.612165][T21266] dummy0: entered allmulticast mode [ 1625.638247][T21266] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1625.706490][T21275] can: request_module (can-proto-4) failed. [ 1627.025949][T21271] bond9 (unregistering): (slave dummy0): Releasing active interface [ 1627.025975][T21271] dummy0: left promiscuous mode [ 1627.026126][T21271] dummy0: left allmulticast mode [ 1627.078098][T21271] bond9 (unregistering): Released all slaves [ 1627.124631][T21292] netlink: 'syz.8.4194': attribute type 12 has an invalid length. [ 1627.473145][T21301] netlink: 'syz.9.4198': attribute type 1 has an invalid length. [ 1627.562948][T21305] nbd: must specify at least one socket [ 1627.576265][T21308] __nla_validate_parse: 2 callbacks suppressed [ 1627.576288][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4198'. [ 1627.583454][T21301] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1627.696771][T21301] bond7: (slave dummy0): making interface the new active one [ 1627.716229][T21307] can: request_module (can-proto-4) failed. [ 1627.718211][T21301] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1628.043320][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1628.489209][T21329] netlink: 'syz.7.4207': attribute type 13 has an invalid length. [ 1628.489235][T21329] netlink: 'syz.7.4207': attribute type 17 has an invalid length. [ 1629.324757][T21308] bond7 (unregistering): (slave dummy0): Releasing active interface [ 1629.373500][T21308] bond7 (unregistering): Released all slaves [ 1629.424097][T21314] netlink: 'syz.8.4197': attribute type 12 has an invalid length. [ 1629.534105][T21329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1629.585822][T21335] wg1 speed is unknown, defaulting to 1000 [ 1629.666667][T21343] nbd: must specify at least one socket [ 1629.864693][T21346] can: request_module (can-proto-4) failed. [ 1630.092600][T21362] siw: device registration error -23 [ 1630.931587][T21382] can: request_module (can-proto-4) failed. [ 1630.962846][T21382] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4227'. [ 1630.962871][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4227'. [ 1631.014470][T21380] netlink: 'syz.1.4226': attribute type 4 has an invalid length. [ 1631.097253][T21387] netlink: 'syz.7.4228': attribute type 4 has an invalid length. [ 1631.696062][T21408] can: request_module (can-proto-4) failed. [ 1631.718544][T21408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1631.718579][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1631.793924][T12556] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1631.951733][T12556] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1631.951769][T12556] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.985190][T12556] usb 10-1: config 0 descriptor?? [ 1632.088672][T21419] wg1 speed is unknown, defaulting to 1000 [ 1632.159459][T21424] netlink: 'syz.8.4244': attribute type 1 has an invalid length. [ 1632.761542][ T928] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1632.923823][ T928] usb 1-1: Using ep0 maxpacket: 16 [ 1632.926873][ T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.926965][ T928] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1632.926983][ T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.992456][ T928] usb 1-1: config 0 descriptor?? [ 1633.091208][T21440] netlink: 'syz.8.4248': attribute type 1 has an invalid length. [ 1633.148342][T21441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4248'. [ 1633.507632][T21440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1633.514034][T21441] bond4: entered promiscuous mode [ 1633.514061][T21441] bond4: entered allmulticast mode [ 1633.582526][T21444] netlink: 'syz.7.4249': attribute type 1 has an invalid length. [ 1633.643474][ T928] usbhid 1-1:0.0: can't add hid device: -71 [ 1633.643995][ T928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1633.672557][ T928] usb 1-1: USB disconnect, device number 37 [ 1633.916147][T21448] can: request_module (can-proto-4) failed. [ 1633.979331][T21448] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4250'. [ 1633.979367][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4250'. [ 1634.120355][T21444] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1634.272417][T12556] pegasus 10-1:0.0: setup Pegasus II specific registers [ 1634.338648][T21445] bond9: (slave dummy0): making interface the new active one [ 1634.370546][T21445] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1635.363099][T12556] pegasus 10-1:0.0: can't locate MII phy, using default [ 1635.977988][T21446] bond9 (unregistering): (slave dummy0): Releasing active interface [ 1636.017293][T21446] bond9 (unregistering): Released all slaves [ 1636.117055][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4251'. [ 1636.117613][T21466] netlink: 'syz.0.4256': attribute type 12 has an invalid length. [ 1636.193967][T12556] pegasus 10-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 06:bc:25:e7:da:ee [ 1636.211835][T12556] usb 10-1: USB disconnect, device number 5 [ 1636.466108][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4260'. [ 1636.619637][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1636.619676][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1636.619694][T21483] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1636.623486][T21480] can: request_module (can-proto-4) failed. [ 1637.197464][T21497] wg1 speed is unknown, defaulting to 1000 [ 1637.365724][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4267'. [ 1637.563320][T21508] netlink: 'syz.8.4267': attribute type 12 has an invalid length. [ 1637.574392][T21505] wg1 speed is unknown, defaulting to 1000 [ 1637.739801][T21511] netlink: 'syz.0.4270': attribute type 13 has an invalid length. [ 1637.739830][T21511] netlink: 'syz.0.4270': attribute type 17 has an invalid length. [ 1637.863908][T21511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1638.045480][T21499] delete_channel: no stack [ 1638.192802][T21517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1638.553379][T21520] tipc: Enabled bearer , priority 0 [ 1638.606820][T21514] tipc: Resetting bearer [ 1638.635694][T21523] syzkaller0: entered promiscuous mode [ 1638.635725][T21523] syzkaller0: entered allmulticast mode [ 1638.847285][T21531] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 1638.944719][T21522] wg1 speed is unknown, defaulting to 1000 [ 1638.984089][T21513] tipc: Resetting bearer [ 1639.167461][T21513] tipc: Disabling bearer [ 1639.303616][T21531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1640.512123][T21555] netlink: 'syz.8.4282': attribute type 1 has an invalid length. [ 1640.590617][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1640.715394][T21555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1640.740783][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1640.804287][T21561] bond5: (slave dummy0): making interface the new active one [ 1640.835609][T21561] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1641.309563][T21553] delete_channel: no stack [ 1642.425241][T21558] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1642.475963][T21558] bond5 (unregistering): Released all slaves [ 1642.545477][T21554] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1642.545525][T21554] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1642.545547][T21554] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1642.624061][T21564] netlink: 'syz.0.4283': attribute type 12 has an invalid length. [ 1642.786560][T21566] wg1 speed is unknown, defaulting to 1000 [ 1643.297071][T21585] netlink: 'syz.8.4293': attribute type 4 has an invalid length. [ 1643.634544][T21591] netlink: 'syz.7.4295': attribute type 13 has an invalid length. [ 1643.634571][T21591] netlink: 'syz.7.4295': attribute type 17 has an invalid length. [ 1643.677591][T21591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1643.708002][T21594] netlink: 204 bytes leftover after parsing attributes in process `syz.8.4297'. [ 1644.210675][T21609] netlink: 'syz.9.4304': attribute type 1 has an invalid length. [ 1644.294056][T21609] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1644.316027][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1644.354464][T21614] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4305'. [ 1644.395650][T21609] bond7: (slave dummy0): making interface the new active one [ 1644.397506][T21609] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1644.397825][T21619] netlink: 'syz.1.4303': attribute type 12 has an invalid length. [ 1644.400810][T21619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1644.884038][T12556] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1645.072793][T12556] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1645.072829][T12556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.127314][T12556] usb 9-1: config 0 descriptor?? [ 1645.706294][T21609] bond7 (unregistering): (slave dummy0): Releasing active interface [ 1645.737709][T21609] bond7 (unregistering): Released all slaves [ 1646.283960][T12058] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1646.433851][T12058] usb 2-1: Using ep0 maxpacket: 16 [ 1646.437409][T12058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.437491][T12058] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1646.437510][T12058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.497702][T12058] usb 2-1: config 0 descriptor?? [ 1646.681094][T21653] netlink: 'syz.9.4320': attribute type 1 has an invalid length. [ 1646.728672][T21653] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1646.747001][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4320'. [ 1646.747049][T21653] bond7: entered promiscuous mode [ 1646.747072][T21653] bond7: entered allmulticast mode [ 1646.786542][T21653] bond7: (slave dummy0): making interface the new active one [ 1646.786636][T21653] dummy0: entered promiscuous mode [ 1646.786991][T21653] dummy0: entered allmulticast mode [ 1646.789412][T21653] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1647.185285][T12058] usbhid 2-1:0.0: can't add hid device: -71 [ 1647.185533][T12058] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1648.154347][T12556] pegasus 9-1:0.0: setup Pegasus II specific registers [ 1648.166907][T12058] usb 2-1: USB disconnect, device number 7 [ 1648.590838][T21671] netlink: 'syz.1.4327': attribute type 13 has an invalid length. [ 1648.590884][T21671] netlink: 'syz.1.4327': attribute type 17 has an invalid length. [ 1648.981164][T21683] netlink: 'syz.7.4329': attribute type 2 has an invalid length. [ 1648.981194][T21683] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4329'. [ 1649.026825][T21671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.029426][T21671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.079823][T21686] netlink: 'syz.0.4331': attribute type 1 has an invalid length. [ 1649.093211][T21671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1649.152327][T21688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1649.180208][T12556] pegasus 9-1:0.0: can't locate MII phy, using default [ 1649.262132][T21686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1649.263165][T21688] bond5: entered promiscuous mode [ 1649.263192][T21688] bond5: entered allmulticast mode [ 1649.343985][T12556] pegasus 9-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, f2:3e:93:28:46:25 [ 1649.385464][T12556] usb 9-1: USB disconnect, device number 8 [ 1649.486658][T21693] netlink: 'syz.7.4333': attribute type 4 has an invalid length. [ 1649.664764][T21698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1649.924409][T12556] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1650.032892][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4343'. [ 1650.071635][T21716] netlink: 'syz.8.4341': attribute type 12 has an invalid length. [ 1650.078395][T12556] usb 1-1: Using ep0 maxpacket: 16 [ 1650.092375][T12556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.092438][T12556] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1650.092465][T12556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.139473][T21715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1650.139494][T21715] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.140551][T21715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1650.140585][T21715] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.178958][T12556] usb 1-1: config 0 descriptor?? [ 1650.705036][T21719] netlink: 'syz.1.4344': attribute type 1 has an invalid length. [ 1650.791299][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4344'. [ 1650.796360][T12556] usbhid 1-1:0.0: can't add hid device: -71 [ 