last executing test programs: 2m58.632919185s ago: executing program 2 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m57.673795582s ago: executing program 2 (id=191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@private1={0xfc, 0x1, '\x00', 0xfc}, 0x0, 0x32}, 0x2, @in6=@empty, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x13c}}, 0x0) 2m57.506664401s ago: executing program 2 (id=193): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYRES8=r3], 0x3c}}, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)={0x84, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x36}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1e, {0x7, 0x8, 0x7}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x5, 0x0, {0x298000, 0xff, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x2000000, 0xff}}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x44040}, 0x4010) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x34}}, 0x48080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) unshare(0x20000400) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fffffff}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="b497f5952180643763c6aaed020e985d207f5954abcdf83cb102d2f7dc93c05ab1613c518cf4752fc61047541e6d6c28b5742a11f530bba4fbb391eac5bd245d60691491cd96f9abb0f9ff42e86e6cf3323e7c26c13b8efafb53c05985408ed18b248448b3f0938c4fae5497ef9b1977c07d6a2f9c5698ec31219b3ae90a618a4ae330f99c424c5d31d23966374bcf573a1d4a", 0x93}, {&(0x7f00000001c0)="e3f3b9fa92161333829c52204726a56e51303f590a3c26e42eb5f6723dc55475b3b33edf02ddb2b8be9299bd8201551b5e38715ca8fd2ecace3ab672aaa655e0d2184cdffc8af421b14accbf5de6e8e64d0f785757688235ea5544ab82dbd13649228ae0577b30de6eda3f", 0x6b}], 0x2, &(0x7f0000000580)=[{0xe8, 0x110, 0xb4d09bb, "a2c007506a2572bb068df4841e38fa18ba3f0161e5a38a5159825035c6d6621a3ac4112e1b1235e9848df6a62a9daf80c37ce16f972e82908ee66a3756204a694e62cd30b3d1c26b145e78358ddd876328033a1d11e2300943563671954361fc8ee200ece542daf973e2770dd81061c76175a63978c194fa836928ae50622c35f13e550a2949f0490b9fa1c1423e64675872c816b990afe962c37260668fa2fb4b86d666eb40c190bf4221bbb0d35da5fad50578cd1d6537ac8337ca7e5464faf457c49d05bff2f4fc3de4768b1f9f8c3c6f72a69c"}, {0x60, 0x0, 0x2, "6823598a271b327a34ef38916161f95262b7f75a7722b505fbfdccae397032a86cf9892da34fe56556d3c47f5061693a00a6b3cd6819757850490ea1bc8beb96bcff7e589bb7bec7b87473abfb85be"}, {0xe0, 0x84, 0x3, "2c4de4572079bc0e444c21d41fbb77e9239d34c3cb0bb740fe70e2326816976d58176d1093ad5de1b8d4d1325ac2e402001fe9f7cc46a49d4d1bd7761bac53224d924fe4368e848bd856a561dd747526e549264c0bb1cc41c7bed44fb5da42f08bf30e0eb5747ce08d1aae5610b5e36f42e8030031f1b42743fe766af33aee1627afdd3a327051c8d5972c9e64ff3f0072958d9855c93895f3919a11fb37922b5a3489b4cec63cea3c1bda559a55822617dea342cd22ac978ec8c8db585b8c8470161cc016576c8f27"}, {0x98, 0x10c, 0x9, "6ccb09ef2b6d4fa58bdcc0420d54018e4e8b17dbe5a6fb94a080665575da3e30530657aaf4a2e865a5ab30161e20f7a99551ca69cb9ed8ea03b69ac9dc455d2c523260c032ee3de2b3d753247cc7914f7f1d90e0590105c04d57dad29efa4d9b8c498dc61821b936b6d6e4143e855155b0cd2e61df625e49f2885195d8af44387a81e50e"}, {0x20, 0x103, 0x3, "50817d6d561a1aa494"}, {0xb8, 0x104, 0x3, "e4c837bf3941bf27c5795a994493ed430a44ea5cadce3462f89ebcb64a9438b33d7bd0a45ff9f9c3699a43defb82fe29d3499bc45aeb809dcbfcf5cbf2322e955d043294e5493fe5ea893e09d2701df81d652eb31c19eb4bc791d1cd9474fd66652c833a2b9098418b107a03c03003e48232ecab4bceb43e4b38781a6d2aa4175419a23028146621e49a6e00df56c0cd4e2d0f80d825650657b2580b8fa32c21c2f9500cb9"}, {0xd0, 0x108, 0xd, "1be131993caaf74047e2b1e95890860ccf6ed9c3d02b1cad9c092777e049c5967955ee759d9d88b1304cdb6f17f268931bf25ada0d1bc226939c58f43ef453952a8ee6f9074a28a042144c882496198a86c7569eb8e59e6fbc14bb49491e907ab5fb92821d44bf46af7026e0e9313b5ee1ba060900f081f44883f344cf201109e3ddae18d420df0c8fe74f8fc7c3c5e7a899509e9ddc0b91d90bab406f13bcaf0b5b434ac9b982cdee8a70fa869761f694cf22ee0a3013faa5cc03"}, {0x80, 0x3a, 0x7, "900ad618a9d0ccf9c6f7751d44e7e2ddfa0f72d5ed46e1a915e1332f6f3d86ab3a7e0087dc3b228ced4e96160967dc64aad61c73736e62fb33542d2f067b6c4ec470762d5f63a574063a0961a7bef1db4afef9cf966dc9c43d3782a16fef401846055addef107f22d4ecad"}], 0x4e8}, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) 2m57.091915925s ago: executing program 2 (id=198): socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000240)=0x8) 2m56.930111265s ago: executing program 2 (id=199): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x72, 0x0, 0x8, 0x8, 0x3, 0x3d84c822}, {0xfc, 0x1, 0xc, 0x2, 0xc, 0x2}, 0x7fff, 0x401, 0x2259}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1ba40444a07deb3a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}, {0x0}, {0x0}], 0x3}, 0x0) 2m56.441085843s ago: executing program 2 (id=204): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m41.361551595s ago: executing program 32 (id=204): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r0, 0x0, 0xa0028000}, 0x86) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 8.72100309s ago: executing program 4 (id=1513): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @loopback}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x8000) 7.69841773s ago: executing program 0 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x4008020) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xc, 0x5, 0x4, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x4, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x3ff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 7.482264063s ago: executing program 4 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11) 6.665714831s ago: executing program 0 (id=1522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f0000000440)="f058fe7dad777f8f6104bd3cb38043ec4e01391f5ce0a6ffa055a8509f0453d8a13534b12696d34378779d0d81259905b1d925811e1175bbe65f36cc23c9bc0f590b6bcb4948d8868d4eba9e4c8cbae983110d0b95da84def342574ac4767ccd4f269b7e00b21afb1c0655121ecfc1d7c943b99a1ea3ece27533c4971e57023da9f5c9e2529cfc1feaa4e3209db93f7b042579f4ba28c20b110e98527ab28326880b974e6bb2fa201093f597b34d38b7fa9626186cf691db6ecc4cb4b6f12e3f0b02d70a1be427710ade6ef32de8dabf826858a70c9d5c00e4de", 0xda}, {&(0x7f0000000000)="1caed873c7abcee769c6f148cf3b38b2c83d789b06ae74", 0x17}, {&(0x7f00000022c0)="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", 0x108}], 0x4}, 0x5) 6.571860606s ago: executing program 4 (id=1523): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[]) 6.294315872s ago: executing program 0 (id=1526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 5.320514889s ago: executing program 1 (id=1528): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @loopback}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 5.295831221s ago: executing program 3 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0xb053, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000b00)=0x40) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x20000005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x98, 0xf8, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r2, 0x0, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 5.162226198s ago: executing program 1 (id=1531): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000004, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @local}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 5.094980502s ago: executing program 3 (id=1532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0xad, 0xce, 0x1c, 0x89, 0xa6, 0x27, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x1, 0x1, 0x3, 0x7, 0x3000000, 0x68a60afe, 0x3, 0x29c2, 0x101, 0x2, 0x9, 0x3, 0x7fffffffffffffff, 0x5, 0x2fd6, 0xa000000000000000], 0xb000, 0x88200}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r6, &(0x7f0000000100)=""/140, 0xde) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52e, &(0x7f0000000e00)="$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") r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) getpid() r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYRES32, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000c"], 0x54}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r5, 0x7) 4.654492618s ago: executing program 5 (id=1534): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x40000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10) 4.489818208s ago: executing program 5 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180), 0x0}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pread64(r2, &(0x7f0000000140)=""/175, 0xaf, 0x5) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.488899458s ago: executing program 3 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f0000000440)="f058fe7dad777f8f6104bd3cb38043ec4e01391f5ce0a6ffa055a8509f0453d8a13534b12696d34378779d0d81259905b1d925811e1175bbe65f36cc23c9bc0f590b6bcb4948d8868d4eba9e4c8cbae983110d0b95da84def342574ac4767ccd4f269b7e00b21afb1c0655121ecfc1d7c943b99a1ea3ece27533c4971e57023da9f5c9e2529cfc1feaa4e3209db93f7b042579f4ba28c20b110e98527ab28326880b974e6bb2fa201093f597b34d38b7fa9626186cf691db6ecc4cb4b6f12e3f0b02d70a1be427710ade6ef32de8dabf826858a70c9d5c00e4de", 0xda}, {&(0x7f0000000000)="1caed873c7abcee769c6f148cf3b38b2c83d789b06ae74", 0x17}, {&(0x7f00000022c0)="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", 0x108}], 0x4}, 0x5) 4.29312962s ago: executing program 5 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast2, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292c3c83b547f80e4714c90c200", 0x18) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000001940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x50}], 0x1, 0x4010800) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000180)={[{@release_agent={'release_agent', 0x3d, './cgroup'}}]}) shmctl$SHM_STAT_ANY(r3, 0xf, 0x0) r8 = syz_open_procfs(0x0, 0x0) openat2(r8, 0x0, &(0x7f00000000c0)={0x80042, 0xc3, 0x11}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) io_setup(0x6, &(0x7f00000003c0)) 4.237570532s ago: executing program 4 (id=1538): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) 4.062268593s ago: executing program 1 (id=1539): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x44000) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0x3) fcntl$addseals(r1, 0x409, 0x7) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) 3.399901952s ago: executing program 1 (id=1540): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x72, 0x0, 0x8, 0x8, 0x3, 0x3d84c822}, {0xfc, 0x1, 0xc, 0x2, 0xc, 0x2}, 0x7fff, 0x401, 0x2259}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1ba40444a07deb3a}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 3.176586495s ago: executing program 5 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f017", 0x2b}], 0x1}, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x3, 0x103100) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x20}, 0x4c814) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a80) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) 3.071654271s ago: executing program 4 (id=1542): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @loopback}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.062090239s ago: executing program 0 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 478.700233ms ago: executing program 4 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@nodelalloc}, {@noload}, {@orlov}]}, 0x1, 0x597, &(0x7f0000001280)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x40000000000000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1]}) 460.666073ms ago: executing program 3 (id=1545): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x80, 0x7, 0xfc, 0x2, 0xc8, 0xa, 0x900}}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4040850) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x2bc, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x78}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x294, 0x111, 0x0, 0x1, {0x290, 0x5, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf836}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4dc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4080) 420.270716ms ago: executing program 5 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x2000401, 0x5, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) 359.273679ms ago: executing program 0 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x50b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 225.850597ms ago: executing program 1 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180), 0x0}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pread64(r2, &(0x7f0000000140)=""/175, 0xaf, 0x5) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 221.273258ms ago: executing program 3 (id=1549): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') 150.666512ms ago: executing program 0 (id=1550): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xeffff00c}, {0x6}]}, 0x10) 64.045007ms ago: executing program 3 (id=1551): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 63.006217ms ago: executing program 5 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="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", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180), 0x0}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 0s ago: executing program 1 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): d_slave_0): Enslaving as an active interface with an up link [ 62.601487][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.608664][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.635036][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.648125][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.682674][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.689749][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.715760][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.742427][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.749631][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.776013][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.788492][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.795533][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.822291][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.835994][ T4269] team0: Port device team_slave_0 added [ 62.847443][ T4269] team0: Port device team_slave_1 added [ 62.861282][ T4280] team0: Port device team_slave_0 added [ 62.894409][ T4280] team0: Port device team_slave_1 added [ 62.921729][ T4273] device hsr_slave_0 entered promiscuous mode [ 62.928520][ T4273] device hsr_slave_1 entered promiscuous mode [ 62.935524][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.943728][ T4273] Cannot create hsr debugfs directory [ 62.964072][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.974001][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.002780][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.032829][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.040182][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.066817][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.081980][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.089267][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.115388][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.136922][ T4283] device hsr_slave_0 entered promiscuous mode [ 63.144005][ T4283] device hsr_slave_1 entered promiscuous mode [ 63.150606][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.158493][ T4283] Cannot create hsr debugfs directory [ 63.164421][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.171696][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.200585][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.261163][ T4269] device hsr_slave_0 entered promiscuous mode [ 63.268337][ T4269] device hsr_slave_1 entered promiscuous mode [ 63.275008][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.283000][ T4269] Cannot create hsr debugfs