last executing test programs: 12m9.327750312s ago: executing program 2 (id=628): syz_open_procfs(0x0, &(0x7f0000000340)='uid_map\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)}], 0x1}, 0x0) 12m9.211930791s ago: executing program 2 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000002000010000000000000000000a101400000000030000000014000200fc0200"], 0x54}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 12m8.90370703s ago: executing program 2 (id=633): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, 0x0) 12m8.047869287s ago: executing program 2 (id=636): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 12m4.861915154s ago: executing program 2 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x24040018) syz_open_procfs$userns(r0, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r6, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x400000000000006, 0x800040000000206b}) syz_clone3(&(0x7f00000011c0)={0x80, 0x0, &(0x7f00000005c0), 0x0, {}, &(0x7f0000001040)=""/185, 0xb9, &(0x7f0000001100)=""/107, 0x0, 0x0, {r6}}, 0x58) 12m3.924166221s ago: executing program 2 (id=659): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x9, 0x2000003}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 11m48.645197652s ago: executing program 32 (id=659): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x9, 0x2000003}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.5717219s ago: executing program 3 (id=3043): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000001000850000000c000000b700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$xdp(0x2c, 0x3, 0x0) 2m38.434438826s ago: executing program 3 (id=3049): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 2m37.127037451s ago: executing program 3 (id=3053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m36.155573117s ago: executing program 3 (id=3056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a00ffff0000000000000000fe80000000000000000000000000001d6401010000000000000000000000000000010000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9e1414aa000000000000000000000000000004d53c000000fc00000000000000000000000000000054040000000000000000000000000000000000000400000000000000000000000000008000000000ff7f0000000001000900000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000855eac56aeed3ec609bfa7da81540ec6fdffffff000000000335000002000000000000000000000014000e00ac14140b0000000000000000000000002bf3ee4301d2a505ea2da13a4adf5a7400d78c809bc642f4db78ce42eba04220fc55b73eb46abbf80813ab9979891df90bb9acd223e91519f5f0ee02f33b22028d6114cf93cb78c747a00d494be0"], 0x104}, 0x1, 0x0, 0x0, 0x20040400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='writeback_bdi_register\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x74, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendmmsg$inet6(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8484", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r6, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xcf, 0x0, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000000)={0x10000001}) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250100000008000700e0000001080002000500000008000800001e01010c0001006e6c383032313100"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x60]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m35.717219656s ago: executing program 3 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[], 0x4c}, 0x1, 0xba01}, 0x0) 2m35.690181096s ago: executing program 3 (id=3060): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYRES32], 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008810) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) socket$inet_udplite(0x2, 0x2, 0x88) 2m20.242420037s ago: executing program 33 (id=3060): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYRES32], 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008810) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) socket$inet_udplite(0x2, 0x2, 0x88) 50.869745895s ago: executing program 4 (id=3408): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x5b}]) 49.72758714s ago: executing program 4 (id=3414): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee2, 0x8031, 0xffffffffffffffff, 0x72970000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x1000, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0}}) close_range(r1, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 47.346780381s ago: executing program 4 (id=3418): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r5, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r5, 0x10, 0x8001, 0x4, 0xfff, 0x1}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x6a, 0x3, 0x1ffffffe, 0x51) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2f9e51ba5da4d1b5, 0x11, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) sendmsg$inet(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e00)='l', 0x1}], 0x1}, 0x4000) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x620}, 0x5) 46.581053918s ago: executing program 4 (id=3423): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x4000010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=ANY=[], 0x60) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x7f, @local, 0x3}, 0x1c) 44.736584871s ago: executing program 4 (id=3427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00'}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2a, 0x2, 0xe2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r6 = dup(r5) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x40000033, r6, 0x0) fremovexattr(r6, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000ec0)={0x0, 0x8, 0x5, 0x4, 0x18, 0x0, 0x7}) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r9) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x90009427, &(0x7f0000000180)) 43.559318457s ago: executing program 4 (id=3433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@privport}]}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f0000000280)=0x0, &(0x7f0000000440), &(0x7f0000000480)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000700)={0xa0, 0x0, 0x0, {{0x3, 0x1, 0x52, 0x3, 0x8b24, 0x2, {0x0, 0x6a83, 0x4, 0x8, 0x1ff, 0x0, 0x3, 0xe62, 0xfffffe40, 0x8000, 0x8, 0x0, r7, 0x3, 0x7ff}}}}, 0xa0) 28.424065789s ago: executing program 34 (id=3433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68040200) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@privport}]}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getresgid(&(0x7f0000000280)=0x0, &(0x7f0000000440), &(0x7f0000000480)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000700)={0xa0, 0x0, 0x0, {{0x3, 0x1, 0x52, 0x3, 0x8b24, 0x2, {0x0, 0x6a83, 0x4, 0x8, 0x1ff, 0x0, 0x3, 0xe62, 0xfffffe40, 0x8000, 0x8, 0x0, r7, 0x3, 0x7ff}}}}, 0xa0) 1.976248317s ago: executing program 6 (id=3595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) 1.880003087s ago: executing program 1 (id=3597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.855967317s ago: executing program 6 (id=3598): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 1.783459717s ago: executing program 5 (id=3599): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8080) 1.091668024s ago: executing program 1 (id=3601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r1, @ANYBLOB="5be429bd700003000000070000001c000180060005004e24000008000300ac1414aa06000100020000008cc6b2880ce6024b1f0b40e6de1d39759f8957edf38d1498bf717661d9c5"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4048004) 1.061042884s ago: executing program 0 (id=3602): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000080)=@sco, 0x0, 0x80800) 911.230833ms ago: executing program 5 (id=3606): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300e0"], 0x40}}, 0x0) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001040)="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", 0x5b5}], 0x1}, 0x0) 900.072863ms ago: executing program 6 (id=3607): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 885.809863ms ago: executing program 0 (id=3608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 840.372603ms ago: executing program 7 (id=3609): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) 815.735043ms ago: executing program 6 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 728.986083ms ago: executing program 0 (id=3611): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = io_uring_setup(0x28d5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x211}) close(r1) ioctl$TCSETSW2(r0, 0x5425, 0x0) 694.316652ms ago: executing program 5 (id=3612): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 665.624922ms ago: executing program 7 (id=3613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a00ffff0000000000000000fe80000000000000000000000000001d6401010000000000000000000000000000010000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20040400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='writeback_bdi_register\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x74, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x60]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet(0x2, 0x6, 0x0) 629.713612ms ago: executing program 6 (id=3614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xa20}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x10e8, 0x6ba7}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x11d8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4048804) 563.857152ms ago: executing program 1 (id=3615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) syncfs(0xffffffffffffffff) 526.905962ms ago: executing program 7 (id=3616): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8080) 411.723881ms ago: executing program 6 (id=3617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 411.527301ms ago: executing program 1 (id=3618): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000080)=@sco, 0x0, 0x80800) 376.102931ms ago: executing program 5 (id=3619): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000000)=0x4b9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 368.943731ms ago: executing program 7 (id=3620): socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000040)=""/73}, 0x20) 251.069431ms ago: executing program 0 (id=3621): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 249.997741ms ago: executing program 1 (id=3622): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300e0"], 0x40}}, 0x0) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b80", 0x5b5}], 0x1}, 0x0) 219.82894ms ago: executing program 5 (id=3623): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) 137.98337ms ago: executing program 7 (id=3624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 136.51903ms ago: executing program 0 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r1, @ANYBLOB="5be429bd700003000000070000001c000180060005004e24000008000300ac1414aa06000100020000008cc6b2880ce6024b1f0b40e6de1d39759f8957edf38d1498bf717661d9c5"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4048004) 44.84523ms ago: executing program 5 (id=3626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a00ffff0000000000000000fe80000000000000000000000000001d6401010000000000000000000000000000010000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20040400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='writeback_bdi_register\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3) r4 = socket(0xa, 0x3, 0x3a) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x74, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x60]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet(0x2, 0x6, 0x0) 16.26934ms ago: executing program 1 (id=3627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 7.01898ms ago: executing program 0 (id=3628): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 7 (id=3629): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) kernel console output (not intermixed with test programs): : 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 455.944393][T10091] device bridge0 entered promiscuous mode [ 455.946370][T10091] device bridge0 left promiscuous mode [ 456.938388][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 456.940961][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 457.002688][T10091] device bridge0 entered promiscuous mode [ 457.008910][T10091] device bridge0 left promiscuous mode [ 457.285276][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.288478][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.388284][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 461.642017][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1911'. [ 462.139522][T10166] binder: 10155:10166 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 462.142135][T10166] binder: 10166 RLIMIT_NICE not set [ 463.156616][T10167] binder: 10155:10167 tried to acquire reference to desc 0, got 1 instead [ 463.160601][T10166] binder: 10166 RLIMIT_NICE not set [ 463.669475][ T4457] binder: release 10155:10166 transaction 11 in, still active [ 463.671432][ T4457] binder: send failed reply for transaction 11 to 10155:10167 [ 463.673252][ T4457] binder: undelivered TRANSACTION_COMPLETE [ 463.674736][ T4457] binder: undelivered TRANSACTION_ERROR: 29189 [ 464.550666][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.552590][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.595828][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.598156][T10187] tipc: Resetting bearer [ 464.633112][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.634794][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.044368][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'. [ 465.482586][T10218] input: syz0 as /devices/virtual/input/input18 [ 465.484485][T10218] input: failed to attach handler leds to device input18, error: -6 [ 465.936226][ T4457] libceph: connect (1)[c::]:6789 error -22 [ 465.939071][ T4457] libceph: mon0 (1)[c::]:6789 connect error [ 466.101082][T10218] ceph: No mds server is up or the cluster is laggy [ 466.231978][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.234360][T10229] tipc: Resetting bearer [ 467.130029][T10238] loop0: detected capacity change from 0 to 40427 [ 467.132434][T10238] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 467.133938][T10238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 467.151503][T10238] F2FS-fs (loop0): invalid crc value [ 467.166191][T10238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 467.187248][T10238] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 467.189791][T10238] F2FS-fs (loop0): Start checkpoint disabled! [ 467.207303][T10238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 467.208771][T10238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 