1650.796496][T12556] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1650.800783][T21719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1650.817842][T12556] usb 1-1: USB disconnect, device number 38 [ 1650.827724][T21721] bond6: entered promiscuous mode [ 1650.827798][T21721] bond6: entered allmulticast mode [ 1651.088432][T21729] netlink: 'syz.8.4345': attribute type 12 has an invalid length. [ 1651.541469][T21737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1651.971344][T21743] wg1 speed is unknown, defaulting to 1000 [ 1652.031992][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4353'. [ 1652.188109][T21749] ip6gretap1: entered allmulticast mode [ 1652.513239][T21758] Bluetooth: MGMT ver 1.23 [ 1652.832268][T21757] tipc: Enabled bearer , priority 0 [ 1652.833465][T21760] syzkaller0: entered promiscuous mode [ 1652.833491][T21760] syzkaller0: entered allmulticast mode [ 1653.022783][T21757] tipc: Resetting bearer [ 1653.068914][T21755] tipc: Resetting bearer [ 1653.220059][T21755] tipc: Disabling bearer [ 1653.424625][T11792] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1653.614223][T11792] usb 2-1: Using ep0 maxpacket: 16 [ 1653.617553][T11792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.617959][T11792] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1653.617988][T11792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.660050][T21777] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4360'. [ 1653.712053][T11792] usb 2-1: config 0 descriptor?? [ 1653.754566][T21777] 0{X: renamed from gretap0 (while UP) [ 1653.823046][T21777] 0{X: entered allmulticast mode [ 1653.837359][T21777] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1653.883238][T21776] wg1 speed is unknown, defaulting to 1000 [ 1654.388719][T11792] usbhid 2-1:0.0: can't add hid device: -71 [ 1654.388843][T11792] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1654.404658][T11792] usb 2-1: USB disconnect, device number 8 [ 1655.181911][T21805] netlink: 'syz.8.4368': attribute type 12 has an invalid length. [ 1655.562175][T21818] tipc: Enabled bearer , priority 0 [ 1655.563358][T21818] syzkaller0: entered promiscuous mode [ 1655.563383][T21818] syzkaller0: entered allmulticast mode [ 1655.680282][T21821] tipc: Resetting bearer [ 1655.714167][T21817] tipc: Resetting bearer [ 1655.865487][T21817] tipc: Disabling bearer [ 1656.417968][T21834] wg1 speed is unknown, defaulting to 1000 [ 1656.794172][T21837] wg1 speed is unknown, defaulting to 1000 [ 1657.212999][T21846] wg1 speed is unknown, defaulting to 1000 [ 1657.215288][T15484] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1657.401936][T15484] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1657.401975][T15484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.514750][T15484] usb 9-1: config 0 descriptor?? [ 1658.110546][T15975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1658.146661][T15975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1658.150474][T15975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1658.152476][T15975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1658.178301][T15975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1658.375535][T21861] netlink: 'syz.9.4387': attribute type 4 has an invalid length. [ 1658.994130][T21858] wg1 speed is unknown, defaulting to 1000 [ 1659.474780][T21858] chnl_net:caif_netlink_parms(): no params data found [ 1659.692927][T21858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.693184][T21858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.693448][T21858] bridge_slave_0: entered allmulticast mode [ 1659.714111][T21858] bridge_slave_0: entered promiscuous mode [ 1659.719021][T21858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.719253][T21858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.719518][T21858] bridge_slave_1: entered allmulticast mode [ 1659.722475][T21858] bridge_slave_1: entered promiscuous mode [ 1659.845134][T21858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.850371][T21858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.908516][T15484] pegasus 9-1:0.0: setup Pegasus II specific registers [ 1659.925433][T21858] team0: Port device team_slave_0 added [ 1659.929962][T21858] team0: Port device team_slave_1 added [ 1659.963985][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1659.964116][T21879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1659.964144][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1659.970608][T21879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1660.050407][T21858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.050430][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.050453][T21858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.061543][T21858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.061563][T21858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.061639][T21858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.246592][T21858] hsr_slave_0: entered promiscuous mode [ 1660.249402][T21858] hsr_slave_1: entered promiscuous mode [ 1660.251354][T21858] debugfs: 'hsr0' already exists in 'hsr' [ 1660.251385][T21858] Cannot create hsr debugfs directory [ 1660.334363][T16006] Bluetooth: hci0: command tx timeout [ 1660.821919][T21886] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 1660.921925][T15484] pegasus 9-1:0.0: can't locate MII phy, using default [ 1660.985856][T21886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1661.033280][T21887] bond7: (slave dummy0): making interface the new active one [ 1661.052067][T21887] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1661.264900][T15484] pegasus 9-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 26:88:97:58:98:67 [ 1661.267860][T15484] usb 9-1: USB disconnect, device number 9 [ 1661.575597][T21905] netlink: 204 bytes leftover after parsing attributes in process `syz.8.4401'. [ 1661.612869][T21907] netlink: 'syz.0.4399': attribute type 12 has an invalid length. [ 1661.634823][T21907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1661.720323][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1661.720356][T21910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1661.720377][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1661.720620][T21910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1662.415123][T16006] Bluetooth: hci0: command tx timeout [ 1662.439972][T21858] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1662.501155][T21858] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1662.587418][T21858] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1662.629877][T21858] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1662.865146][T21939] 1{X: renamed from 30{X (while UP) [ 1662.898032][T21939] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 1663.018667][T21858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.106980][T21858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.156565][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.156789][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.202975][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.211094][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.299091][T21951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1663.299109][T21951] IPv6: NLM_F_CREATE should be set when creating new route [ 1663.300216][T21951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1663.300230][T21951] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.006787][T21858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.493772][T16006] Bluetooth: hci0: command tx timeout [ 1665.013278][T21980] netlink: 'syz.8.4420': attribute type 13 has an invalid length. [ 1665.013305][T21980] netlink: 'syz.8.4420': attribute type 17 has an invalid length. [ 1665.260380][T21992] netlink: 'syz.0.4422': attribute type 2 has an invalid length. [ 1665.260456][T21992] __nla_validate_parse: 3 callbacks suppressed [ 1665.260475][T21992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4422'. [ 1665.306565][T21980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.308746][T21980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.374652][T21980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1665.432253][T21858] veth0_vlan: entered promiscuous mode [ 1665.481429][T21858] veth1_vlan: entered promiscuous mode [ 1665.864008][T21996] wg1 speed is unknown, defaulting to 1000 [ 1665.950241][T21858] veth0_macvtap: entered promiscuous mode [ 1666.017794][T21858] veth1_macvtap: entered promiscuous mode [ 1666.107371][T22003] can: request_module (can-proto-4) failed. [ 1666.126878][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1666.145002][T22007] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 1666.216946][T21858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.266803][T21858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.310544][T19014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.327614][T19014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.331238][T19014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.331294][T19014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.486047][T22017] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1666.567803][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4431'. [ 1666.567830][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4431'. [ 1666.583832][T16006] Bluetooth: hci0: command tx timeout [ 1667.152289][ T89] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.207053][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4431'. [ 1667.207078][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4431'. [ 1667.252237][ T89] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.302643][ T89] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.303040][ T89] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1667.442332][T19014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.442356][T19014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.652467][T22037] bridge0: port 3(gretap0) entered blocking state [ 1667.652688][T22037] bridge0: port 3(gretap0) entered disabled state [ 1667.652976][T22037] gretap0: entered allmulticast mode [ 1667.681461][T22037] gretap0: entered promiscuous mode [ 1667.896409][T16499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.896434][T16499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.268393][T22047] netlink: 'syz.7.4386': attribute type 13 has an invalid length. [ 1668.268420][T22047] netlink: 'syz.7.4386': attribute type 17 has an invalid length. [ 1668.296424][T22044] can: request_module (can-proto-4) failed. [ 1668.336187][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4438'. [ 1668.562975][T22057] netlink: 'syz.0.4441': attribute type 1 has an invalid length. [ 1668.573129][T22058] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4440'. [ 1668.844002][T22047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1669.143416][T22069] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 1669.268858][T22071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1669.275157][T22069] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1669.425892][T15975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1669.432397][T22071] bond6: (slave dummy0): making interface the new active one [ 1669.449228][T22071] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1669.462148][T15975] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1669.482669][T15975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1669.487837][T15975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1669.488887][T15975] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1670.855073][T22069] bond6 (unregistering): (slave dummy0): Releasing active interface [ 1670.911335][T22069] bond6 (unregistering): Released all slaves [ 1671.198305][T22093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4450'. [ 1671.199305][T22088] can: request_module (can-proto-4) failed. [ 1671.327216][T22087] netlink: 'syz.1.4449': attribute type 12 has an invalid length. [ 1671.487618][T22074] wg1 speed is unknown, defaulting to 1000 [ 1671.533976][T16006] Bluetooth: hci5: command tx timeout [ 1672.039841][T22121] netlink: 'syz.8.4463': attribute type 1 has an invalid length. [ 1672.100712][T22127] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4463'. [ 1672.141289][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1672.182630][T22123] can: request_module (can-proto-4) failed. [ 1672.198347][T22121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1672.280552][T22074] chnl_net:caif_netlink_parms(): no params data found [ 1672.445988][T22135] tipc: Enabling of bearer rejected, failed