last executing test programs: 2m27.701657477s ago: executing program 2 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 2m27.521973876s ago: executing program 2 (id=56): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) 2m26.762949709s ago: executing program 2 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) 2m26.518238189s ago: executing program 2 (id=70): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x830, 0x370, 0x288, 0x160, 0x160, 0x0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x4, 0x8, 0x2, 0x0, 0x1, 0xe000, 0x6, 0x7, 0x8, 0x0, 0x7d, 0x2, 0x8, 0x8, 0xfff8, 0x3ff], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x2], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890) 2m26.398114964s ago: executing program 2 (id=71): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) 2m26.037028387s ago: executing program 2 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@gettaction={0xa8, 0x32, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc59}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x714b}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x4c, r5, 0x0, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1810000000000000840000000200000000800f00070000002000000000000000840000000000000089000900020000000d000000", @ANYRES32], 0x38, 0x2400c040}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x290, 0x498, 0x290, 0x3a8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x101}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r10 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r10, &(0x7f00000003c0)='ns/pid_for_children\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m10.769494771s ago: executing program 32 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@gettaction={0xa8, 0x32, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc59}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x714b}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x4c, r5, 0x0, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1810000000000000840000000200000000800f00070000002000000000000000840000000000000089000900020000000d000000", @ANYRES32], 0x38, 0x2400c040}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x290, 0x498, 0x290, 0x3a8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x101}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r10 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r10, &(0x7f00000003c0)='ns/pid_for_children\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m42.022328215s ago: executing program 4 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002b00)=@newtfilter={0x1034, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x1004, 0x2, [@TCA_BASIC_EMATCHES={0x1000, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xff0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xfec, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_DATA={0xfc4, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x1034}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1m40.890255141s ago: executing program 4 (id=475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r2, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4000800) close_range(r6, 0xffffffffffffffff, 0x0) 1m36.564389321s ago: executing program 4 (id=497): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m36.280443968s ago: executing program 4 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7", 0x27}], 0x2}}], 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m34.807886343s ago: executing program 4 (id=501): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x14) 1m34.281515736s ago: executing program 4 (id=503): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 1m18.684859989s ago: executing program 33 (id=503): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 2.662734847s ago: executing program 0 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000035000100fcff0700040000000100000008000180040010800c0002000002000000000000100003800c00478008005c00", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.545823917s ago: executing program 5 (id=966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.419696963s ago: executing program 0 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 2.300083968s ago: executing program 5 (id=974): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x96) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2.24000658s ago: executing program 0 (id=975): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x84, 0x3f, 0x10, 0x70bd2c, 0x25dfdbfc, {0x16}, [@nested={0x69, 0x17, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xc0}, @nested={0x4, 0x11b}, @typed={0x5, 0x75, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x121, 0x0, 0x0, @ipv6=@remote}, @generic="49dbd1d2a7a2e0e8c7f1da314ae0f14be162bfe2f4539844cbd98f97b4ced1e2d596d1956b0b43f7ec29629aa76b02ea515470768182338781"]}, @typed={0x4, 0x39}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20004800) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x114, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2685}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x44054) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="5c00000013006bcc9e00005c6e17aa31186b876c1d0000007ea60864161af36510002b0006000300300017d36460bc24eae543e52d251e6182fffffffff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f6985300000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0xa01, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 2.125844901s ago: executing program 0 (id=977): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='iocharset=cp857,fmask=00000000000000000064347,errors=continue,iocharset=iso8859-7,fmask=00000000000000000000005,umask=00777777777777777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x12, 0x905, 0x70bd28, 0x25dfdbff, {0x1d, 0xd, 0xb, 0x0, {0x4e22, 0x4e26, [0xfffffffc, 0x923, 0x80000001, 0x6], [0x401, 0x6, 0x3, 0x3], 0x0, [0x10000, 0x1]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "073514"}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x9}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x400, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setregid(0x0, 0xee01) 1.589758863s ago: executing program 6 (id=986): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xf, 0x2}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x24040881) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.366125782s ago: executing program 6 (id=991): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) read$FUSE(r0, 0x0, 0x0) 1.360488299s ago: executing program 1 (id=992): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 1.275347029s ago: executing program 6 (id=993): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe4b0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x68040) 1.257357205s ago: executing program 1 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000300), &(0x7f00000004c0)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.256702432s ago: executing program 5 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb0}}, 0x40000) 1.155980686s ago: executing program 1 (id=996): socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.094577208s ago: executing program 6 (id=997): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004005) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x7f, 0x9, 0x2, 0x9}, {0xfe, 0x0, 0xa, 0x4, 0xf338, 0x59}, 0x4, 0x7, 0x6c5}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x4) 1.093480194s ago: executing program 0 (id=998): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="08200400000004001400350076657468315f766c616e"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x30008010) 1.021475352s ago: executing program 5 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 952.804349ms ago: executing program 1 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 829.277996ms ago: executing program 5 (id=1002): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xf, 0x2}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x24040881) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 742.399758ms ago: executing program 5 (id=1003): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000680), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(r5) socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x80, 0x8) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 742.136009ms ago: executing program 6 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 575.842119ms ago: executing program 3 (id=1005): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={@cgroup, 0xffffffffffffffff, 0x11, 0x4029}, 0x20) 489.724191ms ago: executing program 3 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000300), &(0x7f00000004c0)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 471.831342ms ago: executing program 1 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000003c0)) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) 414.546879ms ago: executing program 0 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x29, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9a276b0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x2e}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 338.771575ms ago: executing program 6 (id=1009): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x4, 0x32, 0x5, 0xa, 0x0, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0xb, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0xc010) sendto$packet(r3, &(0x7f00000001c0)="bad33075218151db00316f3a277f9532867abc16", 0x14, 0x22008001, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0xda, 0x6, @multicast}, 0x14) 326.734036ms ago: executing program 3 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000600000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2b}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000010201020000000000000000000000060900060073797a30000000000800084000000002bc0001801400018008000100ac1414bb080002007f0000012c00018014000300fc00000000000000000000000000000114000400fc000000000000000000000000000000060003400004000014000180080001007f00000108000200e00000020c00518005400100110000001400018008000100"], 0x128}}, 0x800) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f00090002000000080000004001058001000000f5de00000500ffff01fdffff050000000300010001000000010000000200060003000000090000000700ff0f02000000ff07000001000100000000007f00000004000800020000000b0000000000070002000000eb5282ec03000000080000000900ffff01000000faffffff0500000003000000010000000100010001000000000000000700820001000000010000000900010402000000b45a00000300060002000000090000000f0000080100001e0300000009000200010000000f00000001000100000000000500000026002a0000000000824300000200030002000000040000000200020002000000090000000400010000000000090000000900400003000000020000000500830001000000060000000800090002000000018000005100060000000000f7ffffff01000300000000000100000075"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 278.474555ms ago: executing program 1 (id=1011): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4b0, 0xd46, 0x0, 0x28436e62, 0x4d09, 0x0, 0xffffff59, 0xcb, 0xfffffff0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x8169c27e2093e573) 171.571437ms ago: executing program 3 (id=1012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "9c979b32261fba"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 90.748344ms ago: executing program 3 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8000) 0s ago: executing program 3 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 66.037414][ T5828] cgroup: Unknown subsys name 'net' [ 66.206862][ T5828] cgroup: Unknown subsys name 'cpuset' [ 