467.981831][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1945'. [ 467.983742][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1945'. [ 468.105311][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1945'. [ 468.107397][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1945'. [ 468.213326][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.218981][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.474159][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 468.898554][ T4757] kworker/u4:16: attempt to access beyond end of device [ 468.898554][ T4757] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 468.998377][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.006132][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.855922][T10333] loop1: detected capacity change from 0 to 40427 [ 472.879544][T10333] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 472.881018][T10333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 472.890176][T10333] F2FS-fs (loop1): invalid crc value [ 472.911059][T10333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 472.947057][T10333] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 472.949813][T10333] F2FS-fs (loop1): Start checkpoint disabled! [ 472.980032][T10333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 472.981524][T10333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 474.691945][T10365] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 477.474215][T10389] netlink: 'syz.5.1986': attribute type 1 has an invalid length. [ 478.252008][ T4757] kworker/u4:16: attempt to access beyond end of device [ 478.252008][ T4757] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 480.337424][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 480.339253][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 480.401707][T10424] device bridge0 entered promiscuous mode [ 480.403692][T10424] device bridge0 left promiscuous mode [ 481.387572][T10436] x_tables: duplicate underflow at hook 3 [ 482.210424][T10440] loop3: detected capacity change from 0 to 40427 [ 482.214706][T10440] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 482.218493][T10440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 482.230835][T10440] F2FS-fs (loop3): invalid crc value [ 482.294664][T10440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 483.068098][T10440] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 483.070061][T10440] F2FS-fs (loop3): Start checkpoint disabled! [ 483.146730][T10440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 483.148112][T10440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 484.482475][ T143] kworker/u4:3: attempt to access beyond end of device [ 484.482475][ T143] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 484.833665][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2013'. [ 485.987958][T10507] bond0: (slave bridge0): Releasing backup interface [ 486.812893][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.814526][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.880888][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.901968][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.903553][T10507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.906208][T10507] device bridge_slave_0 left promiscuous mode [ 486.907596][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.938067][T10507] device bridge_slave_1 left promiscuous mode [ 486.939566][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.080781][T10507] bond0: (slave bond_slave_0): Releasing backup interface [ 487.153991][T10507] bond0: (slave bond_slave_1): Releasing backup interface [ 487.266253][T10507] team0: Port device team_slave_0 removed [ 487.288288][T10507] team0: Port device team_slave_1 removed [ 487.310093][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.311708][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.314181][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.315713][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.387764][ T4433] tipc: Resetting bearer [ 487.393041][T10513] team0: Mode changed to "loadbalance" [ 487.611597][T10505] loop1: detected capacity change from 0 to 40427 [ 487.656488][T10505] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 487.849100][T10505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 487.911087][T10505] F2FS-fs (loop1): invalid crc value [ 488.242990][T10505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 488.470134][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 488.474110][T10505] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 488.494283][T10505] F2FS-fs (loop1): Start checkpoint disabled! [ 488.500439][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.510279][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.530745][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.532613][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.554706][T10505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 488.556211][T10505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 489.931541][ T4583] kworker/u4:12: attempt to access beyond end of device [ 489.931541][ T4583] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 492.615792][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2040'. [ 492.761466][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.763883][T10586] tipc: Resetting bearer [ 492.766016][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.767647][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.629865][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.632425][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.594657][T10597] loop1: detected capacity change from 0 to 40427 [ 495.610549][T10597] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 495.612012][T10597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 495.683987][T10597] F2FS-fs (loop1): invalid crc value [ 495.777161][T10597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 495.780055][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2054'. [ 495.804296][T10597] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 495.923802][T10597] F2FS-fs (loop1): Start checkpoint disabled! [ 496.083841][T10597] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 496.089886][T10597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 496.772807][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2057'. [ 497.605879][ T5460] kworker/u4:18: attempt to access beyond end of device [ 497.605879][ T5460] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 498.078333][T10654] netlink: 'syz.5.2067': attribute type 10 has an invalid length. [ 498.957569][T10654] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.755261][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2068'. [ 501.094567][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 503.385478][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 504.731854][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2090'. [ 508.158707][T10765] device gtp0 entered promiscuous mode [ 508.442246][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 510.105135][T10800] device gtp0 entered promiscuous mode [ 527.188674][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.193753][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.198460][T10977] netlink: 'syz.1.2165': attribute type 10 has an invalid length. [ 527.239251][T10977] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.241010][T10977] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.879664][ T8617] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 535.092872][ T8617] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 535.095604][ T8617] usb 1-1: config 0 has no interface number 0 [ 535.097487][ T8617] usb 1-1: config 0 interface 128 has no altsetting 0 [ 535.362240][ T8617] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 535.364055][ T8617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.365650][ T8617] usb 1-1: Product: syz [ 535.366413][ T8617] usb 1-1: Manufacturer: syz [ 535.367279][ T8617] usb 1-1: SerialNumber: syz [ 535.439027][ T8617] usb 1-1: config 0 descriptor?? [ 535.443647][ T8617] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 535.445202][ T8617] radio-si470x: probe of 1-1:0.128 failed with error -5 [ 535.446811][ T8617] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 535.663781][T11078] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 535.679942][T11078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 535.690389][ T8617] usb 1-1: USB disconnect, device number 12 [ 538.425652][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'. [ 539.668749][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.673758][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.178139][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.183663][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.176336][T11222] tipc: Enabled bearer , priority 0 [ 545.219565][T11222] device syzkaller0 entered promiscuous mode [ 545.221502][T11222] tipc: Resetting bearer [ 545.263703][T11221] tipc: Resetting bearer [ 547.119770][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.122892][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.880446][ T4303] Bluetooth: hci5: command 0x0406 tx timeout [ 556.030862][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.032028][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.496627][T11221] tipc: Disabling bearer [ 558.757352][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.765969][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.141434][T11311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.143775][T11311] tipc: Resetting bearer [ 563.427485][ T8617] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 563.467594][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 563.481028][T11344] device macvtap1 entered promiscuous mode [ 563.482226][T11344] device team0 entered promiscuous mode [ 563.532029][T11344] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 563.744140][ T8617] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 563.746070][ T8617] usb 1-1: config 0 has no interface number 0 [ 563.747441][ T8617] usb 1-1: config 0 interface 128 has no altsetting 0 [ 563.842471][ T8617] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 563.905068][ T8617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.942285][ T8617] usb 1-1: Product: syz [ 563.970168][ T8617] usb 1-1: Manufacturer: syz [ 564.009882][ T8617] usb 1-1: SerialNumber: syz [ 564.173672][ T8617] usb 1-1: config 0 descriptor?? [ 564.183725][ T8617] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 564.185481][ T8617] radio-si470x: probe of 1-1:0.128 failed with error -5 [ 564.200426][T11346] device team0 left promiscuous mode [ 564.217234][ T8617] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 564.392730][ T8617] usb 1-1: USB disconnect, device number 13 [ 564.596890][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 564.611391][T11361] device veth1_to_bridge entered promiscuous mode [ 568.652136][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2309'. [ 568.858244][T11424] device team_slave_1 entered promiscuous mode [ 568.867255][T11424] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 570.115546][T11438] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 570.845301][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2325'. [ 572.323332][T11474] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2332'. [ 572.325106][T11474] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2332'. [ 572.327275][T11473] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2332'. [ 572.833276][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 572.869797][T11497] device wireguard0 entered promiscuous mode [ 573.892047][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2342'. [ 573.894026][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2342'. [ 574.680387][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.683838][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.879871][ T4341] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 577.077406][ T4341] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 577.080618][ T4341] usb 1-1: config 0 has no interface number 0 [ 577.082269][ T4341] usb 1-1: config 0 interface 128 has no altsetting 0 [ 577.207705][ T4341] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 577.211167][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.262864][ T4341] usb 1-1: Product: syz [ 577.281762][ T4341] usb 1-1: Manufacturer: syz [ 577.283755][ T4341] usb 1-1: SerialNumber: syz [ 577.434226][ T4341] usb 1-1: config 0 descriptor?? [ 577.450101][ T4341] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 577.451933][ T4341] radio-si470x: probe of 1-1:0.128 failed with error -5 [ 577.453615][ T4341] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 577.939828][ T8617] usb 1-1: USB disconnect, device number 14 [ 579.609368][ C0] hrtimer: interrupt took 40520 ns [ 581.456177][T11660] device geneve2 entered promiscuous mode [ 581.585834][ T5057] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 581.761065][ T5057] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 581.762902][ T5057] usb 1-1: config 0 has no interface number 0 [ 581.764552][ T5057] usb 1-1: config 0 interface 128 has no altsetting 0 [ 581.768084][ T5057] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 581.788350][ T5057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.796471][ T5057] usb 1-1: Product: syz [ 581.798579][ T5057] usb 1-1: Manufacturer: syz [ 581.807236][ T5057] usb 1-1: SerialNumber: syz [ 581.818114][ T5057] usb 1-1: config 0 descriptor?? [ 581.833144][ T5057] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 581.838146][ T5057] radio-si470x: probe of 1-1:0.128 failed with error -5 [ 581.848677][ T5057] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 582.045788][ T5057] usb 1-1: USB disconnect, device number 15 [ 584.185351][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.191135][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.785669][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'. [ 586.212665][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 586.255088][T11769] tipc: Resetting bearer [ 586.817071][T11778] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004 [ 587.086794][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'. [ 587.088760][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'. [ 587.101331][T11790] netlink: 'syz.1.2456': attribute type 4 has an invalid length. [ 587.257271][T11797] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 