to enable media [ 1672.580551][T22074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.581544][T22074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.581852][T22074] bridge_slave_0: entered allmulticast mode [ 1672.610054][T22074] bridge_slave_0: entered promiscuous mode [ 1672.631656][T22074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.632936][T22074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.633589][T22074] bridge_slave_1: entered allmulticast mode [ 1672.658601][T22074] bridge_slave_1: entered promiscuous mode [ 1672.715924][T22074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.722768][T22074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.789359][T22074] team0: Port device team_slave_0 added [ 1672.800764][T22074] team0: Port device team_slave_1 added [ 1672.915044][T22074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.915064][T22074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.915106][T22074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.918021][T22074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.918038][T22074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.918071][T22074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.478854][T22162] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4471'. [ 1673.617897][T16006] Bluetooth: hci5: command tx timeout [ 1673.637391][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4473'. [ 1673.695756][T22172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1673.695777][T22172] IPv6: NLM_F_CREATE should be set when creating new route [ 1673.701883][T22167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1673.701904][T22167] IPv6: NLM_F_CREATE should be set when creating new route [ 1673.748185][T22074] hsr_slave_0: entered promiscuous mode [ 1673.760129][T22074] hsr_slave_1: entered promiscuous mode [ 1673.761402][T22074] debugfs: 'hsr0' already exists in 'hsr' [ 1673.761429][T22074] Cannot create hsr debugfs directory [ 1673.922001][T22175] netlink: 'syz.8.4474': attribute type 12 has an invalid length. [ 1674.706171][T22177] netlink: 'syz.8.4476': attribute type 1 has an invalid length. [ 1674.770430][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4476'. [ 1675.008897][T22180] netlink: 'syz.1.4477': attribute type 1 has an invalid length. [ 1675.426120][T22177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1675.742347][T16006] Bluetooth: hci5: command tx timeout [ 1675.916880][T22198] tipc: Enabling of bearer rejected, failed to enable media [ 1676.438341][T22212] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4483'. [ 1676.859010][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1676.917811][T22225] netlink: 'syz.7.4485': attribute type 1 has an invalid length. [ 1676.973548][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4485'. [ 1677.056519][T22222] netlink: 'syz.8.4484': attribute type 12 has an invalid length. [ 1677.256711][T22232] netlink: 'syz.0.4486': attribute type 4 has an invalid length. [ 1677.419456][T22236] netlink: 'syz.7.4488': attribute type 1 has an invalid length. [ 1677.732089][T22242] netlink: 'syz.8.4489': attribute type 1 has an invalid length. [ 1677.773984][T16006] Bluetooth: hci5: command tx timeout [ 1677.847711][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4489'. [ 1677.924771][T22242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1678.960340][T22260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1678.982428][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.982502][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.173247][T22264] geneve2: entered promiscuous mode [ 1679.241957][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.244496][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.249332][T22074] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1679.303780][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.305363][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.334936][T22074] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1679.381176][T22074] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1679.564654][T22074] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1679.601989][T22270] netlink: 'syz.7.4500': attribute type 1 has an invalid length. [ 1679.603891][T15484] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1679.662618][T22270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.804016][T15484] usb 2-1: Using ep0 maxpacket: 16 [ 1679.807350][T15484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.807388][T15484] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1679.807406][T15484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.813066][T15484] usb 2-1: config 0 descriptor?? [ 1680.078238][T22270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.120070][T22278] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 1680.254189][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1680.254626][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1680.261098][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1680.322191][T15484] usbhid 2-1:0.0: can't add hid device: -32 [ 1680.322284][T15484] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1680.384196][T15484] usb 2-1: USB disconnect, device number 9 [ 1680.397936][T22280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1681.064591][T22278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1681.112113][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4502'. [ 1681.254266][T22293] netlink: 'syz.7.4505': attribute type 1 has an invalid length. [ 1682.924216][T22293] hsr_slave_0 (unregistering): left promiscuous mode [ 1685.167200][T22316] netlink: 'syz.1.4510': attribute type 12 has an invalid length. [ 1685.862294][T22074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.969359][T22074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.100463][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.103560][T14156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.122362][T22323] netlink: 'syz.7.4515': attribute type 1 has an invalid length. [ 1686.194973][T22323] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4515'. [ 1686.198623][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.198788][T14156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.244213][T12058] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1686.347435][T22327] siw: device registration error -23 [ 1686.434071][T12058] usb 1-1: Using ep0 maxpacket: 16 [ 1686.437386][T12058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.437440][T12058] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1686.437488][T12058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.442157][T12058] usb 1-1: config 0 descriptor?? [ 1686.769020][T22330] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1686.931690][T12058] usbhid 1-1:0.0: can't add hid device: -71 [ 1686.931824][T12058] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1687.005242][T12058] usb 1-1: USB disconnect, device number 39 [ 1687.087535][T22330] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.156001][T22338] netlink: 'syz.1.4519': attribute type 13 has an invalid length. [ 1687.156030][T22338] netlink: 'syz.1.4519': attribute type 17 has an invalid length. [ 1687.256369][T22338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1687.362194][T22330] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.324483][T22330] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.678682][T22358] netlink: 'syz.7.4525': attribute type 1 has an invalid length. [ 1689.711255][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1689.738301][T22074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.218650][ T6440] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1690.871595][T14156] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.355750][T22377] netlink: 'syz.1.4523': attribute type 13 has an invalid length. [ 1691.355770][T22377] netlink: 'syz.1.4523': attribute type 17 has an invalid length. [ 1691.386236][T14157] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.475285][T22377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1691.638678][ T6421] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.826958][T22074] veth0_vlan: entered promiscuous mode [ 1691.900549][T22074] veth1_vlan: entered promiscuous mode [ 1692.101895][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4532'. [ 1692.164836][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4532'. [ 1692.213834][T15484] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1692.251898][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4532'. [ 1692.264807][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4532'. [ 1692.379426][T15484] usb 8-1: Using ep0 maxpacket: 16 [ 1692.402080][T15484] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.402123][T15484] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1692.402141][T15484] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.463371][T15484] usb 8-1: config 0 descriptor?? [ 1692.653363][T22074] veth0_macvtap: entered promiscuous mode [ 1692.745849][T22074] veth1_macvtap: entered promiscuous mode [ 1692.762162][T22395] netlink: 'syz.1.4535': attribute type 1 has an invalid length. [ 1692.901799][T22395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1693.140770][T15484] usbhid 8-1:0.0: can't add hid device: -71 [ 1693.140912][T15484] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1693.183540][T15484] usb 8-1: USB disconnect, device number 6 [ 1693.308408][T22405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1693.625587][T22074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.658630][T22074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.717205][ T6440] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.745564][ T6440] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.747211][ T6440] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.747250][ T6440] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.035711][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1694.161024][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1694.257906][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1694.381483][ T6005] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.388899][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4541'. [ 1694.499449][ T6005] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.530359][ T6005] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.530401][ T6005] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1694.748047][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.748073][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.947168][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.947193][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.080555][T22428] wg1 speed is unknown, defaulting to 1000 [ 1695.162636][T22432] netlink: 'syz.0.4547': attribute type 1 has an invalid length. [ 1695.298618][T22432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1695.490818][T22440] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4443'. [ 1695.694381][T12556] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1695.743306][T22451] netlink: 'syz.1.4551': attribute type 13 has an invalid length. [ 1695.807044][T22450] netlink: 'syz.7.4552': attribute type 13 has an invalid length. [ 1695.807070][T22450] netlink: 'syz.7.4552': attribute type 17 has an invalid length. [ 1695.864021][T12556] usb 1-1: Using ep0 maxpacket: 16 [ 1695.867724][T12556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.867779][T12556] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1695.867805][T12556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.919803][T12556] usb 1-1: config 0 descriptor?? [ 1696.572851][T12556] usbhid 1-1:0.0: can't add hid device: -71 [ 1696.572997][T12556] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1696.581113][T12556] usb 1-1: USB disconnect, device number 40 [ 1696.995176][T22450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1697.087473][T22456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.365006][T22468] erspan0: entered promiscuous mode [ 1697.390658][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1697.546148][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.546177][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.581042][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.581069][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.604125][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.604151][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.605512][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.605533][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1697.612612][T22474] netlink: 