66.215212][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.580970][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.818344][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.836973][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.861129][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.869197][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.876743][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.881878][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.885298][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.895671][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.903503][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.907946][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.913731][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.928553][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.929767][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.943504][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.945866][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.952354][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.958545][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.966610][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.973947][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.982016][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.989208][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.995593][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.000565][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.016261][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.026776][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.578967][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 70.729141][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 70.823835][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.839304][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 70.952255][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 70.964742][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.972205][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.979807][ T5849] bridge_slave_0: entered allmulticast mode [ 70.987270][ T5849] bridge_slave_0: entered promiscuous mode [ 71.030393][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.037926][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.045411][ T5849] bridge_slave_1: entered allmulticast mode [ 71.053080][ T5849] bridge_slave_1: entered promiscuous mode [ 71.120044][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.130348][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.138091][ T5841] bridge_slave_0: entered allmulticast mode [ 71.146338][ T5841] bridge_slave_0: entered promiscuous mode [ 71.203555][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.211659][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.219106][ T5841] bridge_slave_1: entered allmulticast mode [ 71.226669][ T5841] bridge_slave_1: entered promiscuous mode [ 71.257368][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.271913][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280319][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.326299][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.349439][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356823][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.365803][ T5840] bridge_slave_0: entered allmulticast mode [ 71.373192][ T5840] bridge_slave_0: entered promiscuous mode [ 71.380846][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.388291][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.396937][ T5842] bridge_slave_0: entered allmulticast mode [ 71.404654][ T5842] bridge_slave_0: entered promiscuous mode [ 71.416658][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.442436][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.449900][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.457521][ T5840] bridge_slave_1: entered allmulticast mode [ 71.465190][ T5840] bridge_slave_1: entered promiscuous mode [ 71.472587][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.480051][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.487678][ T5842] bridge_slave_1: entered allmulticast mode [ 71.495193][ T5842] bridge_slave_1: entered promiscuous mode [ 71.507439][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.531999][ T5849] team0: Port device team_slave_0 added [ 71.587691][ T5849] team0: Port device team_slave_1 added [ 71.625800][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.633673][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.640988][ T5843] bridge_slave_0: entered allmulticast mode [ 71.648822][ T5843] bridge_slave_0: entered promiscuous mode [ 71.673148][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.687939][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.699994][ T5841] team0: Port device team_slave_0 added [ 71.706339][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.714217][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.721454][ T5843] bridge_slave_1: entered allmulticast mode [ 71.729419][ T5843] bridge_slave_1: entered promiscuous mode [ 71.749961][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.765019][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.777387][ T5841] team0: Port device team_slave_1 added [ 71.796373][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.803349][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.834077][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.891814][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.899102][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.925483][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.976916][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.997409][ T5840] team0: Port device team_slave_0 added [ 72.006415][ T5842] team0: Port device team_slave_0 added [ 72.014184][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.021163][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.047594][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.061888][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.064847][ T5844] Bluetooth: hci0: command tx timeout [ 72.077615][ T5165] Bluetooth: hci3: command tx timeout [ 72.083792][ T5860] Bluetooth: hci2: command tx timeout [ 72.083897][ T5861] Bluetooth: hci1: command tx timeout [ 72.089883][ T5860] Bluetooth: hci4: command tx timeout [ 72.121408][ T5840] team0: Port device team_slave_1 added [ 72.129751][ T5842] team0: Port device team_slave_1 added [ 72.147259][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.154655][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.181183][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.205521][ T5843] team0: Port device team_slave_0 added [ 72.254331][ T5843] team0: Port device team_slave_1 added [ 72.272293][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.279709][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.305990][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.319520][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.326572][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.352772][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.369524][ T5849] hsr_slave_0: entered promiscuous mode [ 72.376573][ T5849] hsr_slave_1: entered promiscuous mode [ 72.394720][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.401681][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.427707][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.473035][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.480361][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.507004][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.532083][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.539115][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.567771][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.618712][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.626785][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.653484][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.672047][ T5841] hsr_slave_0: entered promiscuous mode [ 72.680426][ T5841] hsr_slave_1: entered promiscuous mode [ 72.687788][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 72.694138][ T5841] Cannot create hsr debugfs directory [ 72.744277][ T5842] hsr_slave_0: entered promiscuous mode [ 72.751257][ T5842] hsr_slave_1: entered promiscuous mode [ 72.758418][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 72.764527][ T5842] Cannot create hsr debugfs directory [ 72.860232][ T5840] hsr_slave_0: entered promiscuous mode [ 72.869537][ T5840] hsr_slave_1: entered promiscuous mode [ 72.876591][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.882773][ T5840] Cannot create hsr debugfs directory [ 72.949646][ T5843] hsr_slave_0: entered promiscuous mode [ 72.958141][ T5843] hsr_slave_1: entered promiscuous mode [ 72.965549][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.971491][ T5843] Cannot create hsr debugfs directory [ 73.501432][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.523456][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.535514][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.558286][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.632569][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.650537][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.661910][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.679222][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.802054][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.815943][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.840803][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.852760][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.950362][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.977902][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.990639][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.007678][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.044986][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.145380][ T5844] Bluetooth: hci3: command tx timeout [ 74.145681][ T5851] Bluetooth: hci4: command tx timeout [ 74.151371][ T5844] Bluetooth: hci0: command tx timeout [ 74.156966][ T5861] Bluetooth: hci2: command tx timeout [ 74.162769][ T5860] Bluetooth: hci1: command tx timeout [ 74.192818][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.206305][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.217990][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.241105][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.248440][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.307330][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.315220][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.358431][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.365595][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.382195][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477725][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.531968][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.539172][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.587811][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.595052][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.619448][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.680137][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.727315][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.760569][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.767759][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.821968][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.832064][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.839269][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.891641][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.898817][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.917396][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.930546][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.967029][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.974406][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.081211][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.141563][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.148804][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.200889][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.208134][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.246644][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.533192][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.699542][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.722957][ T5849] veth0_vlan: entered promiscuous mode [ 75.812151][ T5849] veth1_vlan: entered promiscuous mode [ 75.857483][ T5841] veth0_vlan: entered promiscuous mode [ 75.876960][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.932056][ T5841] veth1_vlan: entered promiscuous mode [ 75.977057][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.992798][ T5842] veth0_vlan: entered promiscuous mode [ 76.008597][ T5849] veth0_macvtap: entered promiscuous mode [ 76.022829][ T5849] veth1_macvtap: entered promiscuous mode [ 76.075562][ T5842] veth1_vlan: entered promiscuous mode [ 76.104361][ T5840] veth0_vlan: entered promiscuous mode [ 76.123311][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.140161][ T5841] veth0_macvtap: entered promiscuous mode [ 76.160314][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.201069][ T5841] veth1_macvtap: entered promiscuous mode [ 76.212340][ T5840] veth1_vlan: entered promiscuous mode [ 76.221857][ T3544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224321][ T5844] Bluetooth: hci2: command tx timeout [ 76.231593][ T5860] Bluetooth: hci4: command tx timeout [ 76.236240][ T5861] Bluetooth: hci3: command tx timeout [ 76.241595][ T5860] Bluetooth: hci0: command tx timeout [ 76.247014][ T5851] Bluetooth: hci1: command tx timeout [ 76.269426][ T5843] veth0_vlan: entered promiscuous mode [ 76.278559][ T3497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.288652][ T3497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.318759][ T3497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368039][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.381645][ T5843] veth1_vlan: entered promiscuous mode [ 76.416443][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.437442][ T5842] veth0_macvtap: entered promiscuous mode [ 76.458125][ T96] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.467952][ T96] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.504394][ T96] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.535065][ T96] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.559116][ T5842] veth1_macvtap: entered promiscuous mode [ 76.729123][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.742991][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.752904][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.761582][ T5840] veth0_macvtap: entered promiscuous mode [ 76.787579][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.796304][ T5840] veth1_macvtap: entered promiscuous mode [ 76.841369][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.850416][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.866559][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.875443][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.889158][ T5843] veth0_macvtap: entered promiscuous mode [ 76.909429][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.918969][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.939096][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.984989][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.006469][ T5843] veth1_macvtap: entered promiscuous mode [ 77.018151][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.032764][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.046899][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.151904][ T757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162885][ T757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.195800][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.209511][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.221893][ T757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.302878][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.310708][ T3497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.379596][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.391807][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.422533][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.603289][ T5977] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.629368][ T1014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.641845][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653408][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.664396][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.690414][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.768081][ T1014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.789573][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.816793][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.852963][ T5983] Cannot find add_set index 1 as target [ 78.000802][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.034836][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.142823][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.173447][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.290199][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.304218][ T5860] Bluetooth: hci3: command tx timeout [ 78.307333][ T5165] Bluetooth: hci4: command tx timeout [ 78.309671][ T5860] Bluetooth: hci0: command tx timeout [ 78.315215][ T5844] Bluetooth: hci1: command tx timeout [ 78.325964][ T5861] Bluetooth: hci2: command tx timeout [ 78.334463][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.404183][ T6000] Zero length message leads to an empty skb [ 78.479711][ T6003] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 78.550230][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.503138][ T6032] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 79.506651][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 79.609605][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 79.687860][ T6042] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 79.794819][ T6047] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 79.854531][ T6050] Bluetooth: MGMT ver 1.23 [ 79.886513][ T6047] vlan2: entered promiscuous mode [ 79.905228][ T6047] dummy0: entered promiscuous mode [ 79.931660][ T6053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'. [ 79.971521][ T6047] vlan2: entered allmulticast mode [ 79.986313][ T6047] dummy0: entered allmulticast mode [ 80.141990][ T6066] syzkaller0: entered promiscuous mode [ 80.163252][ T6066] syzkaller0: entered allmulticast mode [ 80.218875][ T6058] tipc: Started in network mode [ 80.237243][ T6058] tipc: Node identity 96ebf65f8f57, cluster identity 4711 [ 80.247766][ T6058] tipc: Enabled bearer , priority 0 [ 80.267950][ T6054] tipc: Resetting bearer [ 80.365511][ T6054] tipc: Disabling bearer [ 80.494012][ T6078] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 80.923052][ T6090] syzkaller0: entered promiscuous mode [ 80.935690][ T6090] syzkaller0: entered allmulticast mode [ 81.000436][ T6095] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 81.171105][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.47'. [ 81.437807][ T6106] netlink: 'syz.2.50': attribute type 11 has an invalid length. [ 81.446596][ T6106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50'. [ 81.518628][ T6109] syzkaller0: entered promiscuous mode [ 81.528421][ T6109] syzkaller0: entered allmulticast mode [ 81.565844][ T47] cfg80211: failed to load regulatory.db [ 81.599636][ T6113] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 81.609041][ T6109] tipc: Started in network mode [ 81.629158][ T6109] tipc: Node identity ae8909bd7a22, cluster identity 4711 [ 81.646427][ T6109] tipc: Enabled bearer , priority 0 [ 81.678723][ T6108] tipc: Resetting bearer [ 81.691383][ T6116] netlink: 200 bytes leftover after parsing attributes in process `syz.0.54'. [ 81.725385][ T6108] tipc: Disabling bearer [ 81.760740][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 82.541904][ T6153] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 82.635326][ T6149] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.757807][ T6157] syzkaller0: entered promiscuous mode [ 82.766721][ T6157] syzkaller0: entered allmulticast mode [ 83.575288][ T6177] Cannot find add_set index 0 as target [ 83.712611][ T6182] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 83.780873][ T6186] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 83.810343][ T6188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 83.825723][ T6182] vlan2: entered promiscuous mode [ 83.831134][ T6182] veth0_to_bond: entered promiscuous mode [ 83.846020][ T6182] vlan2: entered allmulticast mode [ 83.860609][ T6182] veth0_to_bond: entered allmulticast mode [ 83.875224][ T6191] syz.4.80 uses obsolete (PF_INET,SOCK_PACKET) [ 84.115430][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 84.367320][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 84.391291][ T6200] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 84.667776][ T6218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.91'. [ 84.720053][ T6220] tipc: Enabled bearer , priority 0 [ 84.728393][ T6220] syzkaller0: entered promiscuous mode [ 84.734093][ T6220] syzkaller0: entered allmulticast mode [ 84.756430][ T6220] tipc: Resetting bearer [ 84.768710][ T6219] tipc: Resetting bearer [ 84.787139][ T6219] tipc: Disabling bearer [ 84.829976][ T6222] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 84.841282][ T6222] netlink: 760 bytes leftover after parsing attributes in process `syz.1.93'. [ 84.927497][ T6226] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 84.949524][ T6226] vlan2: entered promiscuous mode [ 84.954893][ T6226] vlan2: entered allmulticast mode [ 84.960157][ T6226] hsr_slave_0: entered allmulticast mode [ 84.976209][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'. [ 85.013000][ T6228] netlink: 148 bytes leftover after parsing attributes in process `syz.4.96'. [ 85.181066][ T6232] tmpfs: Unexpected value for 'inode32' [ 85.268807][ T6238] block nbd0: not configured, cannot reconfigure [ 85.287583][ T6236] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 85.497329][ T808] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.238188][ T808] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 86.275035][ T808] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.295273][ T808] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 86.312644][ T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.326588][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.342086][ T808] usb 5-1: SerialNumber: syz [ 86.588288][ T808] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 86.596868][ T808] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 86.617866][ T808] usb 5-1: USB disconnect, device number 2 [ 86.646596][ T6265] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.756325][ T6286] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 87.785994][ T6286] netlink: 1820 bytes leftover after parsing attributes in process `syz.1.122'. [ 87.911732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.920706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.936535][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 88.116742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.321640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.561834][ T6291] syz.0.123 (6291) used greatest stack depth: 17408 bytes left [ 88.665046][ T6300] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 88.709936][ T6300] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 88.733484][ T6297] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 88.758875][ T6300] warning: `syz.3.