587.321531][T11797] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 588.427133][T11807] Cannot find del_set index 3 as target [ 590.414599][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 590.416802][T11863] tipc: Resetting bearer [ 592.657350][T11892] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2493'. [ 594.175546][T11925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2505'. [ 594.327170][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2508'. [ 595.467185][T11948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 596.421378][T11969] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2523'. [ 596.566832][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2525'. [ 596.569960][T11970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.898869][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2536'. [ 598.789968][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2541'. [ 601.367574][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 602.987657][T12055] (unnamed net_device) (uninitialized): down delay (38) is not a multiple of miimon (100), value rounded to 0 ms [ 603.149753][T12063] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 603.181817][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2554'. [ 605.375302][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2563'. [ 606.516320][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2569'. [ 607.519508][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2571'. [ 608.899997][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'. [ 609.122479][ T5460] wlan1: Trigger new scan to find an IBSS to join [ 612.711628][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2589'. [ 612.759883][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 612.987811][T12196] bond0: (slave bridge0): Releasing backup interface [ 613.061183][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.062970][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.071763][T12196] device bridge_slave_0 left promiscuous mode [ 613.073161][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.807407][T12196] device bridge_slave_1 left promiscuous mode [ 613.809003][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.884153][T12196] bond0: (slave bond_slave_0): Releasing backup interface [ 614.049541][T12196] bond0: (slave bond_slave_1): Releasing backup interface [ 614.114979][ T11] wlan1: Trigger new scan to find an IBSS to join [ 614.184154][T12196] team0: Port device team_slave_0 removed [ 614.217174][T12196] team0: Port device team_slave_1 removed [ 614.227009][T12196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.236807][T12196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.252806][T12196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.254405][T12196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.310922][T12197] team0: Mode changed to "loadbalance" [ 614.352044][ T237] tipc: Resetting bearer [ 615.251616][ T9937] wlan1: Creating new IBSS network, BSSID 26:66:4d:21:57:f9 [ 615.606255][T12232] tipc: Resetting bearer [ 615.644841][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 617.215724][T12232] tipc: Disabling bearer [ 617.352403][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.355044][T12248] tipc: Resetting bearer [ 617.357331][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.359209][T12248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.374157][T12252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2608'. [ 617.446948][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2609'. [ 617.448768][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2609'. [ 617.450751][T12255] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 617.470277][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.471579][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.498888][T12257] bond0: (slave bridge0): Releasing backup interface [ 617.565206][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.567887][T12257] tipc: Resetting bearer [ 618.725787][T12279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2620'. [ 620.257785][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2623'. [ 620.264831][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2623'. [ 620.266750][T12293] netlink: 'syz.5.2623': attribute type 4 has an invalid length. [ 620.300497][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 620.302787][T12295] tipc: Resetting bearer [ 620.304919][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.306408][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.365333][T12295] team0: Unable to change to the same mode the team is in [ 621.647024][T12323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2634'. [ 623.194531][T12344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2639'. [ 628.935947][T12409] team0 speed is unknown, defaulting to 1000 [ 628.938440][T12409] team0 speed is unknown, defaulting to 1000 [ 628.952941][T12409] team0 speed is unknown, defaulting to 1000 [ 628.957297][T12409] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 628.966188][T12409] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 629.002751][T12409] team0 speed is unknown, defaulting to 1000 [ 629.014845][T12409] team0 speed is unknown, defaulting to 1000 [ 629.016667][T12409] team0 speed is unknown, defaulting to 1000 [ 629.018256][T12409] team0 speed is unknown, defaulting to 1000 [ 629.045220][T12409] team0 speed is unknown, defaulting to 1000 [ 629.046963][T12409] team0 speed is unknown, defaulting to 1000 [ 629.247467][T12415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 629.275339][T12415] tipc: Resetting bearer [ 629.321831][T12415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.374872][T12415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.595365][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'. [ 635.760219][T12493] netlink: 'syz.1.2686': attribute type 10 has an invalid length. [ 635.761850][T12493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2686'. [ 636.049969][T12503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2691'. [ 636.571288][T12516] @ÿÿÿ: renamed from bond_slave_0 [ 637.901581][T12534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2700'. [ 638.195898][T12540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2703'. [ 638.591568][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2707'. [ 638.776396][T12551] device veth0_to_team entered promiscuous mode [ 639.809215][T12580] team0 speed is unknown, defaulting to 1000 [ 641.125812][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2726'. [ 641.205689][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2726'. [ 641.919096][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 642.527610][T12635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 642.530097][T12635] tipc: Resetting bearer [ 642.532200][T12635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.533756][T12635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.979273][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2745'. [ 643.050807][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2745'. [ 643.466897][T12658] tipc: Enabled bearer , priority 0 [ 643.473649][T12657] tipc: Disabling bearer [ 644.082209][T12682] netlink: 'syz.3.2759': attribute type 9 has an invalid length. [ 644.083828][T12682] netlink: 'syz.3.2759': attribute type 6 has an invalid length. [ 644.139995][T12448] wlan1: Trigger new scan to find an IBSS to join [ 644.352032][T12689] tipc: Enabled bearer , priority 0 [ 644.356482][T12688] tipc: Disabling bearer [ 644.812810][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2767'. [ 644.869851][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2767'. [ 645.072438][T12709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.074841][T12709] tipc: Resetting bearer [ 646.413508][T12719] tipc: Enabled bearer , priority 0 [ 646.425798][T12718] tipc: Disabling bearer [ 646.784410][T12740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2782'. [ 647.715961][ T4453] wlan1: Trigger new scan to find an IBSS to join [ 647.828857][T12748] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 647.988255][T12760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2789'. [ 648.416761][T12782] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 648.425609][T12782] device bond1 entered promiscuous mode [ 648.426937][T12782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.448408][T12782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.450561][T12782] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 648.452623][T12782] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 648.456537][T12782] bond1: (slave ip6gre1): making interface the new active one [ 648.458340][T12782] device ip6gre1 entered promiscuous mode [ 648.460862][T12782] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 648.462865][T12285] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 648.571907][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2802'. [ 648.736892][T12790] bridge0: port 1(vlan0) entered blocking state [ 648.745410][T12790] bridge0: port 1(vlan0) entered disabled state [ 648.757289][T12790] device vlan0 entered promiscuous mode [ 648.765652][T12790] device batadv0 entered promiscuous mode [ 648.845870][T12803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 648.860373][T12803] tipc: Resetting bearer [ 648.862733][T12803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.864235][T12803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.930551][T12285] wlan1: Creating new IBSS network, BSSID 4e:93:95:5c:ae:c0 [ 651.185595][T12829] device syzkaller0 entered promiscuous mode [ 651.340001][T12839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2814'. [ 651.828777][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2816'. [ 663.905630][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.911162][ T4303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.913597][ T4303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.915784][ T4303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.917791][ T4303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.920086][ T4303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.065708][T12869] team0 speed is unknown, defaulting to 1000 [ 664.160054][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2827'. [ 664.687006][ T4453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.706732][T12900] netlink: 'syz.5.2830': attribute type 39 has an invalid length. [ 664.877015][T12869] chnl_net:caif_netlink_parms(): no params data found [ 664.887127][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 664.897721][T12904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2831'. [ 664.945407][T12904] syz.1.2831 sent an empty control message without MSG_MORE. [ 664.954376][T12904] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.002895][ T4453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.177434][ T4453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.209676][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.223311][T12915] netlink: 'syz.0.2834': attribute type 10 has an invalid length. [ 665.295862][T12915] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 665.335738][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.337268][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.345529][T12869] device bridge_slave_0 entered promiscuous mode [ 665.512316][ T4453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.557080][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.558859][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.563788][T12869] device bridge_slave_1 entered promiscuous mode [ 665.642507][T12927] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 665.656602][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.661612][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.693182][T12869] team0: Port device team_slave_0 added [ 665.698740][T12869] team0: Port device team_slave_1 added [ 665.714870][T12929] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2838'. [ 665.724659][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.726302][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.732531][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.792080][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.793637][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.800156][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.891833][T12869] device hsr_slave_0 entered promiscuous mode [ 665.931817][T12869] device hsr_slave_1 entered promiscuous mode [ 665.959218][T12870] Bluetooth: hci3: command 0x0409 tx timeout [ 665.969822][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.971457][T12869] Cannot create hsr debugfs directory [ 665.972953][ T4453] tipc: Disabling bearer [ 665.974341][ T4453] tipc: Disabling bearer [ 665.977934][ T4453] tipc: Left network mode [ 665.979971][T12939] siw: device registration error -23 [ 667.302905][T12974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2849'. [ 667.536604][T12988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.591545][T12988] netlink: 'syz.5.2852': attribute type 10 has an invalid length. [ 667.664205][T12988] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 668.001040][T13004] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 668.029694][T12870] Bluetooth: hci3: command 0x041b tx timeout [ 668.123212][ T39] wlan1: Trigger new scan to find an IBSS to join [ 668.278035][T12869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.361142][T12869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.347725][T13031] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2859'. [ 669.440972][T12869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.581355][T12869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.623440][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 670.129330][ T4303] Bluetooth: hci3: command 0x040f tx timeout [ 670.769769][T13051] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2862'. [ 670.771803][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 670.773625][T13057] netlink: 'syz.0.2865': attribute type 7 has an invalid length. [ 670.775077][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 670.812656][T13057] device erspan0 entered promiscuous mode [ 670.850323][T13057] device batadv_slave_1 entered promiscuous mode [ 670.987516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 672.663564][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 672.710625][ T237] wlan1: Trigger new scan to find an IBSS to join [ 672.762693][T13099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2871'. [ 672.952928][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 