'syz.9.4561': attribute type 13 has an invalid length. [ 1697.849299][T22487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4567'. [ 1698.700241][T22491] netlink: 'syz.7.4562': attribute type 11 has an invalid length. [ 1698.700266][T22491] netlink: 'syz.7.4562': attribute type 11 has an invalid length. [ 1698.721125][T22491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.742483][T22487] geneve3: entered promiscuous mode [ 1698.742512][T22487] geneve3: entered allmulticast mode [ 1698.901598][T22496] lo: Caught tx_queue_len zero misconfig [ 1699.252942][T22511] geneve2: entered promiscuous mode [ 1699.252970][T22511] geneve2: entered allmulticast mode [ 1699.801621][T22526] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 1700.184619][T22532] netlink: 'syz.9.4585': attribute type 13 has an invalid length. [ 1700.184646][T22532] netlink: 'syz.9.4585': attribute type 17 has an invalid length. [ 1700.623922][T22532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1701.019265][T22550] wg1 speed is unknown, defaulting to 1000 [ 1701.421408][T15975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1701.438470][T15975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1701.457113][T15975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1701.462114][T15975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1701.463082][T15975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1701.681703][T22565] netlink: 'syz.9.4596': attribute type 2 has an invalid length. [ 1702.149108][T22576] bridge0: port 3(gretap0) entered blocking state [ 1702.153080][T22576] bridge0: port 3(gretap0) entered disabled state [ 1702.153404][T22576] gretap0: entered allmulticast mode [ 1702.163558][T22576] gretap0: entered promiscuous mode [ 1702.203936][T22576] bridge0: port 3(gretap0) entered blocking state [ 1702.204027][T22576] bridge0: port 3(gretap0) entered forwarding state [ 1702.530108][T22584] __nla_validate_parse: 19 callbacks suppressed [ 1702.530133][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1702.705271][T22563] wg1 speed is unknown, defaulting to 1000 [ 1702.768154][T22589] netlink: 'syz.7.4604': attribute type 1 has an invalid length. [ 1702.940674][T22593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4605'. [ 1702.940857][T22593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4605'. [ 1703.024121][T22596] siw: device registration error -23 [ 1703.304483][T22604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4610'. [ 1703.304520][T22604] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4610'. [ 1703.469823][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1703.482802][T22613] siw: device registration error -23 [ 1703.565670][T22615] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1703.614108][T16006] Bluetooth: hci2: command tx timeout [ 1703.668712][T22618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4615'. [ 1703.669018][T22618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4615'. [ 1703.712217][T22620] netlink: 'syz.1.4616': attribute type 1 has an invalid length. [ 1703.769267][T22621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1703.932489][T22610] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.932534][T22610] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.089965][T22624] bond7: (slave dummy0): Releasing active interface [ 1704.148301][T22627] 1{X: left allmulticast mode [ 1704.149316][T22627] erspan0: left promiscuous mode [ 1704.246627][T22627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1704.511026][T22610] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1704.511071][T22610] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.347420][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4626'. [ 1705.373586][T22563] chnl_net:caif_netlink_parms(): no params data found [ 1705.649221][T22658] netlink: 'syz.9.4629': attribute type 1 has an invalid length. [ 1705.693907][T16006] Bluetooth: hci2: command tx timeout [ 1705.783474][T22610] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.783506][T22610] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.902290][T22659] veth0_vlan: entered allmulticast mode [ 1706.239617][T22610] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1706.239661][T22610] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.445087][T22563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.445242][T22563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.446077][T22563] bridge_slave_0: entered allmulticast mode [ 1706.448297][T22563] bridge_slave_0: entered promiscuous mode [ 1706.511284][T22563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.511470][T22563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.511781][T22563] bridge_slave_1: entered allmulticast mode [ 1706.522276][T22563] bridge_slave_1: entered promiscuous mode [ 1706.649431][T22563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.669108][T22563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.840510][T15016] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1706.840550][T15016] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.862445][T22563] team0: Port device team_slave_0 added [ 1706.872458][T22563] team0: Port device team_slave_1 added [ 1706.923025][T22563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.923061][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.923092][T22563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.002278][T22563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.002298][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.002329][T22563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.002896][T14157] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.002929][T14157] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.144965][T15016] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.145006][T15016] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.292435][T15016] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1707.292474][T15016] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.324783][T22563] hsr_slave_0: entered promiscuous mode [ 1707.328151][T22563] hsr_slave_1: entered promiscuous mode [ 1707.329599][T22563] debugfs: 'hsr0' already exists in 'hsr' [ 1707.329628][T22563] Cannot create hsr debugfs directory [ 1707.412698][T22683] netlink: 'syz.0.4634': attribute type 12 has an invalid length. [ 1707.774292][T16006] Bluetooth: hci2: command tx timeout [ 1708.149777][T22694] netlink: 'syz.0.4640': attribute type 1 has an invalid length. [ 1708.205322][T22695] __nla_validate_parse: 6 callbacks suppressed [ 1708.205346][T22695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'. [ 1708.291882][T22691] netlink: 'syz.1.4639': attribute type 12 has an invalid length. [ 1708.292483][T22692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1708.593157][T22702] netlink: 536 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1708.682150][T22563] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1708.900687][T22563] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.073218][T22563] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.632236][T22723] netlink: 'syz.7.4652': attribute type 13 has an invalid length. [ 1709.853789][T16006] Bluetooth: hci2: command tx timeout [ 1710.084390][T22563] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.715902][T22725] macvtap1: entered promiscuous mode [ 1710.715932][T22725] macvtap1: entered allmulticast mode [ 1710.716896][T22725] dummy0: entered allmulticast mode [ 1710.716964][T22725] dummy0: entered promiscuous mode [ 1710.720125][T22725] team0: Device macvtap1 failed to register rx_handler [ 1710.776346][T22725] dummy0: left allmulticast mode [ 1710.776371][T22725] dummy0: left promiscuous mode [ 1711.050727][T22736] lo: Caught tx_queue_len zero misconfig [ 1711.148768][T22742] netlink: 'syz.0.4659': attribute type 13 has an invalid length. [ 1711.148796][T22742] netlink: 'syz.0.4659': attribute type 17 has an invalid length. [ 1711.248561][T22747] netlink: 'syz.9.4661': attribute type 13 has an invalid length. [ 1711.248585][T22747] netlink: 'syz.9.4661': attribute type 17 has an invalid length. [ 1711.383870][T22742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.435712][T22747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1712.185261][T22761] siw: device registration error -23 [ 1712.312949][T22563] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1712.538739][T22563] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1712.605189][T22563] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1712.672758][T22766] netlink: 'syz.9.4667': attribute type 12 has an invalid length. [ 1712.673503][T22563] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1712.721622][T22770] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4667'. [ 1712.756955][T22772] netlink: 'syz.7.4670': attribute type 13 has an invalid length. [ 1712.774285][T22779] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 1712.830430][T22781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1712.959333][T22779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1713.379171][T22563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.381895][T22798] netlink: 'syz.9.4677': attribute type 13 has an invalid length. [ 1713.381919][T22798] netlink: 'syz.9.4677': attribute type 17 has an invalid length. [ 1713.458287][T22798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1713.469181][T22801] netlink: 'syz.7.4678': attribute type 13 has an invalid length. [ 1713.469218][T22801] netlink: 'syz.7.4678': attribute type 17 has an invalid length. [ 1713.975934][T22801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1714.048175][T22563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.107759][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.108088][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.166464][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.166693][T14156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.402964][T22812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1714.507130][T22813] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1714.787460][T22823] netlink: 'syz.7.4686': attribute type 13 has an invalid length. [ 1714.787486][T22823] netlink: 'syz.7.4686': attribute type 17 has an invalid length. [ 1714.904560][T22823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1715.092490][T22833] netlink: 496 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1715.134116][T22563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.515542][T22563] veth0_vlan: entered promiscuous mode [ 1716.534380][T22563] veth1_vlan: entered promiscuous mode [ 1716.760491][T22563] veth0_macvtap: entered promiscuous mode [ 1716.772022][T22563] veth1_macvtap: entered promiscuous mode [ 1716.803896][T22563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.836931][T22563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.858781][ T158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.858838][ T158] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.858878][ T158] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.858919][ T158] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.471955][T15016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.471979][T15016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.638037][T22883] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 1717.747497][T22883] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1717.948681][ T6191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.948703][ T6191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.043830][ T928] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1718.098627][T22896] netlink: 'syz.1.4711': attribute type 4 has an invalid length. [ 1718.174222][ T928] usb 8-1: device descriptor read/64, error -71 [ 1718.413945][ T928] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1718.544283][ T928] usb 8-1: device descriptor read/64, error -71 [ 1718.685191][ T928] usb usb8-port1: attempt power cycle [ 1718.885011][T22920] tipc: Enabled bearer , priority 0 [ 1718.909144][T22918] wg1 speed is unknown, defaulting to 1000 [ 1718.924835][T22920] tipc: Resetting bearer [ 1719.033969][ T928] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1719.054694][ T928] usb 8-1: device descriptor read/8, error -71 [ 1719.128981][T22919] tipc: Disabling bearer [ 1719.295980][ T928] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1719.314821][ T928] usb 8-1: device descriptor read/8, error -71 [ 1719.404029][T22923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1719.424255][ T928] usb usb8-port1: unable to enumerate USB device [ 1719.475817][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 1719.475859][T22925] netlink: 'syz.0.4721': attribute type 5 has an invalid length. [ 1719.475875][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4721'. [ 1719.517049][T22925] geneve4: entered promiscuous mode [ 1719.517073][T22925] geneve4: entered allmulticast mode [ 1719.518950][T14156] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 8192 - 0 [ 1719.520734][T14156] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 8192 - 0 [ 1719.520781][T14156] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 8192 - 0 [ 1719.520820][T14156] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 8192 - 0 [ 1720.498556][T22933] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1721.572366][T22956] can: request_module (can-proto-4) failed. [ 1721.593160][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4730'. [ 1722.094057][T22964] wg1 speed is unknown, defaulting to 1000 [ 1722.762220][T22996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1723.234966][ T928] IPVS: starting estimator thread 0... [ 1723.335799][T23008] IPVS: using max 7 ests per chain, 16800 per kthread [ 1723.404031][T23013] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1723.426071][T23013] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1723.659046][T23023] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4754'. [ 1723.703494][T23024] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1723.737032][T23021] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1723.737076][T23021] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.774762][ T928] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1723.876422][T23021] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1723.876453][T23021] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.933815][ T928] usb 10-1: Using ep0 maxpacket: 16 [ 1723.936925][ T928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.936978][ T928] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1723.937004][ T928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.985084][ T928] usb 10-1: config 0 descriptor?? [ 1724.177872][T23021] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.177915][T23021] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.389818][T23021] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.389860][T23021] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.468010][ T928] mcp2221 0003:04D8:00DD.0012: unexpected long global item [ 1724.471533][ T928] mcp2221 0003:04D8:00DD.0012: can't parse reports [ 1724.471867][ T928] mcp2221 0003:04D8:00DD.0012: probe with driver mcp2221 failed with error -22 [ 1724.635223][T15215] usb 10-1: USB disconnect, device number 6 [ 1725.042366][ T6295] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.042406][ T6295] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.270115][ T6005] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.270155][ T6005] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.341178][T22301] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.341216][T22301] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.484794][T22976] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.484830][T22976] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.490455][T23056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4765'. [ 1725.773362][T23063] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1726.201000][T23086] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4773'. [ 1726.201036][T23086] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4773'. [ 1726.318023][T23090] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1726.456595][T23066] wg1 speed is unknown, defaulting to 1000 [ 1726.688608][T23100] syzkaller0: entered promiscuous mode [ 1726.688635][T23100] syzkaller0: entered allmulticast mode [ 1727.452528][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4787'. [ 1727.532781][T23124] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4788'. [ 1727.532817][T23124] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4788'. [ 1728.277790][T15975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1728.304402][T15975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1728.308930][T15975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1728.330518][T15975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1728.331706][T15975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1728.573588][T23135] wg1 speed is unknown, defaulting to 1000 [ 1729.468753][T23171] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4798'. [ 1729.589099][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4801'. [ 1729.824116][T23178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4803'. [ 1730.076018][T23135] chnl_net:caif_netlink_parms(): no params data found [ 1730.487834][T23135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.495532][T16006] Bluetooth: hci4: command tx timeout [ 1730.508181][T23135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.508539][T23135] bridge_slave_0: entered allmulticast mode [ 1730.511580][T23135] bridge_slave_0: entered promiscuous mode [ 1730.541819][T23135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.542047][T23135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.542387][T23135] bridge_slave_1: entered allmulticast mode [ 1730.570573][T23135] bridge_slave_1: entered promiscuous mode [ 1730.660106][T23135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.663469][T23196] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4810'. [ 1730.683972][T23135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.797773][T23135] team0: Port device team_slave_0 added [ 1730.802013][T23135] team0: Port device team_slave_1 added [ 1730.871845][T23135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.871864][T23135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.871893][T23135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.936250][T23135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.936269][T23135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.936301][T23135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.054532][T23206] tipc: Enabling of bearer rejected, failed to enable media [ 1731.059705][T23204] syzkaller0: entered promiscuous mode [ 1731.059736][T23204] syzkaller0: entered allmulticast mode [ 1731.201381][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1731.224809][T23214] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1731.280930][T23135] hsr_slave_0: entered promiscuous mode [ 1731.282209][T23135] hsr_slave_1: entered promiscuous mode [ 1731.283052][T23135] debugfs: 'hsr0' already exists in 'hsr' [ 1731.283072][T23135] Cannot create hsr debugfs directory [ 1731.418821][T23219] netlink: 'syz.0.4815': attribute type 12 has an invalid length. [ 1731.476172][T23217] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1731.692438][T23228] netlink: 'syz.7.4819': attribute type 2 has an invalid length. [ 1731.692458][T23228] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4819'. [ 1731.881251][T23207] delete_channel: no stack [ 1732.319612][T23221] wg1 speed is unknown, defaulting to 1000 [ 1732.573850][T16006] Bluetooth: hci4: command tx timeout [ 1732.646594][T23243] netlink: 'syz.8.4826': attribute type 1 has an invalid length. [ 1732.722517][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4826'. [ 1732.784902][T23243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1733.038172][T23258] netlink: 'syz.8.4832': attribute type 1 has an invalid length. [ 1733.046910][ T6046] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1733.129000][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1733.271515][ T6046] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1733.271550][ T6046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.372435][ T6046] usb 8-1: config 0 descriptor?? [ 1733.516638][T23266] netlink: 'syz.0.4831': attribute type 12 has an invalid length. [ 1733.812657][T23254] delete_channel: no stack [ 1734.403786][ T6046] pegasus 8-1:0.0: probe with driver pegasus failed with error -32 [ 1734.510384][T23283] netlink: 'syz.9.4839': attribute type 1 has an invalid length. [ 1734.559606][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4839'. [ 1734.654615][T16006] Bluetooth: hci4: command tx timeout [ 1734.953332][T23135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1734.988437][T23135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1735.031513][T23135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1735.100036][T23135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1735.902540][ T928] usb 8-1: USB disconnect, device number 11 [ 1736.227638][T23332] netlink: 204 bytes leftover after parsing attributes in process `syz.8.4847'. [ 1736.227864][T23338] bridge0: port 3(gretap0) entered blocking state [ 1736.228212][T23338] bridge0: port 3(gretap0) entered disabled state [ 1736.228543][T23338] gretap0: entered allmulticast mode [ 1736.231349][T23338] gretap0: entered promiscuous mode [ 1736.233070][T23338] bridge0: port 3(gretap0) entered blocking state [ 1736.233200][T23338] bridge0: port 3(gretap0) entered forwarding state [ 1736.519092][T23135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.592090][T23135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.637877][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.638694][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.746705][T16006] Bluetooth: hci4: command tx timeout [ 1736.775893][T14090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.779891][T14090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1736.845954][T23353] netlink: 'syz.7.4853': attribute type 1 has an invalid length. [ 1736.877999][T23349] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1736.879441][T23353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4853'. [ 1737.017206][T23352] wg1 speed is unknown, defaulting to 1000 [ 1737.158213][T23357] netlink: 'syz.7.4855': attribute type 4 has an invalid length. [ 1737.562461][T23373] siw: device registration error -23 [ 1737.879365][T23386] netlink: 'syz.9.4864': attribute type 1 has an invalid length. [ 1737.925763][T23385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1737.948957][T23387] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4864'. [ 1738.113022][T23135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.661287][T23393] wg1 speed is unknown, defaulting to 1000 [ 1738.778629][T23411] netlink: 'syz.0.4874': attribute type 15 has an invalid length. [ 1739.930154][T23418] netlink: 'syz.8.4877': attribute type 1 has an invalid length. [ 1739.949950][T23135] veth0_vlan: entered promiscuous mode [ 1739.981127][T23418] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1739.982999][T23135] veth1_vlan: entered promiscuous mode [ 1740.216998][T23135] veth0_macvtap: entered promiscuous mode [ 1740.231686][T23135] veth1_macvtap: entered promiscuous mode [ 1740.311223][T23422] netlink: 'syz.8.4879': attribute type 2 has an invalid length. [ 1740.311249][T23422] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4879'. [ 1740.317565][T23135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.349074][T23135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.370609][ T3469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.421897][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.421974][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.704554][ T3469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.707701][ T6421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.707756][ T6421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.245889][T14156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.245914][T14156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.501199][T14156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.501224][T14156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.830218][T23449] netlink: 208 bytes leftover after parsing attributes in process `syz.9.4891'. [ 1742.292287][T23460] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4893'. [ 1742.478545][T23459] wg1 speed is unknown, defaulting to 1000 [ 1743.249077][T23475] wg1 speed is unknown, defaulting to 1000 [ 1743.355930][T23483] netlink: 208 bytes leftover after parsing attributes in process `syz.8.4902'. [ 1743.520894][T23485] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1743.567086][T23490] netlink: 'syz.7.4904': attribute type 15 has an invalid length. [ 1744.085576][T23493] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4905'. [ 1744.870494][T23495] wg1 speed is unknown, defaulting