directory [ 63.296747][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 63.303007][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 63.305752][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 63.375799][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 63.375813][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 63.392523][ T4280] device hsr_slave_0 entered promiscuous mode [ 63.399267][ T4280] device hsr_slave_1 entered promiscuous mode [ 63.406120][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.413726][ T4280] Cannot create hsr debugfs directory [ 63.650844][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.668118][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.680418][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.692350][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.719784][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.740227][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.751623][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.768915][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.824825][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.835511][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.849070][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.869935][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.916478][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.950458][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.959576][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.990744][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.046588][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.063021][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.087209][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.096307][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.106588][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.123384][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.155215][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.171429][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.184780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.193014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.201141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.227652][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.235390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.248643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.258336][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.265509][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.274025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.284455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.292954][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.300035][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.325495][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.334721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.344200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.353497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.365218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.377926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.389643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.421832][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.432177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.441379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.451435][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.458575][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.468389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.477284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.486133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.494531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.503500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.511668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.519831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.528623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.540612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.548795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.557808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.566648][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.573705][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.583634][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.596499][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.624592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.637724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.647553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.657029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.666217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.678070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.687545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.696327][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.703401][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.731023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.744382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.759867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.772069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.784326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.804801][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.839495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.856556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.870460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.878926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.887705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.897025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.905381][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.912596][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.930212][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.943904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.957404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.972987][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.980151][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.993253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.002787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.038370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.053487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.065458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.082406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.092678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.107498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.120908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.131168][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.138369][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.147929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.156790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.183781][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.201319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.214238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.224383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.233608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.242656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.251796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.260573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.269652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.278264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.290968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.300188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.308900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.325525][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.337609][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.358286][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.365377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.374514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.376736][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 65.383554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.387884][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 65.387924][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 65.431409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.450890][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.456258][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 65.463843][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.467525][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 65.488981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.506845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.520732][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.527901][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.537594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.546286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.554797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.582200][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.596301][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.636173][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.643308][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.706768][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.715454][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.731665][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.744195][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.770384][ T4273] device veth0_vlan entered promiscuous mode [ 65.777952][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.785417][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.794897][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.806617][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.815286][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.833422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.855296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.864462][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.873418][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.882216][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.890739][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.901612][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.919209][ T4273] device veth1_vlan entered promiscuous mode [ 65.946642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.957893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.986379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.003567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.018896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.039817][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.109578][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.136703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.155501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.169564][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.182614][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.196558][ T4273] device veth0_macvtap entered promiscuous mode [ 66.207796][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.237808][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.247575][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.257360][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.264878][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.276469][ T4273] device veth1_macvtap entered promiscuous mode [ 66.305156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.327599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.336974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.364663][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.390218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.417382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.426575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.435384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.455332][ T4283] device veth0_vlan entered promiscuous mode [ 66.471404][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.488659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.499164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.508915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.517966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.536830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.551287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.587310][ T4280] device veth0_vlan entered promiscuous mode [ 66.603484][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.625645][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.634728][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.649466][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.665859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.680466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.690837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.700051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.709935][ T4283] device veth1_vlan entered promiscuous mode [ 66.752845][ T4280] device veth1_vlan entered promiscuous mode [ 66.770300][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.782693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.803994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.811693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.855985][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.892014][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.909576][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.918790][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.928357][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.937812][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.946446][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.959114][ T4283] device veth0_macvtap entered promiscuous mode [ 66.974990][ T4277] device veth0_vlan entered promiscuous mode [ 66.997316][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.005780][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.014027][ T4283] device veth1_macvtap entered promiscuous mode [ 67.023140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.034021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.042716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.052244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.064053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.076010][ T4280] device veth0_macvtap entered promiscuous mode [ 67.093713][ T4277] device veth1_vlan entered promiscuous mode [ 67.114639][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.130034][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.142151][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.163290][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.179517][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.180546][ T4280] device veth1_macvtap entered promiscuous mode [ 67.195421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.204103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.212342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.221734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.229962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.239223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.248215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.257471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.266527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.281032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.290073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.299693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.307880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.321505][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.333161][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.346176][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.354188][ T4269] device veth0_vlan entered promiscuous mode [ 67.371257][ T4269] device veth1_vlan entered promiscuous mode [ 67.389004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.400712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.411914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.421182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.430547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.456285][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 67.462337][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 67.463801][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.468623][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 67.518728][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.528740][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.539520][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 67.545635][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 67.552028][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565423][ T4277] device veth0_macvtap entered promiscuous mode [ 67.577964][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.590950][ T4382] bridge0: port 3(vlan2) entered blocking state [ 67.599446][ T4382] bridge0: port 3(vlan2) entered disabled state [ 67.607194][ T4382] device vlan2 entered promiscuous mode [ 67.613547][ T4382] device dummy0 entered promiscuous mode [ 67.620209][ T4382] bridge0: port 3(vlan2) entered blocking state [ 67.626778][ T4382] bridge0: port 3(vlan2) entered forwarding state [ 67.677511][ T4277] device veth1_macvtap entered promiscuous mode [ 67.698741][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.728280][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.740663][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.751620][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.773401][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.805325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.814286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.825075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.841405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.854032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.866221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.875098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.897743][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.914846][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.933454][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.954792][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.966768][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.985000][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.000571][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.011053][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.021895][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.032035][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.042618][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.053580][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.065288][ T4269] device veth0_macvtap entered promiscuous mode [ 68.073327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.081761][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.090620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.100620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.109370][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.124844][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.134286][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.146671][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.155866][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.183119][ T4387] device syzkaller0 entered promiscuous mode [ 68.202460][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.213196][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.223548][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.238771][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.248877][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.260387][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.272351][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.282680][ T4269] device veth1_macvtap entered promiscuous mode [ 69.311422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.320455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.331210][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.340434][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.349877][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.361075][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.418609][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.475509][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.492872][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.503469][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.520327][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.532388][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.536016][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 69.548409][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 69.548419][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 69.548625][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.576877][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.591000][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.605330][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.615691][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 69.615962][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 69.628948][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.670565][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.691643][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.702083][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.731674][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.732839][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.752868][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.757307][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.778672][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.789629][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.799954][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.810496][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.820510][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.832147][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.850274][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.865144][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.902042][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.911669][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.925714][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.961355][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.974449][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.990605][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.032584][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.058323][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.117154][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.175862][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.184039][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.224877][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.245747][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.281687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.313826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.334948][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.373686][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.390236][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.398061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.417165][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.486807][ T4418] Bluetooth: MGMT ver 1.22 [ 70.492812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.529530][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.552779][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.596120][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.676217][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 70.760903][ T4424] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.800569][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.829506][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.843060][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.872995][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.886323][ T4432] Zero length message leads to an empty skb [ 71.051757][ T4436] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.426894][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444098][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.363776][ T4474] netlink: 'syz.4.30': attribute type 3 has an invalid length. [ 72.483200][ T4474] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.511721][ T4474] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.579591][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 73.298966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.299238][ T4495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 73.307258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 73.317447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.324346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 73.340709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 73.345579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.348987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 73.365930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 73.366384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.374223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 73.382449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 74.380678][ T4502] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 75.973886][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 76.060572][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 76.120837][ T4542] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 76.177459][ T4546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 76.251580][ T4547] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 76.498771][ T3533] cfg80211: failed to load regulatory.db [ 77.422854][ T4562] syz.3.64 uses obsolete (PF_INET,SOCK_PACKET) [ 78.079598][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 78.118568][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 78.151344][ T4589] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 78.218517][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.71'. [ 78.977446][ T1161] block nbd1: Attempted send on invalid socket [ 78.984840][ T1161] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 79.003442][ T4610] XFS (nbd1): SB validate failed with error -5. [ 79.857941][ T4626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 79.874337][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 80.678458][ T4656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 80.758203][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'. [ 80.933656][ T4670] tc_dump_action: action bad kind [ 81.326873][ T4682] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 81.341013][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 81.376241][ T4685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.595867][ T4685] netlink: 'syz.2.114': attribute type 13 has an invalid length. [ 84.906611][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.914652][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.698601][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.763335][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.342718][ T4685] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.353160][ T4685] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.365663][ T4685] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.379363][ T4685] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.579371][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 86.596019][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.602846][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.609734][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.623735][ T4729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.641482][ T4730] netlink: 'syz.3.128': attribute type 33 has an invalid length. [ 86.652773][ T4730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.128'. [ 86.668625][ T4616] bridge0: port 3(vlan2) entered disabled state [ 86.703846][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.712465][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.719913][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.728137][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.735805][ T4729] virt_wifi0 speed is unknown, defaulting to 1000 [ 86.753480][ T4757] netlink: 76 bytes leftover after parsing attributes in process `syz.4.132'. [ 86.764529][ T4738] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 86.817649][ T4731] virt_wifi0 speed is unknown, defaulting to 1000 [ 87.069419][ T4767] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 87.093209][ T4772] Cannot find add_set index 0 as target [ 87.129381][ T4767] team0: Port device dummy0 added [ 87.180773][ T4773] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 87.218892][ T4773] team0: Port device dummy0 removed [ 87.281512][ T4773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 88.624307][ T4806] device syzkaller0 entered promiscuous mode [ 89.341736][ T1161] block nbd4: Attempted send on invalid socket [ 89.355809][ T1161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 89.372036][ T4820] XFS (nbd4): SB validate failed with error -5. [ 89.731834][ T4849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'. [ 89.792163][ T4849] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 90.889264][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 91.426144][ T4904] Bluetooth: MGMT ver 1.22 [ 91.937937][ T4916] siw: device registration error -23 [ 92.213341][ T4931] netlink: 'syz.3.181': attribute type 3 has an invalid length. [ 92.293985][ T4931] siw: device registration error -23 [ 92.303507][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 92.353568][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 93.915366][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 94.207035][ T4980] device gre1 entered promiscuous mode [ 95.143063][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'. [ 96.522351][ T5014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.344221][ T5038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 97.378842][ T5034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.518010][ T5034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.139591][ T5034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.367943][ T5034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.584806][ T5034] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.676850][ T5034] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.717094][ T5034] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.797483][ T5064] device gre1 entered promiscuous mode [ 100.682285][ T5034] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.938686][ T5084] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 101.058875][ T5084] bridge0: port 3(vlan2) entered disabled state [ 101.117140][ T5084] team0: Port device dummy0 added [ 101.133322][ T5086] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 101.193340][ T5086] bridge0: port 3(vlan2) entered disabled state [ 101.228235][ T5086] team0: Port device dummy0 removed [ 101.244307][ T5086] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.682614][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 