672.954839][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 673.065297][ T4453] device hsr_slave_0 left promiscuous mode [ 674.585509][ T4453] device hsr_slave_1 left promiscuous mode [ 674.849704][ T4453] device veth1_macvtap left promiscuous mode [ 674.851032][ T4453] device veth0_macvtap left promiscuous mode [ 674.852348][ T4453] device veth1_vlan left promiscuous mode [ 674.853564][ T4453] device veth0_vlan left promiscuous mode [ 674.996689][ T9] wlan1: Creating new IBSS network, BSSID 3a:db:2a:a3:ac:76 [ 675.017036][ T4453] bond1 (unregistering): Released all slaves [ 678.911742][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.912993][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.958431][ T4453] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 681.000292][ T4453] bond0 (unregistering): Released all slaves [ 681.256142][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.267402][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.286227][T12869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 681.288443][T12869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.330659][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.336301][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.338298][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.350266][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.354214][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.355665][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.370089][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.390919][T13153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2887'. [ 681.406469][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.415239][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.416684][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.418636][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.421708][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.424050][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.426265][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.428556][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.436447][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 681.439160][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 681.442464][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.444844][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.446982][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.449028][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 681.451058][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2886'. [ 681.520317][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.522874][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.541354][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 682.868222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.870514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.886113][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.003684][T13186] netlink: 'syz.5.2897': attribute type 30 has an invalid length. [ 683.051201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.060245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.074004][T12869] device veth0_vlan entered promiscuous mode [ 683.075900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.418883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.826231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.828352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.855212][T12869] device veth1_vlan entered promiscuous mode [ 683.873963][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 683.876137][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 683.878566][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 683.881500][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 683.912641][T12869] device veth0_macvtap entered promiscuous mode [ 683.916190][T12869] device veth1_macvtap entered promiscuous mode [ 683.922672][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 683.924566][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2899'. [ 683.974562][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.976931][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.994880][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.996505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 683.998574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.001650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 684.026131][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.028464][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.055051][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.057468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.060407][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.079840][T12869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.081661][T12869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.083337][T12869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.085120][T12869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.960379][ T4445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.962170][ T4445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.001468][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 686.071370][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.073265][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.077642][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 687.029627][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'. [ 687.031399][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 687.165443][T13242] team0 speed is unknown, defaulting to 1000 [ 687.393152][T13250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.687504][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 688.689483][T13278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2927'. [ 688.762438][T13283] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2928'. [ 688.944938][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.643222][T13303] device syzkaller0 entered promiscuous mode [ 690.716357][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2939'. [ 690.718459][T13309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2939'. [ 690.775354][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2942'. [ 690.819595][T13316] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2943'. [ 691.073803][T13322] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 691.080305][ T4757] wlan1: Trigger new scan to find an IBSS to join [ 691.968676][T13340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.005739][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 692.061990][T13350] __nla_validate_parse: 1 callbacks suppressed [ 692.069040][T13350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2955'. [ 692.111043][T13357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2957'. [ 693.584614][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 693.586548][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 693.664065][T13387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2969'. [ 693.697388][T13389] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2970'. [ 693.780014][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.784270][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.789807][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.793965][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.797762][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 693.814712][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.079142][T13402] team0 speed is unknown, defaulting to 1000 [ 695.079543][ T4358] wlan1: Trigger new scan to find an IBSS to join [ 695.446021][T12285] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.513598][T13395] team0 speed is unknown, defaulting to 1000 [ 695.572318][T12285] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.584669][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 695.586514][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 695.629246][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2982'. [ 695.693050][T12285] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.703224][T13440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2983'. [ 695.944216][T12870] Bluetooth: hci4: command 0x0409 tx timeout [ 695.976308][T12285] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.984830][T13395] chnl_net:caif_netlink_parms(): no params data found [ 697.073360][ T39] wlan1: Trigger new scan to find an IBSS to join [ 697.218355][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2993'. [ 697.231851][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 697.240341][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.241835][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.244111][T13395] device bridge_slave_0 entered promiscuous mode [ 697.247031][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.248512][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.280322][T13395] device bridge_slave_1 entered promiscuous mode [ 697.517725][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.521461][T12285] tipc: Disabling bearer [ 697.522732][T12285] tipc: Disabling bearer [ 697.525503][T12285] tipc: Left network mode [ 697.537371][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.029787][T12870] Bluetooth: hci4: command 0x041b tx timeout [ 698.305089][T13395] team0: Port device team_slave_0 added [ 698.320334][T13395] team0: Port device team_slave_1 added [ 698.411408][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.412887][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.417818][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.430466][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.431967][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.436991][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.686494][T12285] bond1: (slave ip6gre1): Releasing backup interface [ 698.688103][T12285] device ip6gre1 left promiscuous mode [ 698.720568][T12285] bond1: Destroying bond [ 699.069926][ T4583] wlan1: Trigger new scan to find an IBSS to join [ 699.267229][T13530] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3008'. [ 699.431431][T12285] bond1 (unregistering): Released all slaves [ 699.445328][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 699.713449][T13395] device hsr_slave_0 entered promiscuous mode [ 699.769912][T13395] device hsr_slave_1 entered promiscuous mode [ 699.840574][T13395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.843371][T13395] Cannot create hsr debugfs directory [ 700.179939][T12870] Bluetooth: hci4: command 0x040f tx timeout [ 701.058601][T13558] device syzkaller0 left promiscuous mode [ 701.104603][T13567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3020'. [ 701.153449][ T4583] wlan1: Trigger new scan to find an IBSS to join [ 701.227510][T13577] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 702.199525][T12870] Bluetooth: hci4: command 0x0419 tx timeout [ 702.218025][ T4358] wlan1: Trigger new scan to find an IBSS to join [ 703.535442][ T4583] wlan1: Creating new IBSS network, BSSID 4e:49:f6:88:6f:6b [ 703.565759][T13632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3038'. [ 705.098868][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 705.938344][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 705.939991][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 706.114709][T13297] wlan1: Trigger new scan to find an IBSS to join [ 706.862204][T13649] infiniband syz1: set down [ 706.865358][T13649] infiniband syz1: added syzkaller0 [ 706.891911][T13649] infiniband syz1: Couldn't open port 1 [ 706.907012][T13672] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.908674][T13672] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.920418][T13649] RDS/IB: syz1: added [ 706.921724][T13649] smc: adding ib device syz1 with port count 1 [ 706.923081][T13649] smc: ib device syz1 port 1 has pnetid [ 706.978218][ T24] syzkaller0 speed is unknown, defaulting to 1000 [ 706.986239][T11009] syzkaller0 speed is unknown, defaulting to 1000 [ 706.989588][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 707.135375][T13395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 708.296782][T13699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'. [ 708.311853][ T4623] wlan1: Creating new IBSS network, BSSID 82:d6:bc:45:6d:d3 [ 708.474980][T13395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 709.227922][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 709.237741][T13395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 709.329662][T13395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 709.336177][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3056'. [ 709.446550][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 709.558392][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.589271][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 709.595117][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 709.597095][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 709.611747][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.626367][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 709.629158][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 709.632521][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.634010][T13297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.642306][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 709.646204][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 709.656393][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 709.660670][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.662231][T13297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.687534][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 709.698317][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 709.728952][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.753708][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.971654][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 710.469706][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 710.471981][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 710.499932][T13395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 710.502072][T13395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 710.509334][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 710.539554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 710.542340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 710.546914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 710.564712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 710.577606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 