to 1000 [ 1746.150846][T23540] netlink: 'syz.1.4914': attribute type 13 has an invalid length. [ 1746.150870][T23540] netlink: 'syz.1.4914': attribute type 17 has an invalid length. [ 1746.415566][T23544] netlink: 'syz.9.4915': attribute type 13 has an invalid length. [ 1746.415590][T23544] netlink: 'syz.9.4915': attribute type 17 has an invalid length. [ 1747.017113][T23540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1747.989271][T23561] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4921'. [ 1748.914586][T23579] netlink: 'syz.8.4928': attribute type 2 has an invalid length. [ 1748.914754][T23579] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4928'. [ 1749.763241][T23599] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4932'. [ 1751.025386][T23624] netlink: 'syz.8.4941': attribute type 15 has an invalid length. [ 1752.095409][T23637] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1752.668624][T23641] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4945'. [ 1753.170623][T23665] netlink: 'syz.8.4955': attribute type 15 has an invalid length. [ 1753.913972][T23677] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1754.035092][T23681] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4959'. [ 1754.170784][T23682] wg1 speed is unknown, defaulting to 1000 [ 1754.656923][T23705] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4968'. [ 1755.044497][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4969'. [ 1755.044538][T23712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4969'. [ 1755.199480][T23716] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4972'. [ 1755.348840][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4974'. [ 1755.958068][T23739] netlink: 208 bytes leftover after parsing attributes in process `syz.7.4981'. [ 1756.013262][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4982'. [ 1756.013292][T23740] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4982'. [ 1756.056837][T23740] geneve2: entered promiscuous mode [ 1756.056866][T23740] geneve2: entered allmulticast mode [ 1756.204975][T23744] netlink: 'syz.7.4984': attribute type 4 has an invalid length. [ 1756.287033][T23747] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4985'. [ 1756.313458][T23749] siw: device registration error -23 [ 1756.555452][T23757] siw: device registration error -23 [ 1756.790633][T23761] netlink: 'syz.7.4990': attribute type 15 has an invalid length. [ 1757.814003][T23788] netlink: 'syz.0.4999': attribute type 15 has an invalid length. [ 1758.531246][T23803] batadv1: entered promiscuous mode [ 1759.488773][T23833] wg1 speed is unknown, defaulting to 1000 [ 1760.007148][T23842] netlink: 'syz.1.5016': attribute type 15 has an invalid length. [ 1760.191716][T23848] netlink: 'syz.0.5018': attribute type 15 has an invalid length. [ 1761.421922][T23858] __nla_validate_parse: 4 callbacks suppressed [ 1761.421941][T23858] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5020'. [ 1761.582645][T23854] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1761.582693][T23854] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1761.582716][T23854] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1761.989895][T23874] netlink: 'syz.1.5022': attribute type 16 has an invalid length. [ 1761.989923][T23874] netlink: 'syz.1.5022': attribute type 17 has an invalid length. [ 1762.034081][T23870] batadv1: entered promiscuous mode [ 1762.097253][T23871] Bluetooth: MGMT ver 1.23 [ 1762.314071][T23874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1763.365759][T23919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5035'. [ 1765.383224][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5046'. [ 1765.383251][T23948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5046'. [ 1765.587762][T23952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1765.618249][T23952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1765.935484][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1765.935529][T23966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1766.046200][T23968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1766.158772][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1766.248331][T23975] bond2 (unregistering): Released all slaves [ 1766.325422][T23957] wg1 speed is unknown, defaulting to 1000 [ 1766.454643][T23982] netlink: 'syz.0.5057': attribute type 12 has an invalid length. [ 1766.669761][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1766.669786][T23986] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5059'. [ 1766.871712][T23967] delete_channel: no stack [ 1767.619134][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5067'. [ 1767.619180][T24009] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5067'. [ 1767.808717][T24013] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5069'. [ 1767.844138][T23996] wg1 speed is unknown, defaulting to 1000 [ 1767.883129][T24013] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5069'. [ 1768.072935][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5071'. [ 1768.072965][T24021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5071'. [ 1768.092156][T24019] netlink: 'syz.1.5070': attribute type 16 has an invalid length. [ 1768.092185][T24019] netlink: 'syz.1.5070': attribute type 17 has an invalid length. [ 1768.236262][T24018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.238874][T24018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.354602][T24019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1768.828793][T24039] siw: device registration error -23 [ 1768.914869][T24037] batadv1: entered promiscuous mode [ 1768.933171][T24037] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1769.060264][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5081'. [ 1769.112224][T24048] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5083'. [ 1769.487674][T24059] bridge0: port 3(gretap0) entered disabled state [ 1769.529784][T24063] netlink: 'syz.8.5087': attribute type 16 has an invalid length. [ 1769.529813][T24063] netlink: 'syz.8.5087': attribute type 17 has an invalid length. [ 1769.611481][T24059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.670387][T24059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.945379][T24063] bridge0: port 3(gretap0) entered blocking state [ 1769.945559][T24063] bridge0: port 3(gretap0) entered forwarding state [ 1770.084026][T24063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1770.928933][T24097] wg1 speed is unknown, defaulting to 1000 [ 1771.113909][T15484] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1771.269021][T15484] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.269053][T15484] usb 9-1: config 0 has no interfaces? [ 1771.269086][T15484] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1771.269112][T15484] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.313924][T15484] usb 9-1: config 0 descriptor?? [ 1771.474519][T24125] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 1771.569712][T24125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1771.783863][T24137] __nla_validate_parse: 6 callbacks suppressed [ 1771.783888][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5110'. [ 1771.865798][T24139] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5110'. [ 1771.893903][T24130] bond2 (unregistering): Released all slaves [ 1772.134358][T24135] batadv1: entered promiscuous mode [ 1772.136044][T24135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1772.773436][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5118'. [ 1773.089626][T24176] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5123'. [ 1773.238441][T24175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1773.240904][T24176] bond2: entered promiscuous mode [ 1773.240931][T24176] bond2: entered allmulticast mode [ 1773.722894][T24199] netlink: 'syz.0.5131': attribute type 1 has an invalid length. [ 1773.785812][T24191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1773.884704][T24201] bond9 (unregistering): Released all slaves [ 1774.020281][T15215] usb 9-1: USB disconnect, device number 10 [ 1774.397338][T24216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5137'. [ 1774.431083][T24214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1774.461195][T24216] bond2: entered promiscuous mode [ 1774.461225][T24216] bond2: entered allmulticast mode [ 1774.527760][T24218] syzkaller0: entered promiscuous mode [ 1774.527791][T24218] syzkaller0: entered allmulticast mode [ 1775.114692][T11792] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1775.154116][T24240] netlink: 'syz.1.5145': attribute type 4 has an invalid length. [ 1775.265864][T11792] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.265896][T11792] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1775.265944][T11792] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1775.265971][T11792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.272095][T11792] usb 8-1: config 0 descriptor?? [ 1775.635703][T24256] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5151'. [ 1775.761771][T24253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1775.762561][T24256] bond2: entered promiscuous mode [ 1775.762587][T24256] bond2: entered allmulticast mode [ 1776.005797][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5155'. [ 1776.005856][T24267] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5155'. [ 1776.040647][T24266] syzkaller0: entered promiscuous mode [ 1776.040676][T24266] syzkaller0: entered allmulticast mode [ 1777.005510][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 1777.006025][T24302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5169'. [ 1777.040374][T24302] geneve2: entered promiscuous mode [ 1777.040402][T24302] geneve2: entered allmulticast mode [ 1779.966039][T15484] usb 8-1: USB disconnect, device number 12 [ 1780.085371][T24335] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5180'. [ 1780.169023][T24342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5182'. [ 1780.468412][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5184'. [ 1780.545552][T24347] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5184'. [ 1781.860032][T24370] netlink: 'syz.7.5192': attribute type 2 has an invalid length. [ 1781.860057][T24370] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5192'. [ 1782.227908][T24386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5196'. [ 1782.755452][T24383] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1782.827675][T24386] bond9: entered promiscuous mode [ 1782.827705][T24386] bond9: entered allmulticast mode [ 1783.486720][T24387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.542082][T24387] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1783.614593][T24388] dummy0: entered promiscuous mode [ 1783.614860][T24388] dummy0: entered allmulticast mode [ 1783.615645][T24388] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1784.000504][T24424] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1786.322338][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1787.194120][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1788.364787][T24532] netlink: 'syz.7.5227': attribute type 10 has an invalid length. [ 1788.364814][T24532] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5227'. [ 1788.373747][T24530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.805556][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5234'. [ 1789.325245][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5234'. [ 1792.436237][T24589] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5246'. [ 1793.462815][T24635] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1793.559779][T24631] wg1 speed is unknown, defaulting to 1000 [ 1793.893029][T24650] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1794.035280][T15975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1794.061945][T15975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1794.073953][T15975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1794.075676][T15975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1794.076416][T15975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1794.157257][T24658] netlink: 'syz.7.5258': attribute type 16 has an invalid length. [ 1794.157279][T24658] netlink: 'syz.7.5258': attribute type 17 has an invalid length. [ 1794.504202][T24658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1795.465778][T24671] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5260'. [ 1795.871554][T24654] wg1 speed is unknown, defaulting to 1000 [ 1796.183867][T16006] Bluetooth: hci1: command tx timeout [ 