101.831532][ T5105] device syzkaller1 entered promiscuous mode [ 102.049330][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 102.079927][ T5107] device dummy0 entered promiscuous mode [ 102.106407][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 102.189492][ T5113] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 102.401367][ T5120] netlink: 280 bytes leftover after parsing attributes in process `syz.0.243'. [ 103.653061][ T5143] device syzkaller0 entered promiscuous mode [ 105.606520][ T5168] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 105.648661][ T5168] team0: Device dummy0 failed to register rx_handler [ 105.711406][ T5171] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 105.773627][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 105.793424][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 105.802529][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 106.039912][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 106.217174][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.262585][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.493424][ T5199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.959030][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 108.647104][ T5246] netlink: 68 bytes leftover after parsing attributes in process `syz.3.295'. [ 108.901991][ T5254] device syzkaller1 entered promiscuous mode [ 109.318428][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 109.683054][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 109.721539][ T5260] bridge0: port 3(vlan2) entered blocking state [ 109.743128][ T5260] bridge0: port 3(vlan2) entered disabled state [ 109.762713][ T5260] device vlan2 entered promiscuous mode [ 109.795676][ T5260] device team0 entered promiscuous mode [ 109.801282][ T5260] device team_slave_0 entered promiscuous mode [ 109.835851][ T5260] device team_slave_1 entered promiscuous mode [ 109.866509][ T5260] bridge0: port 3(vlan2) entered blocking state [ 109.874562][ T5260] bridge0: port 3(vlan2) entered forwarding state [ 110.521090][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.535836][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.555819][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.564587][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.573446][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.584344][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.843861][ T5274] virt_wifi0 speed is unknown, defaulting to 1000 [ 110.950522][ T5288] virt_wifi0 speed is unknown, defaulting to 1000 [ 111.364500][ T5288] chnl_net:caif_netlink_parms(): no params data found [ 111.512313][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.581686][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.622819][ T5288] device bridge_slave_0 entered promiscuous mode [ 111.671400][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.688548][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.706674][ T5288] device bridge_slave_1 entered promiscuous mode [ 112.011044][ T1161] block nbd4: Attempted send on invalid socket [ 112.018389][ T1161] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 112.035314][ T5325] XFS (nbd4): SB validate failed with error -5. [ 112.348999][ T5288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.617191][ T5288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.655981][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 113.653038][ T5339] netlink: 76 bytes leftover after parsing attributes in process `syz.4.323'. [ 113.680647][ T5288] team0: Port device team_slave_0 added [ 113.700649][ T5337] tipc: Started in network mode [ 113.732332][ T5337] tipc: Node identity 5a3bb60fcedb, cluster identity 4711 [ 113.741411][ T5337] tipc: Enabled bearer , priority 0 [ 113.777788][ T5288] team0: Port device team_slave_1 added [ 113.783908][ T5342] device syzkaller0 entered promiscuous mode [ 113.833492][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 113.881827][ T5336] tipc: Resetting bearer [ 113.951882][ T5336] tipc: Disabling bearer [ 113.990015][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.005602][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.072411][ T5288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.112948][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.145729][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.203148][ T5288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.352287][ T5351] device syzkaller0 entered promiscuous mode [ 114.499484][ T5288] device hsr_slave_0 entered promiscuous mode [ 114.522485][ T5288] device hsr_slave_1 entered promiscuous mode [ 114.546459][ T5288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.588813][ T5288] Cannot create hsr debugfs directory [ 114.743901][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 116.816453][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 116.892315][ T5375] netlink: 76 bytes leftover after parsing attributes in process `syz.3.334'. [ 116.913504][ T5383] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 116.933473][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 117.264690][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 118.428030][ T5427] netlink: 76 bytes leftover after parsing attributes in process `syz.0.348'. [ 118.544675][ T5431] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 118.672019][ T5431] device bond1 entered promiscuous mode [ 118.702645][ T5431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.778368][ T5432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 118.796236][ T5444] netlink: 48 bytes leftover after parsing attributes in process `syz.4.354'. [ 118.891501][ T5288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.899156][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 118.949297][ T5288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.995184][ T5431] bond1: (slave bridge2): making interface the new active one [ 119.022208][ T5431] device bridge2 entered promiscuous mode [ 119.121404][ T5431] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 119.264782][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 119.664940][ T5288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.785094][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.856765][ T5288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.114270][ T5469] netlink: 76 bytes leftover after parsing attributes in process `syz.4.361'. [ 120.426545][ T5481] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 120.434365][ T5481] netlink: 2 bytes leftover after parsing attributes in process `syz.0.364'. [ 120.547132][ T5481] bridge0: port 4(team0) entered blocking state [ 120.553589][ T5481] bridge0: port 4(team0) entered disabled state [ 120.590649][ T5481] bridge0: port 4(team0) entered blocking state [ 120.597174][ T5481] bridge0: port 4(team0) entered forwarding state [ 120.850315][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.915686][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 120.980302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.004236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.066581][ T5288] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.084273][ T5511] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.156139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.192454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.217155][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.224340][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.258869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.294341][ T5511] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.421369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.437929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.459186][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.468242][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.481577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.498244][ T5511] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.564225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.581803][ T5511] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.655730][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.697312][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.826747][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.855272][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.878306][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.911154][ T5288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.946623][ T5288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.008715][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.045049][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.073880][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.102874][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.123306][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.151868][ T5542] netlink: 76 bytes leftover after parsing attributes in process `syz.4.376'. [ 122.242067][ T5511] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.318373][ T5511] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.386144][ T5511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.402061][ T5553] raw_sendmsg: syz.0.378 forgot to set AF_INET. Fix it! [ 122.652685][ T5511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.933982][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 123.011839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.031286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.095705][ T4396] device hsr_slave_0 left promiscuous mode [ 123.114363][ T4396] device hsr_slave_1 left promiscuous mode [ 123.130939][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.146949][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.175987][ T4396] device bridge_slave_1 left promiscuous mode [ 123.193864][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.215371][ T4396] device bridge_slave_0 left promiscuous mode [ 123.225823][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.693031][ T4396] bond1 (unregistering): Released all slaves [ 124.970250][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 125.014518][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 125.055074][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.097820][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.366774][ T4396] bond0 (unregistering): Released all slaves [ 125.443421][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.460850][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 125.488258][ T5606] bridge0: port 4(vlan3) entered blocking state [ 125.499480][ T5606] bridge0: port 4(vlan3) entered disabled state [ 125.517270][ T5606] device vlan3 entered promiscuous mode [ 125.522876][ T5606] device team0 entered promiscuous mode [ 125.555592][ T5606] device team_slave_0 entered promiscuous mode [ 125.566239][ T5606] device team_slave_1 entered promiscuous mode [ 125.583344][ T5606] bridge0: port 4(vlan3) entered blocking state [ 125.589757][ T5606] bridge0: port 4(vlan3) entered forwarding state [ 125.626246][ T5617] netlink: 280 bytes leftover after parsing attributes in process `syz.4.389'. [ 125.649631][ T5622] netlink: 76 bytes leftover after parsing attributes in process `syz.1.388'. [ 125.871578][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 127.091449][ T5652] tipc: Started in network mode [ 127.120163][ T5652] tipc: Node identity 9af0da16f274, cluster identity 4711 [ 127.146459][ T5652] tipc: Enabled bearer , priority 0 [ 127.180372][ T5659] device syzkaller0 entered promiscuous mode [ 127.258352][ T5658] device syzkaller0 entered promiscuous mode [ 127.275255][ T5655] tipc: Enabled bearer , priority 0 [ 127.361141][ T5666] tipc: Resetting bearer [ 129.064306][ T5655] tipc: Resetting bearer [ 129.076387][ T5651] tipc: Resetting bearer [ 129.095185][ T5651] tipc: Disabling bearer [ 129.142358][ T5654] tipc: Disabling bearer [ 129.151637][ T4352] tipc: Node number set to 1753537046 [ 129.164934][ T4342] tipc: Node number set to 2497754639 [ 129.171083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.180745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.197247][ T5686] netlink: 280 bytes leftover after parsing attributes in process `syz.4.402'. [ 129.257836][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.276719][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.296784][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.317790][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.358051][ T5288] device veth0_vlan entered promiscuous mode [ 129.387424][ T5288] device veth1_vlan entered promiscuous mode [ 129.431716][ T5288] device veth0_macvtap entered promiscuous mode [ 129.458024][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.472584][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.490864][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.519269][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.544885][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.573492][ T5288] device veth1_macvtap entered promiscuous mode [ 129.600715][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 129.654631][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.685257][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.700948][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.713123][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.728772][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.742148][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.772448][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.811312][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.841997][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.861871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.878697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.899357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.923661][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.943583][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.969195][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.002163][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.029949][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.062851][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.090977][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.133776][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.152209][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.161839][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.214457][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.247230][ T5288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.283704][ T5288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.294893][ T5288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.318967][ T5288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.372909][ T5723] device syzkaller0 entered promiscuous mode [ 130.639671][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.691837][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.747353][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.754219][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.755354][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.810284][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.853156][ T5738] netlink: 280 bytes leftover after parsing attributes in process `syz.1.419'. [ 130.873738][ T5740] SET target dimension over the limit! [ 131.001746][ T5746] device syzkaller1 entered promiscuous mode [ 131.313869][ T5752] siw: device registration error -23 [ 132.534461][ T5787] netlink: 272 bytes leftover after parsing attributes in process `syz.3.432'. [ 132.677199][ T5793] SET target dimension over the limit! [ 