710.632972][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 710.876182][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 711.623219][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 711.672344][T13649] syzkaller0 speed is unknown, defaulting to 1000 [ 711.810740][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 711.812412][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 711.818420][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.839497][T13736] team0 speed is unknown, defaulting to 1000 [ 711.842260][T13743] team0 speed is unknown, defaulting to 1000 [ 711.971409][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3067'. [ 712.642089][ T9] wlan1: Trigger new scan to find an IBSS to join [ 712.831136][T12285] device hsr_slave_0 left promiscuous mode [ 712.876396][T12285] device hsr_slave_1 left promiscuous mode [ 712.939825][T12285] device vlan0 left promiscuous mode [ 712.940887][T12285] device batadv0 left promiscuous mode [ 712.942140][T12285] bridge0: port 1(vlan0) entered disabled state [ 713.130047][T12285] device veth1_macvtap left promiscuous mode [ 713.131823][T12285] device veth0_macvtap left promiscuous mode [ 716.109567][ T4757] wlan1: Trigger new scan to find an IBSS to join [ 717.040215][ T11] wlan1: Creating new IBSS network, BSSID 62:71:2a:b4:b0:99 [ 718.187432][T12285] bond0 (unregistering): Released all slaves [ 718.651893][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.654083][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.679224][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.687805][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.690595][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.693303][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.696782][T13395] device veth0_vlan entered promiscuous mode [ 718.706215][T13395] device veth1_vlan entered promiscuous mode [ 718.733112][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 718.745544][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 718.756739][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 718.761087][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.765832][T13395] device veth0_macvtap entered promiscuous mode [ 718.773246][T13395] device veth1_macvtap entered promiscuous mode [ 718.793459][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.800494][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.805211][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.810821][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.817667][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.826483][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 718.828769][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 718.838736][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 718.842024][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 718.845699][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.847935][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.850239][T13395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.854737][T13395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.860193][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.933724][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 718.936087][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 718.944873][T13395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.946703][T13395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.948488][T13395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.951287][T13395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.163779][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.165651][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.187628][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 719.199029][ T4623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.204433][ T4623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.216303][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 720.156766][T13831] device syzkaller0 entered promiscuous mode [ 720.351296][T12870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 720.354871][T12870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.360381][T12870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.363928][T12870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.365767][T12870] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 720.368671][T12870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.069979][ T4757] wlan1: Trigger new scan to find an IBSS to join [ 722.430183][ T4303] Bluetooth: hci1: command 0x0409 tx timeout [ 724.110289][T12448] wlan1: Trigger new scan to find an IBSS to join [ 724.509690][ T4303] Bluetooth: hci1: command 0x041b tx timeout [ 725.268634][T12870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.271806][T12870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.274859][T12870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.278200][T12870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.282320][T12870] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 725.284041][T12870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.589615][T12870] Bluetooth: hci1: command 0x040f tx timeout [ 727.079508][ T39] wlan1: Trigger new scan to find an IBSS to join [ 727.315970][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 728.059681][ T39] wlan1: Creating new IBSS network, BSSID 2e:fb:21:7d:8e:32 [ 728.669557][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 729.389912][T12870] Bluetooth: hci2: command 0x041b tx timeout [ 731.469804][T12870] Bluetooth: hci2: command 0x040f tx timeout [ 732.764678][T13843] team0 speed is unknown, defaulting to 1000 [ 732.767236][T13843] syzkaller0 speed is unknown, defaulting to 1000 [ 733.254362][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.256019][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.440707][T13850] team0 speed is unknown, defaulting to 1000 [ 733.490945][T13850] syzkaller0 speed is unknown, defaulting to 1000 [ 733.540486][T13880] netlink: 'syz.4.3089': attribute type 29 has an invalid length. [ 733.569604][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 733.575815][T13880] netlink: 'syz.4.3089': attribute type 29 has an invalid length. [ 734.424643][T13880] netlink: 'syz.4.3089': attribute type 29 has an invalid length. [ 735.422098][T12285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.458374][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 735.537255][T13850] chnl_net:caif_netlink_parms(): no params data found [ 735.762506][T12285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.851332][T12285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.087017][T12285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.819305][T13843] chnl_net:caif_netlink_parms(): no params data found [ 736.863767][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.865339][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.867455][T13850] device bridge_slave_0 entered promiscuous mode [ 736.879132][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.917102][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.934829][T13850] device bridge_slave_1 entered promiscuous mode [ 737.130328][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.131920][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.134216][T13843] device bridge_slave_0 entered promiscuous mode [ 737.137337][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.138878][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.148293][T13843] device bridge_slave_1 entered promiscuous mode [ 737.937153][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.990624][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.997983][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.000218][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3107'. [ 738.032661][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.217512][T13850] team0: Port device team_slave_0 added [ 738.221392][T13850] team0: Port device team_slave_1 added [ 738.232982][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.234401][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.239848][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.243295][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.253380][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.258768][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.357319][T13843] team0: Port device team_slave_0 added [ 739.389053][T13843] team0: Port device team_slave_1 added [ 739.561179][T13850] device hsr_slave_0 entered promiscuous mode [ 739.599955][T13850] device hsr_slave_1 entered promiscuous mode [ 739.619666][T13850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.621321][T13850] Cannot create hsr debugfs directory [ 739.642986][T12285] tipc: Disabling bearer [ 739.656656][T12285] tipc: Disabling bearer [ 739.657852][T12285] tipc: Left network mode [ 739.917333][T13987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3116'. [ 739.922054][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.923516][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.928815][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.380764][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.384373][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.802278][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.803871][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.066445][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.572056][T13843] device hsr_slave_0 entered promiscuous mode [ 742.609864][T13843] device hsr_slave_1 entered promiscuous mode [ 742.649610][T13843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.652610][T13843] Cannot create hsr debugfs directory [ 743.671727][T14015] team0 speed is unknown, defaulting to 1000 [ 743.673746][T14015] syzkaller0 speed is unknown, defaulting to 1000 [ 743.858893][T14032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3128'. [ 743.988803][T13850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 744.128333][T14046] netlink: 'syz.5.3131': attribute type 10 has an invalid length. [ 744.138561][T14046] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 744.229831][T13850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 744.961183][T14046] bridge0: port 1(ip6gretap0) entered blocking state [ 744.967239][T14046] bridge0: port 1(ip6gretap0) entered disabled state [ 744.969330][T14046] device ip6gretap0 entered promiscuous mode [ 745.103460][T12285] device erspan0 left promiscuous mode [ 745.220631][T13850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.277083][T14076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3139'. [ 745.283028][T14060] netlink: 'syz.4.3133': attribute type 10 has an invalid length. [ 746.006714][T14060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 746.130949][T14084] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 746.205181][T13850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 747.445704][ T4757] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.750662][T14096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3148'. [ 748.718094][T13297] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 748.800497][T14109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3150'. [ 748.830243][T12285] IPVS: stopping master sync thread 12927 ... [ 749.801190][T12285] bond0: (slave wlan1): Releasing backup interface [ 750.989566][T14139] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3158'. [ 751.042745][T14152] netlink: 'syz.1.3162': attribute type 2 has an invalid length. [ 751.149081][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.177621][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3164'. [ 753.009967][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.876024][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 755.878222][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 755.888984][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 755.891332][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.893506][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.895110][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.897007][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3173'. [ 755.902070][T14190] team0 speed is unknown, defaulting to 1000 [ 755.906529][T14202] team0 speed is unknown, defaulting to 1000 [ 755.913323][T14190] syzkaller0 speed is unknown, defaulting to 1000 [ 755.975853][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 755.977868][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 755.979999][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.982883][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.984305][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.986153][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.988592][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.990969][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 755.993570][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 756.180034][T14202] syzkaller0 speed is unknown, defaulting to 1000 [ 756.183145][T13850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.188699][T13850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.203068][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.205134][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 756.207502][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 756.213679][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 756.372854][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 756.456549][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 756.515008][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.637723][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 757.186583][T13843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 757.245141][T13843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 758.858464][T14223] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.860436][T14223] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.862349][T14223] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.864140][T14223] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.105154][T14223] device gtp0 left promiscuous mode [ 759.108558][T13843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 759.151320][T13843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 759.200031][T12285] device batadv_slave_1 left promiscuous mode [ 759.281704][T12285] device hsr_slave_0 left promiscuous mode [ 759.340022][T12285] device hsr_slave_1 left promiscuous mode [ 759.499668][T12285] device veth1_macvtap left promiscuous mode [ 759.501013][T12285] device veth0_macvtap left promiscuous mode [ 