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.800277][ T6328] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 89.811294][ T6328] netlink: 1820 bytes leftover after parsing attributes in process `syz.3.135'. [ 90.011335][ T6336] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 90.204292][ T6343] syzkaller1: entered promiscuous mode [ 90.219993][ T6343] syzkaller1: entered allmulticast mode [ 90.290164][ T6346] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 90.310356][ T6344] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 90.789140][ T6365] netlink: 'syz.0.148': attribute type 1 has an invalid length. [ 90.814275][ T6365] netlink: 1820 bytes leftover after parsing attributes in process `syz.0.148'. [ 91.400580][ T6380] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 91.711114][ T6386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.811851][ T6387] syzkaller1: entered promiscuous mode [ 91.821178][ T6387] syzkaller1: entered allmulticast mode [ 91.851060][ T6393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 91.953520][ T6400] syzkaller0: entered promiscuous mode [ 91.960079][ T6400] syzkaller0: entered allmulticast mode [ 92.319894][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 92.541474][ T6421] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 92.697355][ T6429] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.190965][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.173'. [ 93.246222][ T6447] syzkaller1: entered promiscuous mode [ 93.259041][ T6447] syzkaller1: entered allmulticast mode [ 93.350315][ T6450] syzkaller0: entered promiscuous mode [ 93.355944][ T6450] syzkaller0: entered allmulticast mode [ 93.545450][ T6457] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.636971][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 94.152602][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.185'. [ 94.420351][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.429589][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.768385][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.807784][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.202740][ T6495] syzkaller1: entered promiscuous mode [ 95.210896][ T6495] syzkaller1: entered allmulticast mode [ 95.228658][ T3544] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.256173][ T3544] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.379634][ T3544] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.398255][ T3544] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.621936][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 96.429315][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 96.461200][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 96.505273][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 97.103745][ T808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.110154][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 97.285569][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 97.305233][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.318351][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.335748][ T808] usb 5-1: config 0 descriptor?? [ 97.357292][ T808] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 97.749847][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.769359][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.785942][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 98.428839][ T6688] tipc: Enabling of bearer rejected, failed to enable media [ 98.529929][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 98.640205][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.651606][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.662351][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.672014][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.696034][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.909603][ T6692] chnl_net:caif_netlink_parms(): no params data found [ 99.041819][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.049539][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.057361][ T6692] bridge_slave_0: entered allmulticast mode [ 99.066389][ T6692] bridge_slave_0: entered promiscuous mode [ 99.076492][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.084384][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.091895][ T6692] bridge_slave_1: entered allmulticast mode [ 99.100791][ T6692] bridge_slave_1: entered promiscuous mode [ 99.325664][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 99.333756][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.350271][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.454889][ T6692] team0: Port device team_slave_0 added [ 99.466848][ T6692] team0: Port device team_slave_1 added [ 99.529397][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.537715][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.565940][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.619275][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.638031][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.700398][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.824316][ T6718] tipc: Enabled bearer , priority 0 [ 99.840090][ T6692] hsr_slave_0: entered promiscuous mode [ 99.868227][ T6692] hsr_slave_1: entered promiscuous mode [ 99.878793][ T9] usb 5-1: USB disconnect, device number 3 [ 99.893542][ T6692] debugfs: 'hsr0' already exists in 'hsr' [ 99.922411][ T6692] Cannot create hsr debugfs directory [ 99.942383][ T6720] syzkaller0: entered promiscuous mode [ 99.956527][ T6720] syzkaller0: entered allmulticast mode [ 100.073023][ T6718] tipc: Resetting bearer [ 100.094840][ T6717] tipc: Resetting bearer [ 100.165290][ T6717] tipc: Disabling bearer [ 100.572330][ T6743] syzkaller0: entered promiscuous mode [ 100.596329][ T6743] syzkaller0: entered allmulticast mode [ 100.784229][ T5861] Bluetooth: hci5: command tx timeout [ 100.888977][ T6760] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 100.894308][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.916892][ T6760] tipc: Failed to remove unknown binding: 66,0,0/0:253370213/253370216 [ 100.927530][ T6760] tipc: Failed to remove unknown binding: 66,0,0/0:253370213/253370215 [ 100.942205][ T6760] tipc: Failed to remove unknown binding: 66,0,0/0:253370213/253370216 [ 100.957682][ T6760] tipc: Failed to remove unknown binding: 66,0,0/0:253370213/253370215 [ 100.984511][ T6692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.010231][ T6692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.059519][ T6692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.073361][ T6692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.084190][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 101.098161][ T5853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.108957][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.110377][ T6764] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 101.125840][ T6764] __nla_validate_parse: 6 callbacks suppressed [ 101.125855][ T6764] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.256'. [ 101.127480][ T5853] usb 5-1: config 0 descriptor?? [ 101.175916][ T5853] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 101.253502][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 101.325918][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.364219][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.385419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.392702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.431985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.439271][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.994585][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 102.001548][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.522700][ T6692] veth0_vlan: entered promiscuous mode [ 102.541348][ T6692] veth1_vlan: entered promiscuous mode [ 102.728945][ T6692] veth0_macvtap: entered promiscuous mode [ 102.743191][ T6692] veth1_macvtap: entered promiscuous mode [ 102.800570][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.891232][ T5861] Bluetooth: hci5: command tx timeout [ 103.302305][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.431380][ T1014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461317][ T1014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.477242][ T1014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.488933][ T1014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.806131][ T5925] usb 5-1: USB disconnect, device number 4 [ 104.481936][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.490956][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.691303][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.714105][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.943688][ T5861] Bluetooth: hci5: command tx timeout [ 105.601865][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 105.614740][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 105.661705][ T6871] ip6gretap0: entered promiscuous mode [ 105.673094][ T6871] syz_tun: entered promiscuous mode [ 105.700400][ T6871] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 105.711721][ T6871] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 106.959218][ T6903] syzkaller0: entered promiscuous mode [ 106.965170][ T6903] syzkaller0: entered allmulticast mode [ 107.026910][ T5861] Bluetooth: hci5: command tx timeout [ 107.174163][ T6913] netlink: 'syz.3.307': attribute type 4 has an invalid length. [ 107.221080][ T6915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.557325][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.313'. [ 107.615147][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.313'. [ 108.474352][ T6946] syzkaller0: entered promiscuous mode [ 108.492316][ T6946] syzkaller0: entered allmulticast mode [ 108.840086][ T6962] syzkaller0: entered promiscuous mode [ 108.860334][ T6962] syzkaller0: entered allmulticast mode [ 109.263275][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 110.274964][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 110.582599][ T7012] syzkaller0: entered promiscuous mode [ 110.588467][ T7012] syzkaller0: entered allmulticast mode [ 110.755838][ T7020] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 110.790267][ T7020] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.342'. [ 110.980495][ T7026] netlink: 'syz.1.346': attribute type 14 has an invalid length. [ 111.052466][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 111.299998][ T7027] tipc: Started in network mode [ 111.484403][ T7027] tipc: Node identity 96c2f0a7f121, cluster identity 4711 [ 111.491745][ T7027] tipc: Enabled bearer , priority 0 [ 111.535347][ T7030] syzkaller0: entered promiscuous mode [ 111.541226][ T7026] netlink: 'syz.1.346': attribute type 14 has an invalid length. [ 111.555027][ T7030] syzkaller0: entered allmulticast mode [ 111.583542][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 111.621248][ T7035] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 111.633813][ T7035] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.347'. [ 111.640352][ T3497] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.678681][ T3497] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.694149][ T7025] tipc: Resetting bearer [ 111.755411][ T7025] tipc: Disabling bearer [ 111.785326][ T3497] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.811749][ T3497] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.034477][ T7047] syzkaller0: entered promiscuous mode [ 112.042023][ T7047] syzkaller0: entered allmulticast mode [ 112.058439][ T7055] syzkaller0: entered