132.827820][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834205][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.555874][ T5809] siw: device registration error -23 [ 133.877275][ T5814] netlink: 'syz.4.440': attribute type 6 has an invalid length. [ 134.122653][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.441'. [ 134.131132][ T5823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.185280][ T5820] bridge0: port 3(vlan2) entered blocking state [ 134.302206][ T5820] bridge0: port 3(vlan2) entered disabled state [ 134.316950][ T5820] device vlan2 entered promiscuous mode [ 134.332795][ T5820] device team0 entered promiscuous mode [ 134.342921][ T5820] device team_slave_0 entered promiscuous mode [ 134.379249][ T5820] device team_slave_1 entered promiscuous mode [ 134.396595][ T5820] bridge0: port 3(vlan2) entered blocking state [ 134.403063][ T5820] bridge0: port 3(vlan2) entered forwarding state [ 134.433556][ T5836] netlink: 272 bytes leftover after parsing attributes in process `syz.0.446'. [ 134.611903][ T5843] SET target dimension over the limit! [ 134.689617][ T5845] device syzkaller0 entered promiscuous mode [ 134.814748][ T5851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.452'. [ 135.246860][ T5877] netlink: 272 bytes leftover after parsing attributes in process `syz.1.463'. [ 135.367492][ T5882] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 135.521028][ T5888] SET target dimension over the limit! [ 135.569140][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.623384][ T5890] bridge0: port 4(team0) entered disabled state [ 135.891698][ T52] block nbd3: Attempted send on invalid socket [ 135.898384][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 135.912272][ T5894] XFS (nbd3): SB validate failed with error -5. [ 136.110424][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.287576][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.417806][ T5890] device bridge_slave_0 left promiscuous mode [ 136.428554][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.473108][ T5890] device bridge_slave_1 left promiscuous mode [ 136.498907][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.545506][ T5890] bond0: (slave bond_slave_0): Releasing backup interface [ 136.581219][ T5890] bond0: (slave bond_slave_1): Releasing backup interface [ 136.613411][ T5890] device team_slave_0 left promiscuous mode [ 136.661499][ T5890] team0: Port device team_slave_0 removed [ 136.679518][ T5890] device team_slave_1 left promiscuous mode [ 136.712624][ T5890] team0: Port device team_slave_1 removed [ 136.723105][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.730934][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.755397][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.768622][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.811868][ T5890] device vlan2 left promiscuous mode [ 136.844533][ T5890] bridge0: port 3(vlan2) entered disabled state [ 136.941407][ T5932] siw: device registration error -23 [ 136.971930][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 137.023433][ T5910] netlink: 'syz.5.471': attribute type 3 has an invalid length. [ 137.461225][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 137.701289][ T5938] netlink: 272 bytes leftover after parsing attributes in process `syz.0.475'. [ 137.918678][ T5942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.477'. [ 137.932402][ T5945] netlink: 'syz.5.478': attribute type 1 has an invalid length. [ 138.029964][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.478'. [ 138.050333][ T5945] device veth0_to_bond entered promiscuous mode [ 138.572116][ T5966] tipc: Enabled bearer , priority 0 [ 138.602043][ T5966] device syzkaller0 entered promiscuous mode [ 138.660837][ T5970] tipc: Resetting bearer [ 138.785837][ T5965] tipc: Resetting bearer [ 139.046113][ T5965] tipc: Disabling bearer [ 139.143776][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 139.828462][ T5996] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 140.181999][ T6010] netlink: 'syz.4.497': attribute type 3 has an invalid length. [ 140.485003][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 140.557570][ T52] block nbd3: Attempted send on invalid socket [ 140.560596][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.563887][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 140.582895][ T6012] XFS (nbd3): SB validate failed with error -5. [ 140.758337][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.785658][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.804939][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.859235][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.904563][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.925590][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.958042][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.970512][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.981897][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.994088][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.005638][ T6004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.017561][ T6004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.111972][ T6004] syz.1.496 (6004) used greatest stack depth: 18136 bytes left [ 141.145059][ T125] virt_wifi0 speed is unknown, defaulting to 1000 [ 141.261320][ T6008] syz.1.496 (6008) used greatest stack depth: 17680 bytes left [ 141.386024][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'. [ 141.758324][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 141.796087][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 141.932233][ T6076] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 142.041607][ T6076] siw: device registration error -23 [ 142.065346][ T6082] tipc: Started in network mode [ 142.071554][ T6082] tipc: Node identity b69d78bfe55a, cluster identity 4711 [ 142.084605][ T6082] tipc: Enabled bearer , priority 0 [ 142.094229][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 142.111466][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 142.136225][ T6082] device syzkaller0 entered promiscuous mode [ 142.212920][ T6082] tipc: Resetting bearer [ 142.257986][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'. [ 142.313511][ T6079] tipc: Resetting bearer [ 142.396626][ T6079] tipc: Disabling bearer [ 142.436696][ T6096] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 143.013422][ T6123] siw: device registration error -23 [ 143.120088][ T6124] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 143.561406][ T6124] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 143.950909][ T6135] netlink: 'syz.5.531': attribute type 3 has an invalid length. [ 143.976151][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 144.022191][ T6134] bridge0: port 3(vlan2) entered blocking state [ 144.036471][ T6134] bridge0: port 3(vlan2) entered disabled state [ 144.044284][ T6134] device vlan2 entered promiscuous mode [ 144.052020][ T6134] device team0 entered promiscuous mode [ 144.058199][ T6134] device team_slave_0 entered promiscuous mode [ 144.064662][ T6134] device team_slave_1 entered promiscuous mode [ 144.072172][ T6134] bridge0: port 3(vlan2) entered blocking state [ 144.078589][ T6134] bridge0: port 3(vlan2) entered forwarding state [ 144.093698][ T6137] netlink: 'syz.1.533': attribute type 10 has an invalid length. [ 144.161266][ T6135] siw: device registration error -23 [ 144.194965][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'. [ 144.281585][ T6146] tipc: Enabled bearer , priority 0 [ 144.357314][ T6146] device syzkaller0 entered promiscuous mode [ 144.439357][ T6146] tipc: Resetting bearer [ 144.446014][ T6151] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.540589][ T6145] tipc: Resetting bearer [ 144.590834][ T6145] tipc: Disabling bearer [ 145.035889][ T6183] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 145.061914][ T6183] device bond1 entered promiscuous mode [ 145.070508][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.080614][ T6182] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 145.092048][ T6182] bridge0: port 3(vlan2) entered disabled state [ 145.104951][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 145.219952][ T6183] bond1: (slave bridge2): making interface the new active one [ 145.245957][ T6183] device bridge2 entered promiscuous mode [ 145.253931][ T6183] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 145.271821][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 145.954269][ T6215] netlink: 72 bytes leftover after parsing attributes in process `syz.5.554'. [ 146.194976][ T6227] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 146.296452][ T6215] netlink: 'syz.5.554': attribute type 2 has an invalid length. [ 146.315353][ T6215] netlink: 119 bytes leftover after parsing attributes in process `syz.5.554'. [ 146.377808][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 146.420176][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 146.471152][ T6236] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 148.353215][ T1161] block nbd5: Attempted send on invalid socket [ 148.359543][ T1161] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 148.388889][ T6245] XFS (nbd5): SB validate failed with error -5. [ 149.310407][ T6287] __nla_validate_parse: 1 callbacks suppressed [ 149.310425][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.576'. [ 149.358553][ T6284] netlink: 'syz.0.577': attribute type 33 has an invalid length. [ 149.389881][ T6284] netlink: 152 bytes leftover after parsing attributes in process `syz.0.577'. [ 149.901065][ T1161] block nbd3: Attempted send on invalid socket [ 149.908115][ T1161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 149.922595][ T6298] XFS (nbd3): SB validate failed with error -5. [ 150.923812][ T6320] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 151.144449][ T1161] block nbd0: Attempted send on invalid socket [ 151.150824][ T1161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 151.161829][ T6316] XFS (nbd0): SB validate failed with error -5. [ 152.271378][ T1161] block nbd1: Attempted send on invalid socket [ 152.277865][ T1161] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 152.289541][ T6368] XFS (nbd1): SB validate failed with error -5. [ 152.441708][ T6345] bridge0: port 3(vlan2) entered disabled state [ 152.448345][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.455832][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.820768][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.857132][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.155007][ T6345] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.164433][ T6345] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.173440][ T6345] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.182494][ T6345] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.408597][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 153.438365][ T6383] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 155.025926][ T6413] netlink: 'syz.5.611': attribute type 3 has an invalid length. [ 155.067676][ T6413] siw: device registration error -23 [ 155.073897][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.611'. [ 155.320266][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 155.366612][ T6429] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 155.717432][ T1161] block nbd0: Attempted send on invalid socket [ 155.723671][ T1161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 155.734807][ T6440] XFS (nbd0): SB validate failed with error -5. [ 155.905338][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 156.146267][ T6463] siw: device registration error -23 [ 157.079637][ T6478] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.465399][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 157.696980][ T6511] netlink: 'syz.4.643': attribute type 33 has an invalid length. [ 157.735810][ T6511] netlink: 152 bytes leftover after parsing attributes in process `syz.4.643'. [ 157.744832][ T6511] `: renamed from team0 [ 158.294166][ T6539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.651'. [ 158.810205][ T6555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.984184][ T6565] netlink: 76 bytes leftover after parsing attributes in process `syz.5.656'. [ 159.226789][ T6555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.260841][ T6576] netlink: 'syz.0.658': attribute type 33 has an invalid length. [ 159.268779][ T6576] netlink: 152 bytes leftover after parsing attributes in process `syz.0.658'. [ 159.424417][ T6555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.614245][ T6555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.705992][ T6594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'. [ 159.840011][ T6555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.900064][ T6555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.972465][ T6555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.021535][ T6555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.172472][ T6612] netlink: 76 bytes leftover after parsing attributes in process `syz.0.670'. [ 160.331231][ T6618] netlink: 'syz.5.672': attribute type 33 has an invalid length. [ 160.376494][ T6618] netlink: 152 bytes leftover after parsing attributes in process `syz.5.672'. [ 160.613076][ T6627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'. [ 161.380151][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.677'. [ 161.604329][ T6643] siw: device registration error -23 [ 162.468633][ T6662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.687'. [ 162.470871][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 162.541140][ T6660] bridge0: port 3(vlan2) entered blocking state [ 162.575952][ T6660] bridge0: port 3(vlan2) entered disabled state [ 162.596151][ T6660] device vlan2 entered promiscuous mode [ 162.625787][ T6660] device team0 entered promiscuous mode [ 162.643150][ T6660] device team_slave_0 entered promiscuous mode [ 162.685839][ T6660] device team_slave_1 entered promiscuous mode [ 162.693537][ T6660] bridge0: port 3(vlan2) entered blocking state [ 162.700005][ T6660] bridge0: port 3(vlan2) entered forwarding state [ 162.847466][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.858267][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.868232][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.880436][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.984594][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.511246][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.540924][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.572843][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.596417][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.655728][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.675666][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.714245][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.823592][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 165.270741][ T52] block nbd1: Attempted send on invalid socket [ 165.277096][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 165.294489][ T6712] XFS (nbd1): SB validate failed with error -5. [ 166.314920][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.5.707'. [ 166.477808][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.567153][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.817383][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.562900][ T6748] netlink: 'syz.5.712': attribute type 10 has an invalid length. [ 167.631720][ T6748] device dummy0 entered promiscuous mode [ 167.653882][ T6748] team0: Port device dummy0 added [ 