764.051269][T12285] bond0 (unregistering): Released all slaves [ 764.325614][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.327494][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.329102][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.332663][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3190'. [ 764.378182][T14243] team0 speed is unknown, defaulting to 1000 [ 764.573008][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.579616][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 764.581736][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 764.596156][T13843] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.601517][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 764.603891][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 764.605983][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.607543][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.611226][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 764.616234][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 764.620097][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 764.624599][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.626096][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.636646][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 764.641883][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 764.655420][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 764.662408][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 764.668384][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 764.676778][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 764.703816][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 764.719027][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 764.725222][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 764.734371][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 764.750833][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 764.788673][T13843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 764.818884][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 764.829228][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 764.912946][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 764.918265][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 764.932601][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 764.935719][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 764.946349][T13850] device veth0_vlan entered promiscuous mode [ 764.961456][T13850] device veth1_vlan entered promiscuous mode [ 765.114933][T13850] device veth0_macvtap entered promiscuous mode [ 765.122047][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 765.124197][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 765.126975][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 765.129992][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 765.140784][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.142591][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.150906][T13850] device veth1_macvtap entered promiscuous mode [ 765.158907][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 765.162067][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 765.174394][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.249594][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3195'. [ 765.268133][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.271586][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.273589][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.275729][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.277640][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.285928][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.289168][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.317880][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 765.320254][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 765.419850][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 765.422007][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.425423][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3197'. [ 765.439055][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.447155][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.449188][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.479445][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.481388][T13850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.483525][T13850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.493949][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.517810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 765.521322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 765.525982][T13850] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.527799][T13850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.554503][T13850] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.556506][T13850] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.594798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.597023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.606195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 765.608249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 765.636296][T13843] device veth0_vlan entered promiscuous mode [ 765.683208][T13843] device veth1_vlan entered promiscuous mode [ 765.710338][T14326] tipc: Started in network mode [ 765.711399][T14326] tipc: Node identity 3e9b21ea6b78, cluster identity 4711 [ 765.712842][T14326] tipc: Enabled bearer , priority 0 [ 765.761538][T14326] device syzkaller0 entered promiscuous mode [ 765.763314][T14326] tipc: Resetting bearer [ 765.827826][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 765.830078][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 765.832100][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 765.834337][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 765.848085][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.860019][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.866701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.878363][T13843] device veth0_macvtap entered promiscuous mode [ 765.898041][T13843] device veth1_macvtap entered promiscuous mode [ 765.966041][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.968573][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.974618][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.994107][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.996120][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.998168][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.003762][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.009669][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.011728][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.014760][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.017924][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.022812][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.025048][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.027071][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.029053][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.032228][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.034314][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.036924][T13843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.039095][T13843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.049480][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.063772][T14325] tipc: Resetting bearer [ 766.759578][ T4345] tipc: Node number set to 1440948714 [ 777.434460][T14325] tipc: Disabling bearer [ 777.437939][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 777.440163][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 777.442060][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 777.443967][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 777.446261][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.448449][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 777.451587][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 777.482584][T14356] infiniband syz1: set active [ 777.483777][T14356] infiniband syz1: set active [ 777.484868][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 777.487034][ T4358] infiniband syz1: set active [ 777.528107][T13843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.530067][T13843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.531842][T13843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.533707][T13843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.544104][T14243] syzkaller0 speed is unknown, defaulting to 1000 [ 777.545478][T14243] syzkaller0 speed is unknown, defaulting to 1000 [ 777.552837][ T4285] syzkaller0 speed is unknown, defaulting to 1000 [ 777.554901][ T24] syzkaller0 speed is unknown, defaulting to 1000 [ 777.612300][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3206'. [ 777.670866][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 777.727985][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.732906][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.745043][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 777.781235][ T4623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.782981][ T4623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.787689][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 777.922857][T14386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3078'. [ 778.184642][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3217'. [ 778.186483][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3217'. [ 778.544341][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.546930][ T4303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.570794][ T4299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 778.574159][ T4299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 778.578362][ T4299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 778.580910][ T4299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.695365][T14407] syzkaller0 speed is unknown, defaulting to 1000 [ 778.916191][T14420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3225'. [ 779.302317][T14407] chnl_net:caif_netlink_parms(): no params data found [ 779.597669][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 779.722814][T14460] netlink: 'syz.0.3235': attribute type 29 has an invalid length. [ 779.734525][ T4756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.751445][T14460] netlink: 'syz.0.3235': attribute type 29 has an invalid length. [ 779.753279][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.754798][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.756920][T14407] device bridge_slave_0 entered promiscuous mode [ 779.802826][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.804219][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.807186][T14407] device bridge_slave_1 entered promiscuous mode [ 779.813685][ T4623] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.871502][ T4756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.878665][T14460] netlink: 'syz.0.3235': attribute type 29 has an invalid length. [ 779.902491][T14469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3238'. [ 779.948005][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.982318][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.044783][ T4756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.048271][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 780.088387][T14407] team0: Port device team_slave_0 added [ 780.094347][T14407] team0: Port device team_slave_1 added [ 780.163263][ T4756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.176087][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.177799][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.183848][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.219510][T14480] device macvlan1 entered promiscuous mode [ 780.233631][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3244'. [ 780.262841][T14480] team0: Port device macvlan1 added [ 780.267033][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.268576][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.281109][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.396299][T14407] device hsr_slave_0 entered promiscuous mode [ 780.430395][T14407] device hsr_slave_1 entered promiscuous mode [ 780.564087][T14494] netlink: 'syz.0.3249': attribute type 29 has an invalid length. [ 780.598081][T14494] netlink: 'syz.0.3249': attribute type 29 has an invalid length. [ 780.608258][T14496] wlan1: mtu greater than device maximum [ 780.622774][T14494] netlink: 'syz.0.3249': attribute type 29 has an invalid length. [ 780.669678][ T4299] Bluetooth: hci3: command 0x0409 tx timeout [ 780.753124][ T4756] tipc: Disabling bearer [ 780.755739][ T4756] tipc: Disabling bearer [ 780.756997][ T4756] tipc: Left network mode [ 780.871887][T14506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.882060][T14506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.921854][T14506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.925461][T14509] netlink: 'syz.5.3255': attribute type 10 has an invalid length. [ 781.214411][T14529] netlink: 'syz.6.3260': attribute type 13 has an invalid length. [ 781.340535][T14540] netlink: 'syz.4.3263': attribute type 29 has an invalid length. [ 781.360488][T14540] netlink: 'syz.4.3263': attribute type 29 has an invalid length. [ 781.466397][T14540] wlan1: mtu greater than device maximum [ 782.749591][ T4299] Bluetooth: hci3: command 0x041b tx timeout [ 782.760935][T14584] __nla_validate_parse: 7 callbacks suppressed [ 782.760949][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 782.871408][T14407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 782.878363][T14593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3277'. [ 782.925845][T14594] wlan1: mtu greater than device maximum [ 784.204831][T14407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 784.261200][T14407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.301943][T14407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 784.429245][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.448742][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.497591][T14407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 784.505590][T14407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.658338][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.705115][T14407] device veth0_vlan entered promiscuous mode [ 784.715618][T14407] device veth1_vlan entered promiscuous mode [ 784.745422][T14407] device veth0_macvtap entered promiscuous mode [ 784.752953][T14407] device veth1_macvtap entered