promiscuous mode [ 112.067501][ T7055] syzkaller0: entered allmulticast mode [ 112.191366][ T7061] syzkaller0: entered promiscuous mode [ 112.198968][ T7061] syzkaller0: entered allmulticast mode [ 112.209926][ T7055] tipc: Enabled bearer , priority 0 [ 112.299935][ T7052] tipc: Resetting bearer [ 112.360859][ T7052] tipc: Disabling bearer [ 112.503971][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 112.511532][ T7064] syzkaller0: entered promiscuous mode [ 112.525282][ T7064] syzkaller0: entered allmulticast mode [ 113.287831][ T7085] tipc: Enabled bearer , priority 0 [ 113.310211][ T7085] syzkaller0: entered promiscuous mode [ 113.327011][ T7085] syzkaller0: entered allmulticast mode [ 113.383688][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.396883][ T7085] tipc: Resetting bearer [ 113.411270][ T7090] syzkaller0: entered promiscuous mode [ 113.429314][ T7090] syzkaller0: entered allmulticast mode [ 113.445941][ T7084] tipc: Resetting bearer [ 113.477066][ T7084] tipc: Disabling bearer [ 113.566633][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.583039][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.598123][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.624976][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.683743][ T47] usb 4-1: config 0 descriptor?? [ 113.738506][ T7098] syzkaller0: entered promiscuous mode [ 113.748085][ T7098] syzkaller0: entered allmulticast mode [ 113.753943][ T47] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 113.793877][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.373'. [ 114.862759][ T7120] tipc: Enabled bearer , priority 0 [ 114.886148][ T7120] syzkaller0: entered promiscuous mode [ 114.891662][ T7120] syzkaller0: entered allmulticast mode [ 114.950887][ T7120] tipc: Resetting bearer [ 114.981749][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 114.998323][ T7117] tipc: Resetting bearer [ 115.018869][ T7117] tipc: Disabling bearer [ 115.234653][ T7134] syzkaller0: entered promiscuous mode [ 115.241163][ T7138] loop5: detected capacity change from 0 to 1024 [ 115.247365][ T7134] syzkaller0: entered allmulticast mode [ 115.270630][ T7138] ======================================================= [ 115.270630][ T7138] WARNING: The mand mount option has been deprecated and [ 115.270630][ T7138] and is ignored by this kernel. Remove the mand [ 115.270630][ T7138] option from the mount to silence this warning. [ 115.270630][ T7138] ======================================================= [ 115.361705][ T7138] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.380754][ T7143] lo speed is unknown, defaulting to 1000 [ 115.389700][ T7143] lo speed is unknown, defaulting to 1000 [ 115.397710][ T7138] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 115.401890][ T7143] lo speed is unknown, defaulting to 1000 [ 115.418308][ T7143] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.438660][ T7143] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.455916][ T7143] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.472471][ T7143] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.472982][ T7138] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.490733][ T7143] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.511605][ T7138] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 115.528054][ T7138] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 115.544104][ T7138] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 115.564777][ T7147] gretap0: entered promiscuous mode [ 115.596976][ T7138] EXT4-fs (loop5): 1 truncate cleaned up [ 115.604155][ T7147] gretap0: left promiscuous mode [ 115.614748][ T7138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.678453][ T7143] lo speed is unknown, defaulting to 1000 [ 115.693245][ T7143] lo speed is unknown, defaulting to 1000 [ 115.705849][ T7143] lo speed is unknown, defaulting to 1000 [ 115.716846][ T7143] lo speed is unknown, defaulting to 1000 [ 115.728091][ T7143] lo speed is unknown, defaulting to 1000 [ 115.736788][ T7143] lo speed is unknown, defaulting to 1000 [ 115.787014][ T7146] smbdirect: ib_dev[syz2] removed [ 116.142704][ T808] usb 4-1: USB disconnect, device number 2 [ 116.373305][ T7164] syzkaller0: entered promiscuous mode [ 116.392091][ T7164] syzkaller0: entered allmulticast mode [ 116.466619][ T7169] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 116.593372][ T7169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.707815][ T7175] syzkaller0: entered promiscuous mode [ 116.722652][ T7175] syzkaller0: entered allmulticast mode [ 116.970656][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.978445][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.069246][ T7138] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 117.313029][ T6692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.338146][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.388747][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.644442][ T7177] vlan2: left promiscuous mode [ 117.662728][ T7177] vlan2: left allmulticast mode [ 117.683314][ T7177] hsr_slave_0: left allmulticast mode [ 117.816295][ T7221] loop5: detected capacity change from 0 to 64 [ 117.875907][ T7221] hfs: get root inode failed [ 117.895900][ T7184] syzkaller0: entered promiscuous mode [ 117.918689][ T7184] syzkaller0: entered allmulticast mode [ 118.002435][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 118.108927][ T3497] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.126603][ T3497] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.804864][ T3497] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.855999][ T3497] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.900363][ T3497] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.933933][ T3497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.980253][ T3497] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.018913][ T3497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.037541][ T7242] syzkaller0: entered promiscuous mode [ 119.044001][ T7242] syzkaller0: entered allmulticast mode [ 119.321794][ T7256] syzkaller0: entered promiscuous mode [ 119.357306][ T7256] syzkaller0: entered allmulticast mode [ 119.590470][ T7261] syzkaller0: entered promiscuous mode [ 119.605656][ T7261] syzkaller0: entered allmulticast mode [ 122.206563][ T7296] syzkaller0: entered promiscuous mode [ 122.225212][ T7296] syzkaller0: entered allmulticast mode [ 122.811682][ T7302] syzkaller0: entered promiscuous mode [ 122.850279][ T7302] syzkaller0: entered allmulticast mode [ 123.240420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.316607][ T7320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.512791][ T7318] loop0: detected capacity change from 0 to 1024 [ 123.649047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.783619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 123.814178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.854412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 123.880826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 124.291567][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.619076][ T7323] tipc: Started in network mode [ 124.641658][ T7323] tipc: Node identity e2f432476e43, cluster identity 4711 [ 124.654302][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.675349][ T7323] tipc: Enabled bearer , priority 0 [ 124.729156][ T7309] tipc: Disabling bearer [ 125.289623][ T7362] tmpfs: Unknown parameter 'À' [ 125.312944][ T7364] syz.5.457 (7364): /proc/7364/oom_adj is deprecated, please use /proc/7364/oom_score_adj instead. [ 125.544327][ T7207] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 125.734889][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.747088][ T7207] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 125.768819][ T7207] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.780919][ T7367] loop0: detected capacity change from 0 to 32768 [ 125.781902][ T7207] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.815317][ T7207] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.889605][ T7375] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 126.035461][ T7375] loop5: detected capacity change from 0 to 512 [ 126.423182][ T7207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.438409][ T7207] usb 2-1: SerialNumber: syz [ 126.480873][ T7367] JBD2: Ignoring recovery information on journal [ 126.498265][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.542383][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.583066][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.598957][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.619269][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.658383][ T7367] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.669243][ T9] usb 4-1: config 0 descriptor?? [ 126.800865][ T7382] tipc: Started in network mode [ 126.823891][ T7382] tipc: Node identity 16677b2b6b7b, cluster identity 4711 [ 126.840541][ T7382] tipc: Enabled bearer , priority 0 [ 126.846673][ T7207] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 126.859543][ T7207] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 126.889945][ T7381] tipc: Disabling bearer [ 126.898030][ T7207] usb 2-1: USB disconnect, device number 2 [ 126.937821][ T5841] ocfs2: Unmounting device (7,0) on (node local) [ 127.110015][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 127.125698][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.162778][ T9] usb 4-1: USB disconnect, device number 3 [ 127.980795][ T7404] netlink: 84 bytes leftover after parsing attributes in process `syz.1.469'. [ 128.143307][ T7399] process 'syz.0.465' launched './file0' with NULL argv: empty string added [ 129.129779][ T7425] tipc: Enabled bearer , priority 0 [ 129.236518][ T7423] tipc: Disabling bearer [ 130.349443][ T7438] loop5: detected capacity change from 0 to 8192 [ 130.403510][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.483'. [ 132.138095][ T7466] loop5: detected capacity change from 0 to 4096 [ 132.223833][ T7466] ntfs3(loop5): ino=9, mi_enum_attr [ 132.229381][ T7466] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 132.238880][ T7466] ntfs3(loop5): Failed to load $Secure (-22). [ 132.245027][ T7466] ntfs3(loop5): Failed to initialize $Secure (-22). [ 132.439308][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 132.596448][ T7477] lo speed is unknown, defaulting to 1000 [ 132.614036][ T7477] lo speed is unknown, defaulting to 1000 [ 132.652786][ T7477] lo speed is unknown, defaulting to 1000 [ 132.711543][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.721564][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.740493][ T7477] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.839120][ T7477] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.893688][ T7477] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 133.044341][ T7477] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.900664][ T7477] lo speed is unknown, defaulting to 1000 [ 134.937774][ T7477] lo speed is unknown, defaulting to 1000 [ 134.958144][ T7477] lo speed is unknown, defaulting to 1000 [ 135.083068][ T7477] lo speed is unknown, defaulting to 1000 [ 135.167246][ T7477] lo speed is unknown, defaulting to 1000 [ 136.237751][ T7477] lo speed is unknown, defaulting to 1000 [ 136.862977][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 140.734838][ T47] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 140.925662][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 140.970234][ T47] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 141.007848][ T7555] siw: device registration error -23 [ 141.033519][ T47] usb 4-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice= 0.40 [ 141.088533][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.132596][ T47] usb 4-1: Product: syz [ 141.166321][ T47] usb 4-1: Manufacturer: syz [ 141.193418][ T47] usb 4-1: SerialNumber: syz [ 141.551063][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.614907][ T47] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 141.676573][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.886296][ T47] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 142.332795][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.256620][ T47] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 143.274103][ T47] usb 4-1: USB disconnect, device number 4 [ 143.326011][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.329579][ T7583] tipc: Enabled bearer , priority 0 [ 143.400115][ T7585] loop5: detected capacity change from 0 to 1024 [ 143.409028][ T7585] hfsplus: Unknown parameter 'appraise_type' [ 143.498922][ T7583] syzkaller0: entered promiscuous mode [ 143.535465][ T7583] syzkaller0: entered allmulticast mode [ 143.631650][ T7587] siw: device registration error -23 [ 143.671678][ T7582] tipc: Resetting bearer [ 143.984467][ T7582] tipc: Disabling bearer [ 147.217400][ T7630] tipc: Enabled bearer , priority 0 [ 147.237349][ T7630] syzkaller0: entered promiscuous mode [ 147.253924][ T7630] syzkaller0: entered allmulticast mode [ 147.411480][ T7629] tipc: Resetting bearer [ 147.602314][ T7629] tipc: Disabling bearer [ 147.618548][ T7636] 9p: Bad value for 'rfdno' [ 149.299917][ T7647] syzkaller0: entered promiscuous mode [ 149.316160][ T7647] syzkaller0: entered allmulticast mode [ 149.488477][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.555'. [ 149.512089][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.556'. [ 149.742164][ T7665] tipc: Enabled bearer , priority 0 [ 149.755875][ T7665] syzkaller0: entered promiscuous mode [ 149.762357][ T7665] syzkaller0: entered allmulticast mode [ 149.782477][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 149.871698][ T7664] tipc: Resetting bearer [ 149.905694][ T7664] tipc: Disabling bearer [ 150.796574][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.814142][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.842534][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.854231][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.861923][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.396925][ T7676] lo speed is unknown, defaulting to 1000 [ 151.645443][ T7690] x_tables: duplicate underflow at hook 3 [ 151.797441][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 151.995321][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 152.619938][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.632672][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.640691][ T7676] bridge_slave_0: entered allmulticast mode [ 152.650829][ T7676] bridge_slave_0: entered promiscuous mode [ 152.701265][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.711832][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.720487][ T7676] bridge_slave_1: entered allmulticast mode [ 152.728993][ T7676] bridge_slave_1: entered promiscuous mode [ 152.751938][ T7710] tipc: Enabled bearer , priority 0 [ 152.806307][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.821061][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.867197][ T7710] syzkaller0: entered promiscuous mode [ 152.874244][ T7710] syzkaller0: entered allmulticast mode [ 152.891197][ T7676] team0: Port device team_slave_0 added [ 152.899717][ T7714] tipc: Enabling of bearer rejected, failed to enable media [ 152.940119][ T7676] team0: Port device team_slave_1 added [ 152.946013][ T5844] Bluetooth: hci6: command tx timeout [ 152.979114][ T7707] tipc: Resetting bearer [ 152.994630][ T7707] tipc: Disabling bearer [ 153.005793][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.012850][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.042809][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.274087][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.320739][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.468430][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.643115][ T7721] tmpfs: Unknown parameter 'inode3' [ 153.701917][ T7676] hsr_slave_0: entered promiscuous mode [ 153.710401][ T7676] hsr_slave_1: entered promiscuous mode [ 153.719055][ T7676] debugfs: 'hsr0' already exists in 'hsr' [ 153.733619][ T7676] Cannot create hsr debugfs directory [ 154.017400][ T7732] 9p: Bad value for 'rfdno' [ 154.221558][ T7208] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 154.701856][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.581'. [ 155.041931][ T5844] Bluetooth: hci6: command tx timeout [ 155.967460][ T7208] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 155.995817][ T7208] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.482119][ T7746] syzkaller0: entered promiscuous mode [ 156.521063][ T7208] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 156.537822][ T7746] syzkaller0: entered allmulticast mode [ 156.571631][ T7745] tipc: Enabled bearer , priority 0 [ 156.593889][ T7749] syzkaller0: entered promiscuous mode [ 156.609901][ T7749] syzkaller0: entered allmulticast mode [ 156.643298][ T7208] usb 4-1: string descriptor 0 read error: -71 [ 156.650887][ T7208] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.662946][ T7208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.702058][ T7208] usb 4-1: can't set config #253, error -71 [ 156.718511][ T7208] usb 4-1: USB disconnect, device number 5 [ 156.780999][ T7742] tipc: Resetting bearer [ 156.848846][ T7742] tipc: Disabling bearer [ 157.111978][ T5844] Bluetooth: hci6: command tx timeout [ 157.703353][ T7766] x_tables: duplicate underflow at hook 3 [ 157.740525][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.593'. [ 157.756945][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 157.783241][ T7676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.809214][ T7676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.831724][ T7676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.898422][ T7676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.748757][ T7790] syzkaller0: entered promiscuous mode [ 158.764066][ T7790] syzkaller0: entered allmulticast mode [ 158.991131][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.145634][ T7793] loop5: detected capacity change from 0 to 32768 [ 159.184305][ T5844] Bluetooth: hci6: command tx timeout [ 159.217271][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.223198][ T7793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.598 (7793) [ 159.759035][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.766302][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.852113][ T7793] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.867031][ T7793] BTRFS info (device loop5): using crc32c checksum algorithm [ 159.906536][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.913753][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.944100][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'. [ 159.965444][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 160.189268][ T7825] loop0: detected capacity change from 0 to 256 [ 160.198457][ T7825] exfat: Bad value for 'umask' [ 160.221724][ T7793] BTRFS info (device loop5): enabling ssd optimizations [ 160.233863][ T7793] BTRFS info (device loop5): turning on flush-on-commit [ 160.306125][ T7793] BTRFS info (device loop5): enabling free space tree [ 160.313396][ T7793] BTRFS info (device loop5): enabling auto defrag [ 160.319966][ T7793] BTRFS info (device loop5): use lzo compression, level 1 [ 160.327221][ T7793] BTRFS info (device loop5): max_inline set to 4096 [ 160.576613][ T7833] loop0: detected capacity change from 0 to 128 [ 160.691927][ T7833] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.901983][ T7833] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.924253][ T7208] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.941230][ T7833] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.043634][ T7833] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 161.345291][ T7208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.369623][ T7208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.386703][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.394346][ T7208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.420355][ T7208] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.445796][ T7208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.487928][ T6692] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.511321][ T7208] usb 2-1: config 0 descriptor?? [ 161.879193][ T7845] syzkaller0: entered promiscuous mode [ 161.893744][ T7845] syzkaller0: entered allmulticast mode [ 161.958031][ T7208] usbhid 2-1:0.0: can't add hid device: -71 [ 161.975697][ T7208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 162.006750][ T7208] usb 2-1: USB disconnect, device number 3 [ 162.227350][ T5841] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.611267][ T7676] veth0_vlan: entered promiscuous mode [ 163.170434][ T7676] veth1_vlan: entered promiscuous mode [ 163.818241][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 163.844743][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.615'. [ 163.940320][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 163.950326][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 163.982102][ T7676] veth0_macvtap: entered promiscuous mode [ 164.013319][ T7676] veth1_macvtap: entered promiscuous mode [ 164.123252][ T7873] x_tables: duplicate underflow at hook 3 [ 164.139350][ T7855] loop0: detected capacity change from 0 to 32768 [ 164.147922][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.162358][ T7855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.611 (7855) [ 164.212760][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.242804][ T7855] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.279094][ T7855] BTRFS info (device loop0): using crc32c checksum algorithm [ 164.297663][ T3553] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.330018][ T3553] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.340416][ T3553] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.355203][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.379647][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.622'. [ 164.424996][ T7855] BTRFS info (device loop0): enabling ssd optimizations [ 164.439952][ T7855] BTRFS info (device loop0): turning on flush-on-commit [ 164.456776][ T7855] BTRFS info (device loop0): enabling free space tree [ 164.465002][ T7855] BTRFS info (device loop0): enabling auto defrag [ 164.471536][ T7855] BTRFS info (device loop0): use lzo compression, level 1 [ 164.479292][ T7855] BTRFS info (device loop0): max_inline set to 4096 [ 164.564705][ T5841] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.661219][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.691010][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.803738][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.824001][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.095012][ T7907] netlink: 72 bytes leftover after parsing attributes in process `syz.0.623'. [ 165.158190][ T7907] loop0: detected capacity change from 0 to 1024 [ 165.329587][ T7907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.342387][ T7907] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.725150][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.884777][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.629'. [ 165.892052][ T7918] syzkaller0: entered promiscuous mode [ 165.907700][ T7918] syzkaller0: entered allmulticast mode [ 166.165435][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.6.633'. [ 167.679191][ T7211] hid-generic FFFF:0008:0003.0001: item fetching failed at offset 0/1 [ 167.701178][ T7211] hid-generic FFFF:0008:0003.0001: probe with driver hid-generic failed with error -22 [ 168.012361][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 168.018991][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.643'. [ 168.060275][ T7964] syzkaller0: entered promiscuous mode [ 168.069533][ T7964] syzkaller0: entered allmulticast mode [ 168.290161][ T7975] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 168.316874][ T7974] x_tables: duplicate underflow at hook 3 [ 168.340558][ T7972] lo speed is unknown, defaulting to 1000 [ 170.772894][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 170.948082][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 172.751536][ T8019] input: syz1 as /devices/virtual/input/input5 [ 173.161266][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 173.349025][ T8062] x_tables: duplicate underflow at hook 3 [ 173.471502][ T8059] lo speed is unknown, defaulting to 1000 [ 173.487474][ T8063] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 174.220400][ T8056] 8021q: VLANs not supported on gre0 [ 177.110202][ T8089] overlayfs: missing 'workdir' [ 177.684152][ T5844] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 177.695727][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 177.695753][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.695766][ T5844] Workqueue: hci5 hci_rx_work [ 177.695804][ T5844] Call Trace: [ 177.695815][ T5844] [ 177.695825][ T5844] dump_stack_lvl+0xe8/0x150 [ 177.695859][ T5844] sysfs_create_dir_ns+0x271/0x2a0 [ 177.695890][ T5844] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 177.695920][ T5844] ? do_raw_spin_unlock+0xf5/0x210 [ 177.695949][ T5844] kobject_add_internal+0x62b/0xd00 [ 177.695988][ T5844] kobject_add+0x163/0x240 [ 177.696020][ T5844] ? __pfx_kobject_add+0x10/0x10 [ 177.696047][ T5844] ? _raw_spin_unlock+0x28/0x50 [ 177.696069][ T5844] ? get_device_parent+0x366/0x3a0 [ 177.696100][ T5844] device_add+0x408/0xb70 [ 177.696133][ T5844] hci_conn_add_sysfs+0xd5/0x210 [ 177.696157][ T5844] le_conn_complete_evt+0xf1d/0x1430 [ 177.696193][ T5844] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 177.696220][ T5844] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 177.696245][ T5844] ? __pfx___mutex_lock+0x10/0x10 [ 177.696270][ T5844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.696293][ T5844] ? skb_pull_data+0xfb/0x200 [ 177.696327][ T5844] hci_le_conn_complete_evt+0x187/0x470 [ 177.696361][ T5844] hci_event_packet+0x7af/0x12c0 [ 177.696390][ T5844] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 177.696419][ T5844] ? __pfx_hci_event_packet+0x10/0x10 [ 177.696451][ T5844] ? kcov_remote_start+0x49a/0x7a0 [ 177.696476][ T5844] ? hci_send_to_monitor+0xe2/0x590 [ 177.696509][ T5844] hci_rx_work+0x3ee/0x1040 [ 177.696541][ T5844] ? process_one_work+0x8bb/0x1780 [ 177.696570][ T5844] process_one_work+0x9ab/0x1780 [ 177.696623][ T5844] ? __pfx_process_one_work+0x10/0x10 [ 177.696652][ T5844] ? do_raw_spin_lock+0x12b/0x2f0 [ 177.696693][ T5844] worker_thread+0xba8/0x11e0 [ 177.696736][ T5844] kthread+0x388/0x470 [ 177.696759][ T5844] ? __pfx_worker_thread+0x10/0x10 [ 177.696775][ T5844] ? __pfx_kthread+0x10/0x10 [ 177.696798][ T5844] ret_from_fork+0x51e/0xb90 [ 177.696829][ T5844] ? __pfx_ret_from_fork+0x10/0x10 [ 177.696856][ T5844] ? __switch_to+0xc7d/0x1450 [ 177.696885][ T5844] ? __pfx_kthread+0x10/0x10 [ 177.696909][ T5844] ret_from_fork_asm+0x1a/0x30 [ 177.696944][ T5844] [ 177.697650][ T5844] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.936053][ T5844] Bluetooth: hci5: failed to register connection device [ 178.085504][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.5.686'. [ 179.985226][ T5861] Bluetooth: hci5: command 0x2016 tx timeout [ 182.064171][ T5844] Bluetooth: hci5: command 0x2016 tx timeout [ 182.582056][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 182.610437][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 182.691540][ T3497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.700675][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 182.712111][ T3497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.721431][ T8182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.716'. [ 182.754902][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 182.798490][ T3497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.840906][ T3497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.877681][ T8196] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 183.117501][ T8204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.722'. [ 183.424086][ T8193] lo speed is unknown, defaulting to 1000 [ 183.640822][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.727'. [ 183.806787][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 184.009106][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 184.992664][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 185.210109][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 186.392349][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.754'. [ 186.631511][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 186.805269][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 186.849133][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 187.647506][ T8320] No such timeout policy "syz1" [ 188.069548][ T8323] x_tables: duplicate underflow at hook 3 [ 188.486988][ T8340] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.646005][ T8342] No such timeout policy "syz1" [ 188.826668][ T8340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.834967][ T8340] IPv6: NLM_F_CREATE should be set when creating new route [ 189.477029][ T8330] loop5: detected capacity change from 0 to 32768 [ 189.625356][ T8330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.774 (8330) [ 191.090125][ T8330] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.361568][ T8330] BTRFS info (device loop5): using crc32c checksum algorithm [ 192.584494][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 192.593091][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 192.663159][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 192.723280][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 192.751765][ T8370] __nla_validate_parse: 2 callbacks suppressed [ 192.751784][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 192.810744][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 192.823187][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 192.855482][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 192.859096][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 192.889633][ T8330] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 192.911584][ T8330] BTRFS error (device loop5): open_ctree failed: -12 [ 192.941136][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 193.027121][ T8374] bridge0: entered promiscuous mode [ 193.051773][ T8374] ip6gretap0: entered promiscuous mode [ 193.078768][ T8374] debugfs: 'hsr1' already exists in 'hsr' [ 193.111786][ T8374] Cannot create hsr debugfs directory [ 193.131909][ T8374] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 194.238644][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245914][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.434874][ T8422] x_tables: duplicate underflow at hook 3 [ 195.505692][ T8406] syzkaller0: entered promiscuous mode [ 195.528206][ T8406] syzkaller0: entered allmulticast mode [ 196.413983][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 196.420660][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 196.426845][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 196.432927][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 200.362120][ T8437] gretap0: entered promiscuous mode [ 200.371814][ T8437] gretap0: left promiscuous mode [ 200.395544][ T8461] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 200.411389][ T8461] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.812'. [ 202.398661][ T8497] siw: device registration error -23 [ 202.464926][ T8497] gretap0: entered promiscuous mode [ 202.499577][ T8497] gretap0: left promiscuous mode [ 202.602220][ T8507] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 202.729093][ T8503] syzkaller0: entered promiscuous mode [ 202.746728][ T8503] syzkaller0: entered allmulticast mode [ 203.738681][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 205.565126][ T8512] lo speed is unknown, defaulting to 1000 [ 205.791405][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.5.843'. [ 207.131307][ T8574] syzkaller0: entered promiscuous mode [ 207.148397][ T8574] syzkaller0: entered allmulticast mode [ 209.197216][ T8596] lo speed is unknown, defaulting to 1000 [ 210.882238][ T8649] syzkaller0: entered promiscuous mode [ 210.888195][ T8649] syzkaller0: entered allmulticast mode [ 210.967535][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.888'. [ 211.594230][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 213.008377][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.890'. [ 213.179963][ T8686] loop5: detected capacity change from 0 to 1024 [ 213.206890][ T8686] hfsplus: Unknown parameter 'appraise_type' [ 213.474868][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.900'. [ 213.529626][ T8684] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.577204][ T8684] tipc: Failed to remove unknown binding: 66,0,0/0:712117963/712117965 [ 213.615560][ T8684] tipc: Failed to remove unknown binding: 66,0,0/0:712117963/712117964 [ 213.667635][ T8700] tipc: Failed to remove unknown binding: 66,0,0/0:712117963/712117965 [ 213.711673][ T8700] tipc: Failed to remove unknown binding: 66,0,0/0:712117963/712117964 [ 213.894180][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 214.005865][ T8707] lo speed is unknown, defaulting to 1000 [ 214.346876][ T8714] syzkaller0: entered promiscuous mode [ 214.352650][ T8714] syzkaller0: entered allmulticast mode [ 216.470799][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 216.668131][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 216.691131][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 216.743258][ T8758] loop5: detected capacity change from 0 to 1024 [ 216.756884][ T8758] hfsplus: Unknown parameter 'appraise_type' [ 219.048245][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.923'. [ 219.109531][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.923'. [ 219.347617][ T8776] syzkaller0: entered promiscuous mode [ 219.353238][ T8776] syzkaller0: entered allmulticast mode [ 219.372305][ T8775] bridge0: entered promiscuous mode [ 219.383049][ T8775] ip6gretap0: entered promiscuous mode [ 219.390297][ T8775] debugfs: 'hsr1' already exists in 'hsr' [ 219.397090][ T8775] Cannot create hsr debugfs directory [ 221.042592][ T8797] lo speed is unknown, defaulting to 1000 [ 221.238571][ T8808] loop1: detected capacity change from 0 to 256 [ 221.262969][ T8808] exfat: Bad value for 'umask' [ 222.081767][ T5165] Bluetooth: hci5: command 0x2016 tx timeout [ 222.092821][ T8821] loop1: detected capacity change from 0 to 128 [ 222.464051][ T8821] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.571906][ T8821] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.586489][ T8821] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.080614][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 223.360616][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.533811][ T8847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.943'. [ 223.677109][ T8845] syzkaller0: entered promiscuous mode [ 223.713064][ T8845] syzkaller0: entered allmulticast mode [ 225.422157][ T8881] loop5: detected capacity change from 0 to 256 [ 225.447381][ T8881] exfat: Bad value for 'umask' [ 225.563780][ T8883] netlink: 'syz.3.955': attribute type 29 has an invalid length. [ 225.612437][ T8876] netlink: 