168.737922][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.894442][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.938440][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.967658][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.011288][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.050531][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.089739][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.123059][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.147033][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.232236][ T6801] bond0: (slave rose0): Enslaving as an active interface with an up link [ 169.264992][ T3533] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.857602][ C1] llc_conn_state_process: llc_conn_service failed [ 170.353966][ T6821] netlink: 52 bytes leftover after parsing attributes in process `syz.0.727'. [ 170.511482][ T6831] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 170.525411][ T6831] bond0: (slave dummy0): Releasing backup interface [ 170.589397][ T6831] team0: Port device dummy0 added [ 171.628753][ T6846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.734'. [ 171.783836][ T1161] block nbd5: Attempted send on invalid socket [ 171.790349][ T1161] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 171.803748][ T6848] XFS (nbd5): SB validate failed with error -5. [ 174.530937][ T6869] netlink: 'syz.1.734': attribute type 2 has an invalid length. [ 174.556153][ T6869] netlink: 119 bytes leftover after parsing attributes in process `syz.1.734'. [ 177.326976][ T6878] netlink: 'syz.4.738': attribute type 3 has an invalid length. [ 177.337514][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.741'. [ 177.376400][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 177.388670][ T6908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.743'. [ 177.668751][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.702562][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.716505][ T6918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.788610][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.833218][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.861819][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.872843][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.887615][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.007188][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.495188][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.567603][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.630102][ T6920] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 178.641039][ T6920] team0: Device dummy0 failed to register rx_handler [ 178.924421][ T1161] block nbd3: Attempted send on invalid socket [ 178.931099][ T1161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 178.944229][ T6950] XFS (nbd3): SB validate failed with error -5. [ 179.321626][ T6974] netlink: 52 bytes leftover after parsing attributes in process `syz.1.756'. [ 180.883897][ T7001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.920746][ T7001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.956522][ T7001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.142066][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.167553][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.178040][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.203045][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.216247][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.227465][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.241123][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.252617][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.446742][ T7032] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 181.550135][ T7032] device bond1 entered promiscuous mode [ 181.577907][ T7032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.601369][ T7032] bond1: (slave bridge5): making interface the new active one [ 181.610203][ T7032] device bridge5 entered promiscuous mode [ 181.617087][ T7032] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 181.626700][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'. [ 181.765957][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 182.038488][ T7049] device syzkaller0 entered promiscuous mode [ 182.866250][ T7071] tipc: Enabling of bearer rejected, failed to enable media [ 183.336202][ T7090] netlink: 244 bytes leftover after parsing attributes in process `syz.3.787'. [ 183.659220][ T7099] device syzkaller0 entered promiscuous mode [ 183.843184][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 183.987553][ T7115] tipc: Started in network mode [ 184.002847][ T7115] tipc: Node identity fe0bc768d206, cluster identity 4711 [ 184.023536][ T7115] tipc: Enabled bearer , priority 0 [ 184.270444][ T7110] bridge0: port 3(vlan2) entered disabled state [ 184.276942][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.284216][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.590957][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.628190][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.924854][ T7110] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.942102][ T7110] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.950661][ T7110] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.959107][ T7110] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.025909][ T7118] netlink: 52 bytes leftover after parsing attributes in process `syz.5.800'. [ 185.026445][ T7116] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 185.065623][ T7116] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 185.108305][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.116607][ T7116] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.132671][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.149741][ T7114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.213616][ T7127] tipc: Resetting bearer [ 185.244655][ T7113] tipc: Disabling bearer [ 185.275720][ T5903] tipc: Node number set to 739100520 [ 185.574563][ T7143] netlink: 72 bytes leftover after parsing attributes in process `syz.4.809'. [ 185.610717][ T7143] netlink: 'syz.4.809': attribute type 2 has an invalid length. [ 185.669587][ T7143] netlink: 119 bytes leftover after parsing attributes in process `syz.4.809'. [ 185.692434][ T7144] device gre1 entered promiscuous mode [ 185.856161][ T4455] wlan1: Trigger new scan to find an IBSS to join [ 186.106320][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 186.112423][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 186.112448][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 186.302315][ T7164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.816'. [ 186.609790][ T7173] netlink: 'syz.5.819': attribute type 10 has an invalid length. [ 186.639274][ T7173] device dummy0 left promiscuous mode [ 186.676897][ T7173] team0: Port device dummy0 removed [ 186.703326][ T7175] device syzkaller0 entered promiscuous mode [ 186.942445][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.033163][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.098780][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.127432][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.161774][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.178611][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.196796][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.228331][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.304581][ T7190] tipc: Enabled bearer , priority 0 [ 187.340944][ T4403] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.360466][ T7187] tipc: Resetting bearer [ 187.421854][ T7186] tipc: Disabling bearer [ 187.445111][ T7204] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 187.493783][ T7204] device bond2 entered promiscuous mode [ 187.512683][ T7204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.623895][ T7204] bond2: (slave bridge4): making interface the new active one [ 187.686010][ T7204] device bridge4 entered promiscuous mode [ 187.698450][ T7204] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 187.717865][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 187.795056][ T1161] block nbd5: Attempted send on invalid socket [ 187.801731][ T1161] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 187.814218][ T7219] XFS (nbd5): SB validate failed with error -5. [ 188.306376][ T52] block nbd0: Attempted send on invalid socket [ 188.313577][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 188.329032][ T7239] XFS (nbd0): SB validate failed with error -5. [ 188.815933][ T4355] wlan1: Trigger new scan to find an IBSS to join [ 189.252422][ T7257] device syzkaller0 entered promiscuous mode [ 189.317755][ T7260] netlink: 'syz.5.850': attribute type 1 has an invalid length. [ 189.383452][ T7260] device bond1 entered promiscuous mode [ 189.392241][ T7260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.411250][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 189.433596][ T1161] block nbd1: Attempted send on invalid socket [ 189.440151][ T1161] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 189.453027][ T7273] XFS (nbd1): SB validate failed with error -5. [ 189.490851][ T7260] bond1: (slave bridge1): making interface the new active one [ 189.506879][ T7260] device bridge1 entered promiscuous mode [ 189.521782][ T7260] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 189.543263][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 189.706528][ T7283] SET target dimension over the limit! [ 189.829546][ T7288] netlink: 'syz.1.858': attribute type 33 has an invalid length. [ 189.851184][ T7288] netlink: 152 bytes leftover after parsing attributes in process `syz.1.858'. [ 189.862902][ T7288] `: renamed from team0 [ 190.269312][ T7309] device syzkaller0 entered promiscuous mode [ 190.289852][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 190.483799][ T7316] SET target dimension over the limit! [ 190.693800][ T7326] netlink: 52 bytes leftover after parsing attributes in process `syz.4.874'. [ 190.918520][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.879'. [ 190.971311][ T7340] SET target dimension over the limit! [ 191.163164][ T7349] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 191.620651][ T7370] SET target dimension over the limit! [ 191.855766][ T4455] wlan1: Trigger new scan to find an IBSS to join [ 192.867249][ T4609] wlan1: Creating new IBSS network, BSSID 0e:60:c6:c0:ca:e1 [ 193.359655][ T7395] device syzkaller0 entered promiscuous mode [ 193.444769][ T7397] netlink: 72 bytes leftover after parsing attributes in process `syz.0.903'. [ 193.470107][ T7397] netlink: 'syz.0.903': attribute type 2 has an invalid length. [ 193.490470][ T7397] netlink: 119 bytes leftover after parsing attributes in process `syz.0.903'. [ 194.051695][ T52] block nbd1: Attempted send on invalid socket [ 194.058379][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 194.070711][ T7415] XFS (nbd1): SB validate failed with error -5. [ 194.167535][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 194.261604][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268798][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.839455][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 195.000909][ T7430] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.012998][ T7441] device syzkaller0 entered promiscuous mode [ 195.248513][ T7446] siw: device registration error -23 [ 195.274673][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.919'. [ 195.316326][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 196.284100][ T52] block nbd3: Attempted send on invalid socket [ 196.290908][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 196.313064][ T7485] XFS (nbd3): SB validate failed with error -5. [ 197.418528][ T7520] netlink: 'syz.4.942': attribute type 33 has an invalid length. [ 197.432462][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.4.942'. [ 198.430124][ T7541] bridge0: port 4(vlan3) entered disabled state [ 198.436626][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.444036][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.773303][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.807672][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.103280][ T7541] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.111906][ T7541] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.120338][ T7541] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.128789][ T7541] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.304172][ T7543] netlink: 'syz.1.951': attribute type 28 has an invalid length. [ 199.312253][ T7544] netlink: 'syz.0.953': attribute type 3 has an invalid length. [ 199.784510][ T7591] netlink: 72 bytes leftover after parsing attributes in process `syz.4.964'. [ 202.077102][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.5.966'. [ 202.136318][ T7612] device syzkaller0 entered promiscuous mode [ 202.346897][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 202.782707][ T7655] device syzkaller0 entered promiscuous mode [ 203.534421][ T7665] netlink: 72 bytes leftover after parsing attributes in process `syz.0.982'. [ 203.597768][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.611600][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.620897][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.795398][ T7667] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 203.819987][ T7667] team0: Port device dummy0 removed [ 203.871522][ T7667] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 206.527861][ T7738] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 207.020309][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 207.045423][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 207.122331][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 210.009340][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 210.197147][ T7831] netlink: 'syz.4.1037': attribute type 33 has an invalid length. [ 210.216492][ T7831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1037'. [ 210.257051][ T7837] device syzkaller0 entered promiscuous mode [ 210.274675][ T7834] tipc: Enabled bearer , priority 0 [ 210.299403][ T7834] tipc: Resetting bearer [ 210.308578][ T7833] tipc: Disabling bearer [ 211.291271][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 211.381070][ T7864] device syzkaller0 entered promiscuous mode [ 211.892876][ T52] block nbd3: Attempted send on invalid socket [ 211.899346][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 211.913887][ T7874] XFS (nbd3): SB validate failed with error -5. [ 212.733141][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 212.845137][ T7904] device syzkaller0 entered promiscuous mode [ 213.764476][ T1161] block nbd3: Attempted send on invalid socket [ 213.770817][ T1161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 213.783206][ T7929] XFS (nbd3): SB validate failed with error -5. [ 214.540564][ T7945] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1077'. [ 215.728545][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 216.221969][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 216.364707][ T7977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input27 [ 216.376449][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 216.481707][ T7981] device syzkaller0 entered promiscuous mode [ 218.791066][ T8016] tipc: Enabling of bearer rejected, failed to enable media [ 218.876780][ T8029] SET target dimension over the limit! [ 218.980871][ T8031] device syzkaller0 entered promiscuous mode [ 219.265920][ T8051] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 219.435238][ T8057] device syzkaller0 entered promiscuous mode [ 219.461061][ T8058] tipc: Enabled bearer , priority 0 [ 219.989001][ T8075] SET target dimension over the limit! [ 221.563262][ T8058] device syzkaller0 entered promiscuous mode [ 221.588926][ T8071] tipc: Resetting bearer [ 221.600158][ T8056] tipc: Resetting bearer [ 221.662629][ T8056] tipc: Disabling bearer [ 222.027886][ T8119] netlink: 'syz.0.1130': attribute type 33 has an invalid length. [ 222.080840][ T8119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1130'. [ 222.124351][ T8125] SET target dimension over the limit! [ 222.304826][ T8127] device syzkaller0 entered promiscuous mode [ 222.341730][ T8134] tipc: Enabled bearer , priority 0 [ 222.349359][ T8134] device syzkaller0 entered promiscuous mode [ 222.525915][ T8136] tipc: Resetting bearer [ 222.920954][ T4609] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.292058][ T8160] SET target dimension over the limit! [ 224.377410][ T8133] tipc: Resetting bearer [ 224.394715][ T8133] tipc: Disabling bearer [ 224.410612][ T4378] tipc: Node number set to 1405581503 [ 226.141570][ T8189] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.150986][ T8189] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.160259][ T8189] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.169302][ T8189] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.254643][ T8189] device dummy0 left promiscuous mode [ 226.519333][ T8212] netlink: 'syz.1.1163': attribute type 33 has an invalid length. [ 226.536427][ T8212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1163'. [ 226.730638][ T52] block nbd5: Attempted send on invalid socket [ 226.737750][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 226.752449][ T8217] XFS (nbd5): SB validate failed with error -5. [ 227.055610][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 228.143012][ T1161] block nbd0: Attempted send on invalid socket [ 228.150515][ T1161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 228.231406][ T8255] XFS (nbd0): SB validate failed with error -5. [ 228.826474][ T8263] netlink: 'syz.3.1180': attribute type 33 has an invalid length. [ 228.834340][ T8263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1180'. [ 228.900961][ T8263] `: renamed from team0 [ 228.908351][ T8268] netlink: 'syz.5.1182': attribute type 10 has an invalid length. [ 228.928167][ T8268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 229.484390][ T8297] tipc: Enabling of bearer rejected, failed to enable media [ 229.770974][ T52] block nbd4: Attempted send on invalid socket [ 229.777998][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 229.793593][ T8304] XFS (nbd4): SB validate failed with error -5. [ 230.725963][ T8320] netlink: 'syz.1.1199': attribute type 33 has an invalid length. [ 230.733840][ T8320] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1199'. [ 230.998678][ T8336] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 231.034857][ T8336] device bond2 entered promiscuous mode [ 231.051948][ T8336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.082396][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1207'. [ 231.243779][ T8353] tipc: Enabling of bearer rejected, failed to enable media [ 231.814415][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 231.976910][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'. [ 232.529995][ T8375] bridge0: port 3(vlan2) entered disabled state [ 232.536529][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.544018][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.122587][ T8375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.157872][ T8375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.441137][ T8375] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.450139][ T8375] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.459358][ T8375] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.468485][ T8375] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.751672][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 233.845382][ T8437] bond0: (slave vlan3): Opening slave failed [ 234.289557][ T8459] SET target dimension over the limit! [ 234.360168][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 235.986758][ T8490] netlink: 'syz.4.1254': attribute type 10 has an invalid length. [ 236.004633][ T8482] loop0: detected capacity change from 0 to 512 [ 236.024870][ T1161] block nbd3: Attempted send on invalid socket [ 236.031408][ T1161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 236.045113][ T8485] XFS (nbd3): SB validate failed with error -5. [ 236.212288][ T8482] ======================================================= [ 236.212288][ T8482] WARNING: The mand mount option has been deprecated and [ 236.212288][ T8482] and is ignored by this kernel. Remove the mand [ 236.212288][ T8482] option from the mount to silence this warning. [ 236.212288][ T8482] ======================================================= [ 236.342974][ T8490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 236.417893][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 236.661315][ T8482] EXT4-fs error (device loop0): __ext4_fill_super:5423: inode #2: comm syz.0.1252: inode has both inline data and extents flags [ 236.786852][ T8482] EXT4-fs (loop0): get root inode failed [ 236.792552][ T8482] EXT4-fs (loop0): mount failed [ 237.270825][ T8514] pit: kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 237.282973][ T8514] pit: kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 237.298021][ T8514] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 237.311795][ T8514] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 237.390078][ T8527] tipc: Enabled bearer , priority 0 [ 237.402493][ T8527] tipc: Resetting bearer [ 237.411343][ T8526] tipc: Disabling bearer [ 237.511028][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 237.592620][ T8531] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 238.382573][ T8571] loop5: detected capacity change from 0 to 512 [ 238.395450][ T8571] EXT4-fs: Ignoring removed nobh option [ 238.413066][ T8571] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 238.424150][ T8571] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1289: invalid indirect mapped block 256 (level 1) [ 238.442173][ T8571] EXT4-fs (loop5): Remounting filesystem read-only [ 238.449421][ T8571] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1289: invalid indirect mapped block 2683928664 (level 1) [ 238.464856][ T8571] EXT4-fs (loop5): Remounting filesystem read-only [ 238.476548][ T8571] EXT4-fs (loop5): 1 truncate cleaned up [ 238.482215][ T8571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 238.541780][ T5288] EXT4-fs (loop5): unmounting filesystem. [ 238.821243][ T8584] loop3: detected capacity change from 0 to 512 [ 238.871711][ T8584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.935061][ T8584] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.266044][ T8601] loop1: detected capacity change from 0 to 512 [ 239.290421][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 239.298694][ T8601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 239.315613][ T8601] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 239.380110][ T8601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.397285][ T8601] EXT4-fs (loop1): 1 truncate cleaned up [ 239.403086][ T8601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.494825][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 239.792601][ T1161] block nbd1: Attempted send on invalid socket [ 239.799501][ T1161] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 239.816521][ T8619] XFS (nbd1): SB validate failed with error -5. [ 240.685608][ T3533] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 240.882596][ T3533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.894027][ T3533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.904344][ T3533] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.917741][ T3533] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.927905][ T3533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.943032][ T3533] usb 5-1: config 0 descriptor?? [ 241.362405][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.370915][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.383983][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.392219][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.405718][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.418178][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.431116][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.442652][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.452865][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.463976][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.482966][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.510796][ T3533] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 241.539558][ T3533] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 241.611491][ T3533] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.680321][ T3533] usb 5-1: USB disconnect, device number 2 [ 241.789611][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 241.801060][ T8668] netlink: 'syz.0.1317': attribute type 10 has an invalid length. [ 241.842051][ T8666] fido_id[8666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 242.233932][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 242.892240][ T8709] netlink: 'syz.5.1330': attribute type 10 has an invalid length. [ 242.988080][ T8711] netlink: 'syz.5.1331': attribute type 33 has an invalid length. [ 242.999957][ T8711] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1331'. [ 243.010407][ T8711] `: renamed from team0 [ 243.202815][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1333'. [ 243.328613][ T8717] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1334'. [ 244.598186][ T8739] bond0: (slave dummy0): Error: Slave device does not support XDP [ 245.095715][ T8761] 9pnet_virtio: no channels available for device 127.0.0.1 [ 245.920439][ T8776] loop0: detected capacity change from 0 to 1024 [ 245.972753][ T8782] device syzkaller0 entered promiscuous mode [ 246.163997][ T4609] hfsplus: b-tree write err: -5, ino 4 [ 246.195653][ T4314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 246.270901][ T8786] bond0: (slave dummy0): Error: Slave device does not support XDP [ 246.464551][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.536537][ T52] block nbd0: Attempted send on invalid socket [ 246.542867][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 246.557285][ T8794] XFS (nbd0): SB validate failed with error -5. [ 247.234229][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.244101][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.257057][ T4314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.270712][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.290569][ T4314] usb 4-1: config 0 descriptor?? [ 247.717546][ T4314] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 247.761935][ T4314] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 248.175376][ T8832] device syzkaller0 entered promiscuous mode [ 248.249918][ T4335] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 248.272979][ T8836] loop1: detected capacity change from 0 to 1024 [ 248.296201][ T4335] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 248.423001][ T8838] plantronics 0003:047F:FFFF.0002: pid 8838 passed too short report [ 249.100651][ T75] hfsplus: b-tree write err: -5, ino 4 [ 249.191849][ T8853] loop1: detected capacity change from 0 to 512 [ 249.279508][ T8853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.290538][ T8853] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.392367][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 249.779167][ T8874] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1388'. [ 249.866626][ T4378] usb 4-1: USB disconnect, device number 2 [ 250.072250][ T8886] netlink: 'syz.5.1391': attribute type 33 has an invalid length. [ 250.094335][ T8886] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1391'. [ 250.310936][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 250.477454][ T8895] device syzkaller0 entered promiscuous mode [ 251.253306][ T8929] device syzkaller0 entered promiscuous mode [ 251.366654][ T4335] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.574422][ T4335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.590664][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.610218][ T4335] usb 2-1: Product: syz [ 251.614574][ T4335] usb 2-1: Manufacturer: syz [ 251.624752][ T4335] usb 2-1: SerialNumber: syz [ 252.171691][ T8959] loop0: detected capacity change from 0 to 1024 [ 252.266518][ T8959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.561281][ T8972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1425'. [ 252.684919][ T4335] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 253.130047][ T4335] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 253.235007][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 253.339863][ T4378] usb 2-1: USB disconnect, device number 2 [ 253.366630][ T4378] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 253.640111][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1430'. [ 253.973490][ T9011] device syzkaller0 entered promiscuous mode [ 254.092317][ T9021] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 254.320820][ T9025] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1440'. [ 254.591268][ T9039] loop0: detected capacity change from 0 to 1024 [ 254.837834][ T9039] EXT4-fs: Ignoring removed orlov option [ 255.091221][ T9039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.328874][ T9054] netlink: 'syz.3.1445': attribute type 3 has an invalid length. [ 255.343965][ T9054] siw: device registration error -23 [ 255.350741][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 255.446739][ T9039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.699021][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705378][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.096877][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.242752][ T9083] device syzkaller0 entered promiscuous mode [ 256.362228][ T9080] device syzkaller0 entered promiscuous mode [ 256.683493][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 257.534402][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'. [ 258.195198][ T9140] loop4: detected capacity change from 0 to 256 [ 258.623785][ T9158] device syzkaller0 entered promiscuous mode [ 259.242036][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 259.355157][ T9193] netlink: 'syz.1.1486': attribute type 33 has an invalid length. [ 259.377760][ T9193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1486'. [ 259.555127][ T9197] device syzkaller0 entered promiscuous mode [ 259.602499][ T9201] loop1: detected capacity change from 0 to 1024 [ 260.025618][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 260.225850][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 261.085870][ T52] block nbd4: Attempted send on invalid socket [ 261.092377][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 261.115212][ T9219] XFS (nbd4): SB validate failed with error -5. [ 261.428721][ T7] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 261.437545][ T7] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 261.445804][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.459263][ T7] usb 1-1: config 0 has no interface number 0 [ 261.465408][ T7] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 261.477330][ T7] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 59391, setting to 1024 [ 261.489067][ T7] usb 1-1: config 0 interface 104 has no altsetting 1 [ 261.498355][ T7] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 261.507534][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.515598][ T7] usb 1-1: Product: syz [ 261.519806][ T7] usb 1-1: Manufacturer: syz [ 261.524423][ T7] usb 1-1: SerialNumber: syz [ 261.530835][ T7] usb 1-1: config 0 descriptor?? [ 261.539390][ T7] asix: probe of 1-1:0.104 failed with error -22 [ 261.659879][ T9233] netlink: 'syz.3.1500': attribute type 33 has an invalid length. [ 261.685601][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1500'. [ 261.742269][ T7] usb 1-1: USB disconnect, device number 2 [ 261.759892][ T9236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1501'. [ 261.917003][ T9242] device syzkaller0 entered promiscuous mode [ 262.145816][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'. [ 262.438292][ T9259] loop3: detected capacity change from 0 to 2048 [ 262.563486][ T9263] loop0: detected capacity change from 0 to 8192 [ 264.525355][ T9302] device syzkaller0 entered promiscuous mode [ 264.747396][ T9306] 9pnet_virtio: no channels available for device 127.0.0.1 [ 265.086741][ T52] block nbd5: Attempted send on invalid socket [ 265.093404][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 265.105445][ T9312] XFS (nbd5): SB validate failed with error -5. [ 266.029528][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1530'. [ 266.203414][ T9339] loop3: detected capacity change from 0 to 512 [ 266.229149][ T9339] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.238735][ T9339] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 266.262609][ T9339] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 266.274736][ T9339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 266.283020][ T9339] System zones: 0-2, 18-18, 34-34 [ 266.307862][ T9339] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1532: iget: bad i_size value: 360287970189639680 [ 266.323091][ T9339] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1532: couldn't read orphan inode 15 (err -117) [ 266.336027][ T9339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.628517][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 266.715917][ T9351] netlink: 'syz.5.1535': attribute type 33 has an invalid length. [ 266.730818][ T9351] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1535'. [ 266.939826][ T9353] device syzkaller0 entered promiscuous mode [ 268.335938][ T52] block nbd5: Attempted send on invalid socket [ 268.342294][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 268.356458][ T9375] XFS (nbd5): SB validate failed with error -5. [ 270.578591][ T9367] device syzkaller0 entered promiscuous mode [ 270.810135][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'. [ 270.847123][ T9409] loop4: detected capacity change from 0 to 1024 [ 270.854246][ T9409] EXT4-fs: Ignoring removed orlov option [ 270.898980][ T9412] netlink: 'syz.1.1548': attribute type 33 has an invalid length. [ 270.935416][ T9412] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1548'. [ 270.949745][ T9414] virtiofs: Unknown parameter 'always' [ 270.986555][ T9409] EXT4-fs (loop4): cluster size (1024) smaller than block size (2048) [ 271.055510][ C1] ------------[ cut here ]------------ [ 271.061500][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 271.072939][ C1] WARNING: CPU: 1 PID: 9416 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 271.083012][ C1] Modules linked in: [ 271.087000][ C1] CPU: 1 PID: 9416 Comm: syz.0.1550 Not tainted syzkaller #0 [ 271.094565][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.104710][ C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 271.111115][ C1] Code: ef e8 18 00 be fd 4c 8b 45 00 48 c7 c7 80 15 df 8a 48 c7 c6 40 12 df 8a 48 c7 c2 e0 16 df 8a 8b 0c 24 4d 89 e9 e8 54 87 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 85 9a 0a [ 271.130843][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 271.137004][ C1] RAX: 02aa3a2769bc2400 RBX: ffffffff96e292b8 RCX: ffff88807d23bb80 [ 271.145001][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 271.153034][ C1] RBP: ffffffff8a8def40 R08: ffffc900001e0687 R09: 1ffff9200003c0d0 [ 271.161070][ C1] R10: dffffc0000000000 R11: fffff5200003c0d1 R12: ffff888024a09a00 [ 271.169114][ C1] R13: ffffffff892a2900 R14: ffff888024a09000 R15: ffff888024a09890 [ 271.177150][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 271.186143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.192750][ C1] CR2: 00007f55468706c0 CR3: 000000000c88e000 CR4: 00000000003526e0 [ 271.200792][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.208924][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.216977][ C1] Call Trace: [ 271.220303][ C1] [ 271.223181][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 271.228624][ C1] ? rose_timer_expiry+0x4a7/0x5d0 [ 271.233760][ C1] __kmem_cache_free+0xb6/0x1f0 [ 271.238699][ C1] rose_timer_expiry+0x4a7/0x5d0 [ 271.243669][ C1] ? call_timer_fn+0x194/0x670 [ 271.248499][ C1] call_timer_fn+0x1ac/0x670 [ 271.253115][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 271.258199][ C1] ? call_timer_fn+0xcf/0x670 [ 271.262897][ C1] ? __run_timers+0x800/0x800 [ 271.267655][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.272958][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 271.278242][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 271.283301][ C1] __run_timers+0x53e/0x800 [ 271.287888][ C1] ? detach_timer+0x350/0x350 [ 271.292589][ C1] ? lock_chain_count+0x20/0x20 [ 271.297528][ C1] run_timer_softirq+0x63/0xf0 [ 271.302318][ C1] handle_softirqs+0x2a1/0x930 [ 271.307149][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 271.312028][ C1] ? do_softirq+0x210/0x210 [ 271.316616][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 271.321833][ C1] __irq_exit_rcu+0x13b/0x230 [ 271.326577][ C1] ? irq_exit_rcu+0x20/0x20 [ 271.331107][ C1] irq_exit_rcu+0x5/0x20 [ 271.335345][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.341042][ C1] [ 271.343989][ C1] [ 271.347011][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.353018][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 [ 271.360030][ C1] Code: e4 f8 7f 7e 65 8b 15 e5 f8 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 00 <83> fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 271.379701][ C1] RSP: 0018:ffffc90004dff3e0 EFLAGS: 00000246 [ 271.385871][ C1] RAX: ffffffff81ddacad RBX: ffffffff81ddac2d RCX: ffff88807d23bb80 [ 271.393872][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 271.401936][ C1] RBP: ffffea000000000f R08: dffffc0000000000 R09: 1ffffffff215e648 [ 271.409959][ C1] R10: dffffc0000000000 R11: fffffbfff215e649 R12: dffffc0000000000 [ 271.418083][ C1] R13: 1ffff11027fff22c R14: 000000000005cd1e R15: ffff88813fff9160 [ 271.426107][ C1] ? pfn_valid+0xcd/0x420 [ 271.430468][ C1] ? pfn_valid+0x14d/0x420 [ 271.434890][ C1] pfn_valid+0x14d/0x420 [ 271.439223][ C1] page_table_check_clear+0x1e/0x6b0 [ 271.444539][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 271.450489][ C1] unmap_page_range+0x192d/0x2500 [ 271.455601][ C1] unmap_vmas+0x260/0x390 [ 271.459971][ C1] ? unmap_vmas+0x1bd/0x390 [ 271.464513][ C1] ? unmap_page_range+0x2500/0x2500 [ 271.469766][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 271.474806][ C1] ? mas_next_entry+0xe27/0xed0 [ 271.479728][ C1] exit_mmap+0x20d/0x960 [ 271.483995][ C1] ? vm_brk+0x20/0x20 [ 271.488084][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 271.493853][ C1] ? exit_mm+0x1ee/0x2d0 [ 271.498174][ C1] ? uprobe_clear_state+0x274/0x290 [ 271.503472][ C1] ? mm_update_next_owner+0x525/0x650 [ 271.508897][ C1] __mmput+0x118/0x3c0 [ 271.512981][ C1] exit_mm+0x1fe/0x2d0 [ 271.517198][ C1] ? do_exit+0x2480/0x2480 [ 271.521654][ C1] ? taskstats_exit+0x35a/0x9d0 [ 271.526578][ C1] do_exit+0x905/0x2480 [ 271.530762][ C1] ? put_task_struct+0x80/0x80 [ 271.535583][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.541574][ C1] ? lock_chain_count+0x20/0x20 [ 271.546489][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 271.551533][ C1] do_group_exit+0x217/0x2d0 [ 271.556172][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 271.561389][ C1] get_signal+0x1272/0x1350 [ 271.565952][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 271.571605][ C1] ? do_futex+0x310/0x320 [ 271.575996][ C1] ? get_sigframe_size+0x10/0x10 [ 271.580946][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 271.586896][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 271.592369][ C1] exit_to_user_mode_loop+0x70/0x110 [ 271.597702][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 271.603261][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 271.608870][ C1] do_syscall_64+0x58/0xa0 [ 271.613312][ C1] ? clear_bhb_loop+0x60/0xb0 [ 271.618109][ C1] ? clear_bhb_loop+0x60/0xb0 [ 271.622813][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.628804][ C1] RIP: 0033:0x7f554699acb9 [ 271.633240][ C1] Code: Unable to access opcode bytes at 0x7f554699ac8f. [ 271.640314][ C1] RSP: 002b:00007f55477f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.648789][ C1] RAX: fffffffffffffe00 RBX: 00007f5546c15fa8 RCX: 00007f554699acb9 [ 271.656828][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5546c15fa8 [ 271.664814][ C1] RBP: 00007f5546c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 271.672893][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.680901][ C1] R13: 00007f5546c16038 R14: 00007fffb45a4d40 R15: 00007fffb45a4e28 [ 271.688944][ C1] [ 271.691978][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.699249][ C1] CPU: 1 PID: 9416 Comm: syz.0.1550 Not tainted syzkaller #0 [ 271.706659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.716717][ C1] Call Trace: [ 271.719984][ C1] [ 271.722819][ C1] dump_stack_lvl+0x188/0x24e [ 271.727580][ C1] ? memcpy+0x3c/0x60 [ 271.731547][ C1] ? show_regs_print_info+0x12/0x12 [ 271.736733][ C1] ? load_image+0x400/0x400 [ 271.741290][ C1] panic+0x2e5/0x730 [ 271.745277][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 271.749790][ C1] __warn+0x2f8/0x4f0 [ 271.753857][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 271.759665][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 271.765376][ C1] report_bug+0x2ba/0x4f0 [ 271.769697][ C1] ? debug_check_no_obj_freed+0x43c/0x530 [ 271.775430][ C1] handle_bug+0x3a/0x70 [ 271.779581][ C1] exc_invalid_op+0x16/0x40 [ 271.784079][ C1] asm_exc_invalid_op+0x16/0x20 [ 271.788919][ C1] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 271.795238][ C1] Code: ef e8 18 00 be fd 4c 8b 45 00 48 c7 c7 80 15 df 8a 48 c7 c6 40 12 df 8a 48 c7 c2 e0 16 df 8a 8b 0c 24 4d 89 e9 e8 54 87 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 85 9a 0a [ 271.814841][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 271.820899][ C1] RAX: 02aa3a2769bc2400 RBX: ffffffff96e292b8 RCX: ffff88807d23bb80 [ 271.828868][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 271.836843][ C1] RBP: ffffffff8a8def40 R08: ffffc900001e0687 R09: 1ffff9200003c0d0 [ 271.844847][ C1] R10: dffffc0000000000 R11: fffff5200003c0d1 R12: ffff888024a09a00 [ 271.852844][ C1] R13: ffffffff892a2900 R14: ffff888024a09000 R15: ffff888024a09890 [ 271.860838][ C1] ? rose_transmit_link+0x730/0x730 [ 271.866055][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 271.871423][ C1] ? rose_timer_expiry+0x4a7/0x5d0 [ 271.876532][ C1] __kmem_cache_free+0xb6/0x1f0 [ 271.881374][ C1] rose_timer_expiry+0x4a7/0x5d0 [ 271.886297][ C1] ? call_timer_fn+0x194/0x670 [ 271.891049][ C1] call_timer_fn+0x1ac/0x670 [ 271.895626][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 271.900636][ C1] ? call_timer_fn+0xcf/0x670 [ 271.905297][ C1] ? __run_timers+0x800/0x800 [ 271.909965][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.915149][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 271.920339][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 271.925361][ C1] __run_timers+0x53e/0x800 [ 271.929865][ C1] ? detach_timer+0x350/0x350 [ 271.934534][ C1] ? lock_chain_count+0x20/0x20 [ 271.939400][ C1] run_timer_softirq+0x63/0xf0 [ 271.944164][ C1] handle_softirqs+0x2a1/0x930 [ 271.948931][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 271.953824][ C1] ? do_softirq+0x210/0x210 [ 271.958378][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 271.963657][ C1] __irq_exit_rcu+0x13b/0x230 [ 271.968327][ C1] ? irq_exit_rcu+0x20/0x20 [ 271.972829][ C1] irq_exit_rcu+0x5/0x20 [ 271.977060][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.982689][ C1] [ 271.985621][ C1] [ 271.988538][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.994511][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 [ 272.001440][ C1] Code: e4 f8 7f 7e 65 8b 15 e5 f8 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 00 <83> fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 272.021045][ C1] RSP: 0018:ffffc90004dff3e0 EFLAGS: 00000246 [ 272.027103][ C1] RAX: ffffffff81ddacad RBX: ffffffff81ddac2d RCX: ffff88807d23bb80 [ 272.035069][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 272.043033][ C1] RBP: ffffea000000000f R08: dffffc0000000000 R09: 1ffffffff215e648 [ 272.051100][ C1] R10: dffffc0000000000 R11: fffffbfff215e649 R12: dffffc0000000000 [ 272.059148][ C1] R13: 1ffff11027fff22c R14: 000000000005cd1e R15: ffff88813fff9160 [ 272.067137][ C1] ? pfn_valid+0xcd/0x420 [ 272.071526][ C1] ? pfn_valid+0x14d/0x420 [ 272.075957][ C1] pfn_valid+0x14d/0x420 [ 272.080200][ C1] page_table_check_clear+0x1e/0x6b0 [ 272.085487][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 272.091375][ C1] unmap_page_range+0x192d/0x2500 [ 272.096419][ C1] unmap_vmas+0x260/0x390 [ 272.100747][ C1] ? unmap_vmas+0x1bd/0x390 [ 272.105256][ C1] ? unmap_page_range+0x2500/0x2500 [ 272.110464][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 272.115495][ C1] ? mas_next_entry+0xe27/0xed0 [ 272.120361][ C1] exit_mmap+0x20d/0x960 [ 272.124603][ C1] ? vm_brk+0x20/0x20 [ 272.128606][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 272.134261][ C1] ? exit_mm+0x1ee/0x2d0 [ 272.138517][ C1] ? uprobe_clear_state+0x274/0x290 [ 272.143786][ C1] ? mm_update_next_owner+0x525/0x650 [ 272.149191][ C1] __mmput+0x118/0x3c0 [ 272.153265][ C1] exit_mm+0x1fe/0x2d0 [ 272.157339][ C1] ? do_exit+0x2480/0x2480 [ 272.161756][ C1] ? taskstats_exit+0x35a/0x9d0 [ 272.166610][ C1] do_exit+0x905/0x2480 [ 272.170770][ C1] ? put_task_struct+0x80/0x80 [ 272.175532][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.181508][ C1] ? lock_chain_count+0x20/0x20 [ 272.186352][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 272.191375][ C1] do_group_exit+0x217/0x2d0 [ 272.195963][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 272.201167][ C1] get_signal+0x1272/0x1350 [ 272.205685][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 272.211322][ C1] ? do_futex+0x310/0x320 [ 272.215642][ C1] ? get_sigframe_size+0x10/0x10 [ 272.220570][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 272.226469][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 272.231935][ C1] exit_to_user_mode_loop+0x70/0x110 [ 272.237220][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 272.242865][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 272.248314][ C1] do_syscall_64+0x58/0xa0 [ 272.252739][ C1] ? clear_bhb_loop+0x60/0xb0 [ 272.257403][ C1] ? clear_bhb_loop+0x60/0xb0 [ 272.262068][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.267953][ C1] RIP: 0033:0x7f554699acb9 [ 272.272360][ C1] Code: Unable to access opcode bytes at 0x7f554699ac8f. [ 272.279395][ C1] RSP: 002b:00007f55477f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.287798][ C1] RAX: fffffffffffffe00 RBX: 00007f5546c15fa8 RCX: 00007f554699acb9 [ 272.295802][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5546c15fa8 [ 272.303766][ C1] RBP: 00007f5546c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.311738][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.319699][ C1] R13: 00007f5546c16038 R14: 00007fffb45a4d40 R15: 00007fffb45a4e28 [ 272.327674][ C1] [ 272.331134][ C1] Kernel Offset: disabled [ 272.335503][ C1] Rebooting in 86400 seconds..