1796.887969][T24712] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5268'. [ 1796.963943][T24713] netlink: 'syz.1.5269': attribute type 1 has an invalid length. [ 1797.140082][T24713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1797.462466][T24709] wg1 speed is unknown, defaulting to 1000 [ 1797.639103][T24654] chnl_net:caif_netlink_parms(): no params data found [ 1798.253802][T16006] Bluetooth: hci1: command tx timeout [ 1798.376144][T24737] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5273'. [ 1799.000673][T24755] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5276'. [ 1799.138404][T24654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.138947][T24654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.139286][T24654] bridge_slave_0: entered allmulticast mode [ 1799.142501][T24654] bridge_slave_0: entered promiscuous mode [ 1799.195406][T24654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.195513][T24654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.195849][T24654] bridge_slave_1: entered allmulticast mode [ 1799.197997][T24654] bridge_slave_1: entered promiscuous mode [ 1799.287232][T24752] wg1 speed is unknown, defaulting to 1000 [ 1799.372631][T24654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.460208][T24654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.766447][T24654] team0: Port device team_slave_0 added [ 1799.838598][T24654] team0: Port device team_slave_1 added [ 1799.929381][T24654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.929400][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.929432][T24654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.983273][T24654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.983295][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.983328][T24654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.333988][T16006] Bluetooth: hci1: command tx timeout [ 1800.623253][T24654] hsr_slave_0: entered promiscuous mode [ 1800.629301][T24654] hsr_slave_1: entered promiscuous mode [ 1800.631942][T24654] debugfs: 'hsr0' already exists in 'hsr' [ 1800.632016][T24654] Cannot create hsr debugfs directory [ 1801.322361][T24654] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.322402][T24654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.322431][T24654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 1801.504688][T24782] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1801.631265][T24790] netlink: 'syz.8.5285': attribute type 1 has an invalid length. [ 1801.695638][T24654] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.695686][T24654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.697550][T24654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 1801.839470][T24793] bond3 (unregistering): Released all slaves [ 1801.870975][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.871083][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.110512][T24654] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1802.110552][T24654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.110582][T24654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 1802.263944][T24801] netlink: 'syz.8.5287': attribute type 10 has an invalid length. [ 1802.263972][T24801] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5287'. [ 1802.265399][T24800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1802.416470][T16006] Bluetooth: hci1: command tx timeout [ 1802.419491][T24654] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1802.419528][T24654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.419558][T24654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 1802.592049][T24807] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1802.675249][T24814] netlink: 'syz.7.5291': attribute type 15 has an invalid length. [ 1804.070723][T24654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1804.105619][T24840] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5298'. [ 1804.348643][T24842] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1804.351117][T24654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1804.401911][T24840] netlink: 'syz.8.5298': attribute type 2 has an invalid length. [ 1804.579991][T24840] !9: entered promiscuous mode [ 1804.599308][T24654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1804.718993][T24654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1805.397451][T24862] syz.1.5303 (24862) used greatest stack depth: 16512 bytes left [ 1805.412219][T24654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.474237][T24864] netlink: 'syz.8.5305': attribute type 10 has an invalid length. [ 1805.474263][T24864] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5305'. [ 1805.475331][T24863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1805.541203][T24654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.604622][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.604751][ T9414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.674688][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.674920][ T9414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.062774][T24654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.324934][T24654] veth0_vlan: entered promiscuous mode [ 1807.383063][T24654] veth1_vlan: entered promiscuous mode [ 1807.471227][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1807.626401][T24654] veth0_macvtap: entered promiscuous mode [ 1807.651938][T24654] veth1_macvtap: entered promiscuous mode [ 1807.844568][T24654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1807.897176][T24654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.024011][T14157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.050144][T14157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.050200][T14157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.050244][T14157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.716514][T24925] netlink: 'syz.9.5328': attribute type 15 has an invalid length. [ 1809.990794][T24943] netlink: 'syz.8.5331': attribute type 4 has an invalid length. [ 1810.053213][T22301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.053240][T22301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.388826][T24950] netlink: 'syz.9.5332': attribute type 1 has an invalid length. [ 1810.388853][T24950] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5332'. [ 1810.544755][T22652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.544780][T22652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.182766][T24979] netlink: 'syz.9.5337': attribute type 16 has an invalid length. [ 1811.182792][T24979] netlink: 'syz.9.5337': attribute type 17 has an invalid length. [ 1811.182840][T24976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.646682][T24979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1812.125618][T24998] netlink: 'syz.9.5342': attribute type 4 has an invalid length. [ 1812.346421][T25002] netlink: 'syz.0.5343': attribute type 1 has an invalid length. [ 1813.197112][T25030] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5355'. [ 1813.202682][T25028] netlink: 'syz.0.5356': attribute type 15 has an invalid length. [ 1813.248628][T25033] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5357'. [ 1813.948799][T25033] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1813.993440][T25033] bond1 (unregistering): Released all slaves [ 1814.184105][T15975] Bluetooth: hci5: command 0x0406 tx timeout [ 1814.414790][T25051] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5364'. [ 1814.519262][T25059] bridge0: port 3(gretap0) entered blocking state [ 1814.519383][T25059] bridge0: port 3(gretap0) entered disabled state [ 1814.519743][T25059] gretap0: entered allmulticast mode [ 1814.522586][T25059] gretap0: entered promiscuous mode [ 1814.523292][T25059] bridge0: port 3(gretap0) entered blocking state [ 1814.523444][T25059] bridge0: port 3(gretap0) entered forwarding state [ 1815.136474][T25071] tipc: Started in network mode [ 1815.136520][T25071] tipc: Node identity 4235544e692, cluster identity 4711 [ 1815.136899][T25071] tipc: Enabled bearer , priority 0 [ 1815.137766][T25076] syzkaller0: entered promiscuous mode [ 1815.137792][T25076] syzkaller0: entered allmulticast mode [ 1815.199930][T25071] tipc: Resetting bearer [ 1815.247875][T25078] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5374'. [ 1815.255734][T25065] tipc: Resetting bearer [ 1815.405736][T25080] Bluetooth: MGMT ver 1.23 [ 1815.437064][T25065] tipc: Disabling bearer [ 1816.609849][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5381'. [ 1816.678354][T25099] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5381'. [ 1816.879673][T25110] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5385'. [ 1816.917353][T25111] tipc: Started in network mode [ 1816.917391][T25111] tipc: Node identity 1a48289aa30f, cluster identity 4711 [ 1816.917608][T25111] tipc: Enabled bearer , priority 0 [ 1816.918670][T25111] syzkaller0: entered promiscuous mode [ 1816.918697][T25111] syzkaller0: entered allmulticast mode [ 1816.959258][T25111] tipc: Resetting bearer [ 1817.354423][T25108] tipc: Resetting bearer [ 1817.892841][T25108] tipc: Disabling bearer [ 1818.146542][T25142] fuse: Bad value for 'fd' [ 1818.254268][T25146] netlink: 'syz.1.5392': attribute type 4 has an invalid length. [ 1818.294062][T25148] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5393'. [ 1818.314448][T25149] netlink: 'syz.1.5392': attribute type 4 has an invalid length. [ 1820.366363][T25140] ip6tnl1: entered promiscuous mode [ 1820.366561][ T928] tipc: Node number set to 3108448410 [ 1820.522227][T25148] bridge0: port 3(gretap0) entered disabled state [ 1820.576390][T25153] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5394'. [ 1821.159077][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.176949][T25148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.194552][T25153] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5394'. [ 1822.195795][T14157] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.195970][T14157] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.196016][T14157] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.196058][T14157] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.340338][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5397'. [ 1822.367606][T25156] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5397'. [ 1823.785722][T25185] netlink: 'syz.7.5405': attribute type 15 has an invalid length. [ 1824.329093][T25190] netlink: 'syz.0.5406': attribute type 4 has an invalid length. [ 1824.393978][T25191] netlink: 'syz.0.5406': attribute type 4 has an invalid length. [ 1824.538040][T25195] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5409'. [ 1824.601997][T25195] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5409'. [ 1824.924276][T25208] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5414'. [ 1825.466963][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5418'. [ 1825.825654][T25221] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1825.960956][T25221] bond3 (unregistering): Released all slaves [ 1826.232221][T25228] netlink: 'syz.0.5419': attribute type 16 has an invalid length. [ 1826.232246][T25228] netlink: 'syz.0.5419': attribute type 17 has an invalid length. [ 1826.488690][T25225] bridge0: port 3(gretap0) entered disabled state [ 1826.526854][T25225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.547864][T25225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.814484][T25239] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5424'. [ 1826.822999][T25228] bridge0: port 3(gretap0) entered blocking state [ 1826.823185][T25228] bridge0: port 3(gretap0) entered forwarding state [ 1826.873332][T25240] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5424'. [ 1826.983405][T25228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1827.088654][T25246] fuse: Invalid rootmode [ 1827.621851][T25261] netlink: 'syz.7.5429': attribute type 12 has an invalid length. [ 1828.418693][T25277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1828.445501][T25277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1828.568602][T25280] fuse: Invalid rootmode [ 1829.587823][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5444'. [ 1829.595772][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5444'. [ 1829.675139][T25320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1829.675422][T25320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1829.744251][T25321] netlink: 'syz.0.5450': attribute type 1 has an invalid length. [ 1829.764365][T25321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5450'. [ 1829.770246][T25323] fuse: Bad value for 