promiscuous mode [ 784.766504][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.768679][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.774956][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.777066][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.779088][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.786451][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.788500][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.793841][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.795864][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.798121][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.807046][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.817140][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.825418][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.827475][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.833270][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.835386][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.837582][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.844181][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.846312][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.848267][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.854054][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.857233][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.866106][T14407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.867912][T14407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.872986][T14407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.875054][T14407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.965062][T13297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.966974][T13297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.017037][ T4583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.019059][ T4583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.179713][T14597] validate_nla: 4 callbacks suppressed [ 785.179731][T14597] netlink: 'syz.4.3279': attribute type 29 has an invalid length. [ 785.182783][ T4299] Bluetooth: hci3: command 0x040f tx timeout [ 785.195564][T14607] syzkaller0 speed is unknown, defaulting to 1000 [ 785.387890][T14621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3284'. [ 785.473051][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.475114][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 785.477031][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 785.479100][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 785.481709][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.483277][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.485334][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 785.487531][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 785.491768][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.493506][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.496778][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 785.499174][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 785.501801][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 785.504219][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 785.506611][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 785.509151][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 785.512652][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.514822][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.517254][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.519688][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 785.521901][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 785.523719][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 785.525532][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 785.527849][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 785.536076][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 785.538346][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 785.543160][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 785.545217][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 785.547291][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 785.556318][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 785.558531][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 785.561831][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 785.564259][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 785.566637][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 785.568836][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 785.577991][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.581902][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.659777][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 785.661980][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 785.663896][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 785.665930][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 785.667864][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 785.681422][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 786.791072][T14639] netlink: 'syz.4.3289': attribute type 13 has an invalid length. [ 786.792802][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 786.807174][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3292'. [ 786.887267][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3293'. [ 786.895703][T14651] device vlan2 entered promiscuous mode [ 787.020146][T14655] device macvlan1 entered promiscuous mode [ 787.048655][T14659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3297'. [ 787.063854][T14655] team0: Port device macvlan1 added [ 787.202590][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3300'. [ 787.239987][T12870] Bluetooth: hci3: command 0x0419 tx timeout [ 787.266756][ T4756] device hsr_slave_0 left promiscuous mode [ 787.280770][ T4756] device hsr_slave_1 left promiscuous mode [ 787.350588][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.352058][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.354839][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.356323][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.365332][ T4756] device bridge_slave_1 left promiscuous mode [ 787.366715][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.402094][ T4756] device bridge_slave_0 left promiscuous mode [ 787.403441][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.555597][ T4756] device veth1_to_bridge left promiscuous mode [ 787.575522][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3306'. [ 787.620310][T14687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3309'. [ 787.629598][ T4756] device veth1_macvtap left promiscuous mode [ 787.631403][ T4756] device veth0_macvtap left promiscuous mode [ 787.632940][ T4756] device veth1_vlan left promiscuous mode [ 787.634336][ T4756] device veth0_vlan left promiscuous mode [ 790.264268][ T4756] team0 (unregistering): Port device team_slave_1 removed [ 790.392048][ T4756] team0 (unregistering): Port device team_slave_0 removed [ 790.570209][ T4756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.810822][ T4756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.297624][ T4756] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 793.330476][ T4756] bond0 (unregistering): Released all slaves [ 793.579907][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3305'. [ 793.691984][T14696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3311'. [ 793.741057][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3313'. [ 793.939847][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3320'. [ 794.104197][T14723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3323'. [ 794.918529][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3321'. [ 795.123705][T14737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3327'. [ 795.260382][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3328'. [ 795.340142][T14747] netlink: 'syz.6.3330': attribute type 29 has an invalid length. [ 795.342201][T14747] netlink: 'syz.6.3330': attribute type 29 has an invalid length. [ 795.372088][T14747] netlink: 'syz.6.3330': attribute type 29 has an invalid length. [ 795.426900][T14751] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 796.690340][T14765] syzkaller0 speed is unknown, defaulting to 1000 [ 796.710928][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3339'. [ 796.727540][T14772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3340'. [ 796.954899][T14778] netlink: 'syz.5.3343': attribute type 29 has an invalid length. [ 796.967608][T14778] netlink: 'syz.5.3343': attribute type 29 has an invalid length. [ 796.982260][T14778] wlan1: mtu greater than device maximum [ 796.996569][T14778] netlink: 'syz.5.3343': attribute type 29 has an invalid length. [ 797.255456][T14765] syzkaller0 speed is unknown, defaulting to 1000 [ 797.442735][T14787] syzkaller0 speed is unknown, defaulting to 1000 [ 799.659250][T14800] __nla_validate_parse: 1 callbacks suppressed [ 799.659265][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'. [ 799.769683][T14801] device syzkaller1 entered promiscuous mode [ 799.784773][T14804] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3352'. [ 799.871595][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3353'. [ 800.510216][T14832] syzkaller0 speed is unknown, defaulting to 1000 [ 802.510436][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.512268][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.571990][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3365'. [ 802.722683][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3366'. [ 802.734006][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.736290][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.203839][T14867] ipt_CLUSTERIP: Please specify destination IP [ 803.910751][T14864] netlink: 'syz.1.3375': attribute type 29 has an invalid length. [ 803.912745][T14864] netlink: 'syz.1.3375': attribute type 29 has an invalid length. [ 804.002196][T14864] netlink: 'syz.1.3375': attribute type 29 has an invalid length. [ 809.094935][T14892] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3381'. [ 809.189491][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3378'. [ 809.193585][T14887] syzkaller0 speed is unknown, defaulting to 1000 [ 809.586102][T14913] netlink: 'syz.0.3388': attribute type 29 has an invalid length. [ 809.588180][T14913] netlink: 'syz.0.3388': attribute type 29 has an invalid length. [ 809.635143][T14913] netlink: 'syz.0.3388': attribute type 29 has an invalid length. [ 810.179971][T14930] ipt_CLUSTERIP: Please specify destination IP [ 810.888833][ T4583] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 811.132818][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3394'. [ 812.777682][T14939] syzkaller0 speed is unknown, defaulting to 1000 [ 812.879557][T14946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3395'. [ 813.281861][T14954] netlink: 'syz.6.3400': attribute type 29 has an invalid length. [ 813.361207][T14954] netlink: 'syz.6.3400': attribute type 29 has an invalid length. [ 813.401814][T14954] netlink: 'syz.6.3400': attribute type 29 has an invalid length. [ 813.497263][T14837] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 813.696031][T14969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3405'. [ 813.738723][T14970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.247028][T14970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.649661][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3411'. [ 815.955583][T14995] syzkaller0 speed is unknown, defaulting to 1000 [ 818.342051][T15011] netlink: 'syz.1.3419': attribute type 29 has an invalid length. [ 818.566036][T15011] netlink: 'syz.1.3419': attribute type 29 has an invalid length. [ 818.608699][T15016] netlink: 'syz.1.3419': attribute type 29 has an invalid length. [ 820.090659][T12870] Bluetooth: hci4: command 0x0406 tx timeout [ 821.033394][ T4457] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 821.785591][ T4457] usb 1-1: config 0 interface 0 has no altsetting 0 [ 821.789180][ T4457] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= e.63 [ 821.791868][ T4457] usb 1-1: New USB device strings: Mfr=138, Product=166, SerialNumber=0 [ 821.798863][ T4457] usb 1-1: Product: syz [ 821.816850][ T4457] usb 1-1: Manufacturer: syz [ 821.833911][ T4457] usb 1-1: config 0 descriptor?? [ 821.868994][ T4457] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 822.830893][T12285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.844307][ T7749] usb 1-1: USB disconnect, device number 16 [ 823.009310][T12285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.127674][T15083] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3440'. [ 823.138902][T12285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.998114][T12285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.655912][T15098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.686546][T15098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.767958][T15099] team0: Port device macvlan1 removed [ 825.775462][T15103] team0: No ports can be present during mode change [ 825.788521][T15095] syzkaller0 speed is unknown, defaulting to 1000 [ 826.141531][T15123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3453'. [ 826.182211][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3454'. [ 828.640468][T15178] x_tables: ip_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 829.426393][T15184] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3467'. [ 830.149209][T15188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 830.207937][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3466'. [ 830.219965][T15174] netlink: 'syz.5.3467': attribute type 10 has an invalid length. [ 832.758502][T15222] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3481'. [ 832.828768][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3484'. [ 833.093684][T15238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.171842][T15238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.177195][T15238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.199101][T15266] team0: No ports can be present during mode change [ 835.521881][T15238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.559679][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3497'. [ 835.593742][T15283] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3496'. [ 835.916867][T15238] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.956165][T15238] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.177222][T15238] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.183523][T15238] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.078166][T12870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 