'syz.3.955': attribute type 29 has an invalid length. [ 225.692652][ T8887] loop5: detected capacity change from 0 to 128 [ 225.703510][ T8887] EXT4-fs (loop5): Test dummy encryption mode enabled [ 225.729388][ T8887] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.779705][ T8887] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.875820][ T8884] netlink: 'syz.3.955': attribute type 29 has an invalid length. [ 226.665285][ T8905] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 226.674394][ T8905] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 226.692917][ T8905] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 226.701327][ T6692] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.951085][ T8916] syzkaller0: entered promiscuous mode [ 226.973289][ T8916] syzkaller0: entered allmulticast mode [ 227.178983][ T8931] loop0: detected capacity change from 0 to 256 [ 227.205295][ T8931] exfat: Bad value for 'umask' [ 227.462815][ T8941] loop0: detected capacity change from 0 to 128 [ 227.463169][ T8943] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 227.481202][ T8941] EXT4-fs (loop0): Test dummy encryption mode enabled [ 227.502121][ T8943] netlink: 'syz.3.982': attribute type 2 has an invalid length. [ 227.514760][ T8941] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.517207][ T8943] netlink: 'syz.3.982': attribute type 3 has an invalid length. [ 227.537759][ T8941] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.897093][ T8960] syzkaller0: entered promiscuous mode [ 227.910809][ T8960] syzkaller0: entered allmulticast mode [ 228.162896][ T5841] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.191296][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.999'. [ 228.617970][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1001'. [ 228.667710][ T8992] syzkaller0: entered promiscuous mode [ 228.674622][ T8992] syzkaller0: entered allmulticast mode [ 228.998005][ T9011] netlink: 64467 bytes leftover after parsing attributes in process `syz.3.1010'. [ 229.320822][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 229.986346][ T30] INFO: task syz.2.73:6180 blocked for more than 143 seconds. [ 229.999416][ T30] Not tainted syzkaller #0 [ 230.004490][ T30] Blocked by coredump. [ 230.009798][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.018746][ T30] task:syz.2.73 state:D stack:27360 pid:6180 tgid:6165 ppid:5843 task_flags:0x40054c flags:0x00080000 [ 230.030742][ T30] Call Trace: [ 230.034183][ T30] [ 230.037140][ T30] __schedule+0x1665/0x5590 [ 230.041656][ T30] ? __pfx___schedule+0x10/0x10 [ 230.047438][ T30] ? schedule+0x90/0x360 [ 230.051721][ T30] schedule+0x164/0x360 [ 230.056020][ T30] schedule_preempt_disabled+0x13/0x30 [ 230.061506][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 230.067686][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 230.073450][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 230.079605][ T30] ? do_futex+0x395/0x420 [ 230.083999][ T30] down_read+0x99/0x2e0 [ 230.088148][ T30] ? exit_mm+0x64/0x250 [ 230.092295][ T30] exit_mm+0x73/0x250 [ 230.096396][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 230.102066][ T30] do_exit+0x8b9/0x2490 [ 230.106333][ T30] ? __pfx_do_exit+0x10/0x10 [ 230.110955][ T30] do_group_exit+0x21b/0x2d0 [ 230.115657][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.120889][ T30] get_signal+0x1284/0x1330 [ 230.125625][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 230.131211][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 230.137754][ T30] exit_to_user_mode_loop+0x86/0x480 [ 230.143137][ T30] ? rcu_is_watching+0x15/0xb0 [ 230.149298][ T30] do_syscall_64+0x32d/0xf80 [ 230.153978][ T30] ? trace_irq_disable+0x3b/0x150 [ 230.159165][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.165282][ T30] ? clear_bhb_loop+0x40/0x90 [ 230.170078][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.176005][ T30] RIP: 0033:0x7fee04d9c799 [ 230.180518][ T30] RSP: 002b:00007fee0276e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.188987][ T30] RAX: fffffffffffffe00 RBX: 00007fee05016368 RCX: 00007fee04d9c799 [ 230.197009][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee05016368 [ 230.205033][ T30] RBP: 00007fee05016360 R08: 0000000000000000 R09: 0000000000000000 [ 230.213007][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.221041][ T30] R13: 00007fee050163f8 R14: 00007ffee96f5520 R15: 00007ffee96f5608 [ 230.229609][ T30] [ 230.232835][ T30] [ 230.232835][ T30] Showing all locks held in the system: [ 230.240639][ T30] 1 lock held by khungtaskd/30: [ 230.245669][ T30] #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 230.257044][ T30] 5 locks held by kworker/u8:5/96: [ 230.262191][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 230.272186][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 230.281402][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 230.290452][ T30] #3: ffffffff9a599a20 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 230.300762][ T30] #4: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 230.310659][ T30] 3 locks held by kworker/u8:9/3512: [ 230.316132][ T30] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 230.327308][ T30] #1: ffffc9000d93fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 230.337922][ T30] #2: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 230.346967][ T30] 1 lock held by klogd/5203: [ 230.352252][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 230.362434][ T30] 2 locks held by getty/5602: [ 230.367289][ T30] #0: ffff8880334d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 230.377164][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 230.387510][ T30] 1 lock held by syz.2.73/6180: [ 230.392369][ T30] #0: ffff88807f4fa8b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 230.401427][ T30] 1 lock held by syz.4.503/7512: [ 230.406452][ T30] #0: ffff88807abba8b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 230.415353][ T30] 1 lock held by syz.5.1003/8987: [ 230.420371][ T30] #0: ffff88807d76b460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 230.429488][ T30] 1 lock held by syz.5.1003/8993: [ 230.434538][ T30] #0: ffff88807d76b460 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0 [ 230.444236][ T30] 2 locks held by syz.0.1008/9003: [ 230.449345][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 230.458997][ T30] #1: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 230.470260][ T30] 1 lock held by syz.6.1009/9006: [ 230.475353][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 230.484404][ T30] 1 lock held by syz.6.1009/9009: [ 230.489431][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 230.498267][ T30] 1 lock held by syz.6.1009/9018: [ 230.503288][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 230.512949][ T30] 1 lock held by syz.6.1009/9027: [ 230.518057][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 230.527560][ T30] 1 lock held by syz.1.1011/9007: [ 230.532585][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 230.541681][ T30] 1 lock held by syz.1.1011/9010: [ 230.546801][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 230.556716][ T30] 1 lock held by syz.1.1011/9016: [ 230.561785][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 230.571265][ T30] 1 lock held by syz.1.1011/9020: [ 230.576331][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 230.585188][ T30] 1 lock held by syz.1.1011/9026: [ 230.590241][ T30] #0: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 230.599718][ T30] 3 locks held by syz.3.1014/9031: [ 230.604903][ T30] #0: ffffffff8fc43f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 230.613120][ T30] #1: ffffffff8fc43dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 230.622336][ T30] #2: ffffffff8fbd5a40 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_apply_custom_regulatory+0x239/0x330 [ 230.634205][ T30] [ 230.636571][ T30] ============================================= [ 230.636571][ T30] [ 230.645415][ T30] NMI backtrace for cpu 1 [ 230.645432][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 230.645448][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.645456][ T30] Call Trace: [ 230.645462][ T30] [ 230.645469][ T30] dump_stack_lvl+0xe8/0x150 [ 230.645494][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 230.645515][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 230.645537][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 230.645559][ T30] sys_info+0x135/0x170 [ 230.645576][ T30] watchdog+0x1002/0x1060 [ 230.645599][ T30] ? watchdog+0x1da/0x1060 [ 230.645619][ T30] kthread+0x388/0x470 [ 230.645636][ T30] ? __pfx_watchdog+0x10/0x10 [ 230.645650][ T30] ? __pfx_kthread+0x10/0x10 [ 230.645668][ T30] ret_from_fork+0x51e/0xb90 [ 230.645691][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 230.645710][ T30] ? __switch_to+0xc7d/0x1450 [ 230.645731][ T30] ? __pfx_kthread+0x10/0x10 [ 230.645748][ T30] ret_from_fork_asm+0x1a/0x30 [ 230.645784][ T30] [ 230.645790][ T30] Sending NMI from CPU 1 to CPUs 0: [ 230.756346][ C0] NMI backtrace for cpu 0 [ 230.756363][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 230.756380][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.756388][ C0] RIP: 0010:tick_nohz_idle_stop_tick+0x0/0xcc0 [ 230.756415][ C0] Code: 26 ff 0e 00 fb 5b 41 5e 41 5f e9 0b 8d ff 09 cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 230.756427][ C0] RSP: 0018:ffffffff8e407dd8 EFLAGS: 00000002 [ 230.756441][ C0] RAX: ffffffff8896e301 RBX: ffffffff8e492ec0 RCX: ffffffff8e492ec0 [ 230.756452][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.756461][ C0] RBP: ffffffff8e407eb0 R08: ffffffff90123cf7 R09: 1ffffffff202479e [ 230.756471][ C0] R10: dffffc0000000000 R11: fffffbfff202479f R12: ffffffff90123cf0 [ 230.756482][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c925d8 [ 230.756491][ C0] FS: 0000000000000000(0000) GS:ffff888125437000(0000) knlGS:0000000000000000 [ 230.756503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.756513][ C0] CR2: 0000001b31e20ff8 CR3: 0000000075b9c000 CR4: 00000000003526f0 [ 230.756527][ C0] Call Trace: [ 230.756534][ C0] [ 230.756540][ C0] do_idle+0x1b5/0x5d0 [ 230.756557][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.756577][ C0] ? __pfx_do_idle+0x10/0x10 [ 230.756595][ C0] cpu_startup_entry+0x43/0x60 [ 230.756610][ C0] rest_init+0x2de/0x300 [ 230.756630][ C0] start_kernel+0x38f/0x3e0 [ 230.756650][ C0] x86_64_start_reservations+0x24/0x30 [ 230.756671][ C0] x86_64_start_kernel+0x143/0x1c0 [ 230.756692][ C0] common_startup_64+0x13e/0x147 [ 230.756717][ C0] [ 230.930220][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 230.937088][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 230.946199][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.956254][ T30] Call Trace: [ 230.959535][ T30] [ 230.962458][ T30] vpanic+0x56c/0xa60 [ 230.966437][ T30] ? __pfx___schedule+0x10/0x10 [ 230.971282][ T30] ? __pfx_vpanic+0x10/0x10 [ 230.975789][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 230.981959][ T30] panic+0xc5/0xd0 [ 230.985683][ T30] ? __pfx_panic+0x10/0x10 [ 230.990111][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 230.995479][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 231.001631][ T30] watchdog+0x105b/0x1060 [ 231.005956][ T30] ? watchdog+0x1da/0x1060 [ 231.010364][ T30] kthread+0x388/0x470 [ 231.014428][ T30] ? __pfx_watchdog+0x10/0x10 [ 231.019102][ T30] ? __pfx_kthread+0x10/0x10 [ 231.023694][ T30] ret_from_fork+0x51e/0xb90 [ 231.028287][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 231.033394][ T30] ? __switch_to+0xc7d/0x1450 [ 231.038072][ T30] ? __pfx_kthread+0x10/0x10 [ 231.042659][ T30] ret_from_fork_asm+0x1a/0x30 [ 231.047426][ T30] [ 231.050933][ T30] Kernel Offset: disabled [ 231.055245][ T30] Rebooting in 86400 seconds..