'rootmode' [ 1829.900248][T25327] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5452'. [ 1830.215589][T25338] netlink: 'syz.1.5453': attribute type 16 has an invalid length. [ 1830.215614][T25338] netlink: 'syz.1.5453': attribute type 17 has an invalid length. [ 1830.414064][T25338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1831.450364][T25352] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5461'. [ 1831.450575][T25352] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5461'. [ 1832.125128][T25370] netlink: 'syz.8.5465': attribute type 1 has an invalid length. [ 1832.247791][T25377] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5465'. [ 1832.319086][T25370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1832.342101][T25373] netlink: 'syz.7.5463': attribute type 12 has an invalid length. [ 1832.702492][T16495] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 1832.702537][T16495] ------------[ cut here ]------------ [ 1832.702547][T16495] lockdep bfs error:-1 [ 1832.702566][T16495] WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x20/0x40, CPU#1: kworker/u8:25/16495 [ 1832.702749][T16495] Modules linked in: [ 1832.702788][T16495] CPU: 1 UID: 0 PID: 16495 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1832.702818][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1832.702834][T16495] Workqueue: events_unbound linkwatch_event [ 1832.702991][T16495] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1832.703028][T16495] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 97 7d e6 02 89 c5 e8 10 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 30 89 8c 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 bb 74 2b 8d e8 05 [ 1832.703050][T16495] RSP: 0018:ffffc9000d5f7130 EFLAGS: 00010046 [ 1832.703070][T16495] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 34e3e7b6ecdba200 [ 1832.703087][T16495] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8f2ab810 [ 1832.703105][T16495] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1832.703120][T16495] R10: dffffc0000000000 R11: fffff52001abedd5 R12: ffffffff95cd6a98 [ 1832.703138][T16495] R13: ffffffff92be7070 R14: ffff88803db08000 R15: 000000000000001c [ 1832.703156][T16495] FS: 0000000000000000(0000) GS:ffff8881268fc000(0000) knlGS:0000000000000000 [ 1832.703177][T16495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1832.703194][T16495] CR2: 00007f785fcdb662 CR3: 000000001bbc0000 CR4: 00000000003526f0 [ 1832.703215][T16495] Call Trace: [ 1832.703225][T16495] [ 1832.703241][T16495] __lock_acquire+0x2550/0x2cf0 [ 1832.703278][T16495] ? __lock_acquire+0x146e/0x2cf0 [ 1832.703322][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.703353][T16495] lock_acquire+0x106/0x330 [ 1832.703384][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.703414][T16495] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1832.703445][T16495] _raw_spin_lock_nested+0x32/0x50 [ 1832.703537][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.703566][T16495] raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.703591][T16495] task_rq_lock+0xbc/0x460 [ 1832.703617][T16495] __schedule+0x165d/0x4f50 [ 1832.703674][T16495] ? arch_stack_walk+0x11b/0x150 [ 1832.703731][T16495] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.703782][T16495] ? check_path+0x21/0x40 [ 1832.703805][T16495] ? __pfx___schedule+0x10/0x10 [ 1832.703831][T16495] ? add_lock_to_list+0xc7/0x100 [ 1832.703853][T16495] ? lockdep_unlock+0x5d/0xd0 [ 1832.703880][T16495] ? __lock_acquire+0x146e/0x2cf0 [ 1832.703917][T16495] preempt_schedule_irq+0x4d/0xa0 [ 1832.703948][T16495] irqentry_exit+0x597/0x620 [ 1832.704007][T16495] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1832.704079][T16495] RIP: 0010:lock_acquire+0x221/0x330 [ 1832.704111][T16495] Code: ff ff ff e8 b1 0a 52 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 6b 64 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 68 dd 8c [ 1832.704132][T16495] RSP: 0018:ffffc9000d5f7700 EFLAGS: 00000286 [ 1832.704153][T16495] RAX: 34e3e7b6ecdba200 RBX: 0000000000000000 RCX: 0000000000000046 [ 1832.704169][T16495] RDX: 0000000000000004 RSI: ffffffff8d3963dd RDI: ffffffff8b65e700 [ 1832.704187][T16495] RBP: ffffffff88eca9e0 R08: 0000000000000002 R09: ffffffff952c8cb8 [ 1832.704204][T16495] R10: 000000009db04be6 R11: 00000000d2e5831e R12: 0000000000000000 [ 1832.704221][T16495] R13: ffff8880517fe230 R14: 0000000000000001 R15: 0000000000000246 [ 1832.704240][T16495] ? dev_reset_queue+0x110/0x1f0 [ 1832.704301][T16495] rt_spin_lock+0x83/0x400 [ 1832.704324][T16495] ? dev_reset_queue+0x110/0x1f0 [ 1832.704348][T16495] ? __pfx_rt_spin_lock+0x10/0x10 [ 1832.704371][T16495] ? rcu_is_watching+0x15/0xb0 [ 1832.704392][T16495] ? __local_bh_disable_ip+0x3c/0x420 [ 1832.704431][T16495] ? dev_reset_queue+0xe7/0x1f0 [ 1832.704453][T16495] ? dev_reset_queue+0xe7/0x1f0 [ 1832.704476][T16495] dev_reset_queue+0x110/0x1f0 [ 1832.704500][T16495] dev_deactivate_many+0x71f/0xd40 [ 1832.704526][T16495] ? dev_deactivate_many+0x255/0xd40 [ 1832.704552][T16495] dev_deactivate+0x120/0x1c0 [ 1832.704575][T16495] ? __pfx_dev_deactivate+0x10/0x10 [ 1832.704597][T16495] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1832.704625][T16495] ? rfc2863_policy+0x1c6/0x3d0 [ 1832.704653][T16495] linkwatch_do_dev+0x10f/0x170 [ 1832.704691][T16495] __linkwatch_run_queue+0x575/0x7f0 [ 1832.704722][T16495] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1832.704750][T16495] ? linkwatch_event+0xe/0x60 [ 1832.704777][T16495] ? process_scheduled_works+0xa0f/0x17a0 [ 1832.704806][T16495] linkwatch_event+0x4c/0x60 [ 1832.704833][T16495] process_scheduled_works+0xaec/0x17a0 [ 1832.704877][T16495] ? __pfx_process_scheduled_works+0x10/0x10 [ 1832.704904][T16495] ? do_raw_spin_lock+0x12b/0x2f0 [ 1832.704933][T16495] ? assign_work+0x3d3/0x440 [ 1832.704964][T16495] worker_thread+0x89f/0xd90 [ 1832.705000][T16495] ? __kthread_parkme+0x7a/0x1f0 [ 1832.705035][T16495] kthread+0x726/0x8b0 [ 1832.705070][T16495] ? __pfx_worker_thread+0x10/0x10 [ 1832.705103][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.705134][T16495] ? rt_spin_unlock+0x14f/0x200 [ 1832.705162][T16495] ? rt_spin_unlock+0x160/0x200 [ 1832.705186][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.705220][T16495] ret_from_fork+0x51b/0xa40 [ 1832.705248][T16495] ? __pfx_ret_from_fork+0x10/0x10 [ 1832.705274][T16495] ? __switch_to+0xc82/0x1410 [ 1832.705325][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.705359][T16495] ret_from_fork_asm+0x1a/0x30 [ 1832.705417][T16495] [ 1832.705435][T16495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1832.705453][T16495] CPU: 1 UID: 0 PID: 16495 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1832.705479][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1832.705496][T16495] Workqueue: events_unbound linkwatch_event [ 1832.705524][T16495] Call Trace: [ 1832.705533][T16495] [ 1832.705542][T16495] vpanic+0x1e0/0x670 [ 1832.705583][T16495] panic+0xc5/0xd0 [ 1832.705613][T16495] ? __pfx_panic+0x10/0x10 [ 1832.705649][T16495] ? ret_from_fork_asm+0x1a/0x30 [ 1832.705693][T16495] __warn+0x315/0x4a0 [ 1832.705723][T16495] ? print_bfs_bug+0x20/0x40 [ 1832.705757][T16495] ? print_bfs_bug+0x20/0x40 [ 1832.705791][T16495] __report_bug+0x29a/0x540 [ 1832.705860][T16495] ? print_bfs_bug+0x20/0x40 [ 1832.705895][T16495] ? __pfx___report_bug+0x10/0x10 [ 1832.705927][T16495] ? __pfx_vprintk_emit+0x10/0x10 [ 1832.705951][T16495] ? ret_from_fork_asm+0x1a/0x30 [ 1832.705983][T16495] ? ret_from_fork_asm+0x1a/0x30 [ 1832.706020][T16495] report_bug_entry+0x19a/0x290 [ 1832.706049][T16495] ? print_bfs_bug+0x22/0x40 [ 1832.706082][T16495] ? print_bfs_bug+0x27/0x40 [ 1832.706115][T16495] handle_bug+0xca/0x200 [ 1832.706177][T16495] exc_invalid_op+0x1a/0x50 [ 1832.706211][T16495] asm_exc_invalid_op+0x1a/0x20 [ 1832.706235][T16495] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1832.706269][T16495] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 97 7d e6 02 89 c5 e8 10 8a ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 30 89 8c 0d 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 bb 74 2b 8d e8 05 [ 1832.706291][T16495] RSP: 0018:ffffc9000d5f7130 EFLAGS: 00010046 [ 1832.706311][T16495] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 34e3e7b6ecdba200 [ 1832.706329][T16495] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8f2ab810 [ 1832.706346][T16495] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1832.706361][T16495] R10: dffffc0000000000 R11: fffff52001abedd5 R12: ffffffff95cd6a98 [ 1832.706380][T16495] R13: ffffffff92be7070 R14: ffff88803db08000 R15: 000000000000001c [ 1832.706410][T16495] __lock_acquire+0x2550/0x2cf0 [ 1832.706445][T16495] ? __lock_acquire+0x146e/0x2cf0 [ 1832.706488][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.706513][T16495] lock_acquire+0x106/0x330 [ 1832.706550][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.706581][T16495] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1832.706612][T16495] _raw_spin_lock_nested+0x32/0x50 [ 1832.706645][T16495] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.706670][T16495] raw_spin_rq_lock_nested+0x2a/0x140 [ 1832.706706][T16495] task_rq_lock+0xbc/0x460 [ 1832.706735][T16495] __schedule+0x165d/0x4f50 [ 1832.706761][T16495] ? arch_stack_walk+0x11b/0x150 [ 1832.706802][T16495] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.706834][T16495] ? check_path+0x21/0x40 [ 1832.706857][T16495] ? __pfx___schedule+0x10/0x10 [ 1832.706884][T16495] ? add_lock_to_list+0xc7/0x100 [ 1832.706906][T16495] ? lockdep_unlock+0x5d/0xd0 [ 1832.706934][T16495] ? __lock_acquire+0x146e/0x2cf0 [ 1832.706971][T16495] preempt_schedule_irq+0x4d/0xa0 [ 1832.707002][T16495] irqentry_exit+0x597/0x620 [ 1832.707038][T16495] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1832.707064][T16495] RIP: 0010:lock_acquire+0x221/0x330 [ 1832.707096][T16495] Code: ff ff ff e8 b1 0a 52 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 6b 64 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 68 dd 8c [ 1832.707116][T16495] RSP: 0018:ffffc9000d5f7700 EFLAGS: 00000286 [ 1832.707137][T16495] RAX: 34e3e7b6ecdba200 RBX: 0000000000000000 RCX: 0000000000000046 [ 1832.707154][T16495] RDX: 0000000000000004 RSI: ffffffff8d3963dd RDI: ffffffff8b65e700 [ 1832.707171][T16495] RBP: ffffffff88eca9e0 R08: 0000000000000002 R09: ffffffff952c8cb8 [ 1832.707189][T16495] R10: 000000009db04be6 R11: 00000000d2e5831e R12: 0000000000000000 [ 1832.707205][T16495] R13: ffff8880517fe230 R14: 0000000000000001 R15: 0000000000000246 [ 1832.707225][T16495] ? dev_reset_queue+0x110/0x1f0 [ 1832.707258][T16495] rt_spin_lock+0x83/0x400 [ 1832.707280][T16495] ? dev_reset_queue+0x110/0x1f0 [ 1832.707303][T16495] ? __pfx_rt_spin_lock+0x10/0x10 [ 1832.707325][T16495] ? rcu_is_watching+0x15/0xb0 [ 1832.707344][T16495] ? __local_bh_disable_ip+0x3c/0x420 [ 1832.707374][T16495] ? dev_reset_queue+0xe7/0x1f0 [ 1832.707394][T16495] ? dev_reset_queue+0xe7/0x1f0 [ 1832.707415][T16495] dev_reset_queue+0x110/0x1f0 [ 1832.707437][T16495] dev_deactivate_many+0x71f/0xd40 [ 1832.707462][T16495] ? dev_deactivate_many+0x255/0xd40 [ 1832.707488][T16495] dev_deactivate+0x120/0x1c0 [ 1832.707511][T16495] ? __pfx_dev_deactivate+0x10/0x10 [ 1832.707534][T16495] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1832.707561][T16495] ? rfc2863_policy+0x1c6/0x3d0 [ 1832.707588][T16495] linkwatch_do_dev+0x10f/0x170 [ 1832.707635][T16495] __linkwatch_run_queue+0x575/0x7f0 [ 1832.707666][T16495] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1832.707703][T16495] ? linkwatch_event+0xe/0x60 [ 1832.707731][T16495] ? process_scheduled_works+0xa0f/0x17a0 [ 1832.707760][T16495] linkwatch_event+0x4c/0x60 [ 1832.707787][T16495] process_scheduled_works+0xaec/0x17a0 [ 1832.707831][T16495] ? __pfx_process_scheduled_works+0x10/0x10 [ 1832.707856][T16495] ? do_raw_spin_lock+0x12b/0x2f0 [ 1832.707888][T16495] ? assign_work+0x3d3/0x440 [ 1832.707917][T16495] worker_thread+0x89f/0xd90 [ 1832.707953][T16495] ? __kthread_parkme+0x7a/0x1f0 [ 1832.707990][T16495] kthread+0x726/0x8b0 [ 1832.708024][T16495] ? __pfx_worker_thread+0x10/0x10 [ 1832.708054][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.708087][T16495] ? rt_spin_unlock+0x14f/0x200 [ 1832.708114][T16495] ? rt_spin_unlock+0x160/0x200 [ 1832.708139][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.708172][T16495] ret_from_fork+0x51b/0xa40 [ 1832.708201][T16495] ? __pfx_ret_from_fork+0x10/0x10 [ 1832.708227][T16495] ? __switch_to+0xc82/0x1410 [ 1832.708252][T16495] ? __pfx_kthread+0x10/0x10 [ 1832.708287][T16495] ret_from_fork_asm+0x1a/0x30 [ 1832.708333][T16495] [ 1832.708942][T16495] Kernel Offset: disabled