838.081611][T12870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.083894][T12870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.086764][T12870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.089158][T12870] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 838.091905][T12870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.216468][T15336] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3508'. [ 839.244996][T15338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3509'. [ 839.423071][T15318] syzkaller0 speed is unknown, defaulting to 1000 [ 840.108458][T12285] device hsr_slave_0 left promiscuous mode [ 840.199845][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 841.067215][T12285] device hsr_slave_1 left promiscuous mode [ 841.564223][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.565950][T12285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.567966][T12285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.572371][T12285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.575849][T12285] device bridge_slave_1 left promiscuous mode [ 841.577295][T12285] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.710622][T12285] device bridge_slave_0 left promiscuous mode [ 841.712269][T12285] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.776357][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3521'. [ 841.870104][T12285] device veth1_macvtap left promiscuous mode [ 841.871557][T12285] device veth0_macvtap left promiscuous mode [ 841.872873][T12285] device veth1_vlan left promiscuous mode [ 841.874055][T12285] device veth0_vlan left promiscuous mode [ 842.269527][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 843.752898][T12285] team0 (unregistering): Port device team_slave_1 removed [ 843.960762][T12285] team0 (unregistering): Port device team_slave_0 removed [ 844.140373][T12285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.349498][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 844.360280][T12285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.829702][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 846.429579][T12870] Bluetooth: hci0: command 0x0419 tx timeout [ 847.012809][T12285] bond0 (unregistering): Released all slaves [ 847.298425][T15318] chnl_net:caif_netlink_parms(): no params data found [ 847.359975][T15388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3520'. [ 848.450854][T15318] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.452401][T15318] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.505951][T15318] device bridge_slave_0 entered promiscuous mode [ 848.517413][T15318] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.518915][T15318] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.552745][T15318] device bridge_slave_1 entered promiscuous mode [ 848.625972][T15318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.631996][T15318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.664482][T15318] team0: Port device team_slave_0 added [ 848.668797][T15318] team0: Port device team_slave_1 added [ 849.918570][T15430] xt_CT: No such helper "snmp_trap" [ 850.029622][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 850.119950][T15318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.121433][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.126964][T15318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.211266][T15318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.212674][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.217595][T15318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.433027][T15318] device hsr_slave_0 entered promiscuous mode [ 852.232824][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 852.260831][T15318] device hsr_slave_1 entered promiscuous mode [ 852.684148][T15318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.685814][T15318] Cannot create hsr debugfs directory [ 852.988928][T15454] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3535'. [ 853.042251][T15460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3536'. [ 854.908386][T15497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3549'. [ 854.918589][T15318] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 854.936921][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3551'. [ 854.966894][T15318] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 855.001400][T15318] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 855.012510][T15318] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 855.423229][T15523] support for cryptoloop has been removed. Use dm-crypt instead. [ 856.111909][T15318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.203134][T15318] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.205748][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.207946][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.279703][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.281871][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.283818][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.285150][T14996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.287089][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 856.289193][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 857.000446][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.001987][T14996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.051787][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.053456][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.109922][T15537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3559'. [ 857.114412][T15537] device vlan2 entered promiscuous mode [ 857.152226][T15537] device ip6gretap0 entered promiscuous mode [ 857.292180][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 857.294707][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 857.297178][T15541] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3562'. [ 858.081917][T15318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.092511][T15318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.122818][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 858.125351][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 858.129613][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 858.131952][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 858.134096][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 858.136398][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 858.138403][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 858.144160][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3565'. [ 858.151855][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 858.154071][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 858.156283][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 858.158458][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 859.554476][T15582] device vlan3 entered promiscuous mode [ 859.723248][T15597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3577'. [ 859.739676][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3573'. [ 860.723141][T15584] device hsr_slave_1 left promiscuous mode [ 860.761006][T15591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3575'. [ 860.833903][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 860.835608][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 860.892120][T15318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.794896][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.797404][T14996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.835933][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.838154][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.855512][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.858203][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 861.860462][T15318] device veth0_vlan entered promiscuous mode [ 861.885765][T15318] device veth1_vlan entered promiscuous mode [ 861.950574][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 861.953126][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 861.972539][T15318] device veth0_macvtap entered promiscuous mode [ 861.985743][T15318] device veth1_macvtap entered promiscuous mode [ 862.028835][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.031310][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.033354][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.045955][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.047964][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.065109][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.067119][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.069201][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.073711][T15318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.077008][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.079188][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.149749][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.151938][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.154050][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.156037][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.157842][T15318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.170988][T15318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.193122][T15318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.126584][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'. [ 863.143575][T15318] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.145436][T15318] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.159500][T15318] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.161426][T15318] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.231965][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.233267][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.365599][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 863.368119][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 863.371711][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.383856][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.386983][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 863.391730][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.470397][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.472208][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.487785][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.489888][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.496694][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 863.498917][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 863.626969][ T27] audit: type=1326 audit(1119.583:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.1.3597" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89752ba8 code=0x0 [ 863.673458][ T27] audit: type=1326 audit(1119.633:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.1.3597" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=436 compat=0 ip=0xffff89752ba8 code=0x0 [ 863.837508][T15695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3600'. [ 864.332485][T15687] netlink: 'syz.5.3599': attribute type 1 has an invalid length. [ 864.350244][T15687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.830527][T15732] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3613'. [ 864.895610][T15737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 865.006983][T15744] netlink: 'syz.7.3616': attribute type 1 has an invalid length. [ 865.139774][T15754] netlink: 'syz.5.3619': attribute type 29 has an invalid length. [ 865.141778][T15754] netlink: 'syz.5.3619': attribute type 29 has an invalid length. [ 865.151681][T15754] wlan1: mtu greater than device maximum [ 865.457460][T15772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3626'. [ 865.527514][T15778] ------------[ cut here ]------------ [ 865.529008][T15778] WARNING: CPU: 0 PID: 15778 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x154/0x180 [ 865.531194][T15778] Modules linked in: [ 865.531961][T15778] CPU: 0 PID: 15778 Comm: syz.7.3629 Not tainted 6.1.123-syzkaller #0 [ 865.533665][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 865.535724][T15778] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 865.537391][T15778] pc : taprio_get_start_time+0x154/0x180 [ 865.538542][T15778] lr : taprio_get_start_time+0x150/0x180 [ 865.539768][T15778] sp : ffff800021ad6aa0 [ 865.540614][T15778] x29: ffff800021ad6aa0 x28: ffff0000dfbc2000 x27: dfff800000000000 [ 865.542303][T15778] x26: ffff0000f5736d00 x25: ffff0000dfbc20f0 x24: dfff800000000000 [ 865.543904][T15778] x23: 0000000000000000 x22: 000001051e7784c9 x21: 0000000000000000 [ 865.545524][T15778] x20: 0000000000000000 x19: ffff800021ad6dc0 x18: ffff800021ad6760 [ 865.547192][T15778] x17: ffff800018b7b000 x16: ffff8000084f2fe8 x15: ffff80001865bf80 [ 865.548978][T15778] x14: 1ffff00002b520b2 x13: dfff800000000000 x12: 0000000000080000 [ 865.550800][T15778] x11: 0000000000005c4d x10: ffff800027c99000 x9 : ffff8000108dfaa4 [ 865.552479][T15778] x8 : 0000000000005c4e x7 : ffff8000108df9fc x6 : 0000000000000000 [ 865.554116][T15778] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 865.555899][T15778] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 00000000fffffff2 [ 865.557516][T15778] Call trace: [ 865.558291][T15778] taprio_get_start_time+0x154/0x180 [ 865.559412][T15778] taprio_change+0x2d20/0x39d0 [ 865.560381][T15778] taprio_init+0x4a8/0x530 [ 865.561283][T15778] qdisc_create+0x70c/0xe6c [ 865.562256][T15778] tc_modify_qdisc+0xa14/0x186c [ 865.563359][T15778] rtnetlink_rcv_msg+0x72c/0xd94 [ 865.564448][T15778] netlink_rcv_skb+0x20c/0x3b8 [ 865.565464][T15778] rtnetlink_rcv+0x28/0x38 [ 865.566446][T15778] netlink_unicast+0x65c/0x898 [ 865.567440][T15778] netlink_sendmsg+0x834/0xb18 [ 865.568398][T15778] ____sys_sendmsg+0x55c/0x848 [ 865.569458][T15778] __sys_sendmsg+0x26c/0x33c [ 865.570427][T15778] __arm64_sys_sendmsg+0x80/0x94 [ 865.571441][T15778] invoke_syscall+0x98/0x2bc [ 865.572477][T15778] el0_svc_common+0x138/0x258 [ 865.573542][T15778] do_el0_svc+0x58/0x13c [ 865.574453][T15778] el0_svc+0x58/0x168 [ 865.575307][T15778] el0t_64_sync_handler+0x84/0xf0 [ 865.576409][T15778] el0t_64_sync+0x18c/0x190 [ 865.577335][T15778] irq event stamp: 397 [ 865.578280][T15778] hardirqs last enabled at (396): [] ktime_mono_to_any+0x14c/0x22c [ 865.580295][T15778] hardirqs last disabled at (397): [] el1_dbg+0x24/0x80 [ 865.582118][T15778] softirqs last enabled at (314): [] local_bh_enable+0x10/0x34 [ 865.584221][T15778] softirqs last disabled at (388): [] taprio_change+0x2b98/0x39d0 [ 865.586156][T15778] ---[ end trace 0000000000000000 ]---