last executing test programs: 24m10.99702055s ago: executing program 4 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x40088400, 0x1, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m9.989636247s ago: executing program 4 (id=60): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x11028, 0x0) 24m9.581290266s ago: executing program 4 (id=64): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 24m9.053301714s ago: executing program 4 (id=70): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000a40)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@data_err_abort}, {@jqfmt_vfsv0}, {@errors_remount}, {@errors_remount}, {@auto_da_alloc_val}]}, 0x1, 0x466, &(0x7f0000000480)="$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") 24m8.530463851s ago: executing program 4 (id=73): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1506, &(0x7f0000001ac0)="$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") unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 24m7.730639144s ago: executing program 4 (id=79): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readv(r0, &(0x7f0000000f00)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1) 23m52.698045597s ago: executing program 32 (id=79): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) readv(r0, &(0x7f0000000f00)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1) 19m54.981437766s ago: executing program 1 (id=975): openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffd}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x5c}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1f, &(0x7f0000000400)={[{@lazytime}, {}, {@acl}, {@nolazytime}, {@fastboot}, {@discard_unit_section}, {@compress_cache}, {@lazytime}, {@whint_mode_user}, {@noinline_xattr}, {}, {@jqfmt_vfsv1}, {@six_active_logs}, {@background_gc_off}, {@extent_cache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nousep_xattr#\xc5\xf8\xf5\xfe\a\xc7\xa5\x17\xe1\xb8\xd3\'\xe5\xe4\x81b\v\x91aOtR\xdb\xd6u\xfc-\xb3\xf4\xf4A-\xf7\x1f7;:\xa4fZ\xf2\t\xafrkR\xef\xe7w\xfc\xd0J`\xcb\xf48\x895b\xb7n\xfe\x8a\xc6K\xb7g\x99\xca,\xdb\xc3~\xe4\xaa9W\xa2\xfe\xaf\xce\"\xc1m\xc8\xecq\xfbG\x97AK\xdf\xa7D\x8f\xa6\xe2\xc4L7\x8e\xf5%\xac\x84n\xe1\x13\xa1u\xf00\xbe)c\x82I\xe6Pu\xaaG1-\x12\x14\xe7\x12\xd6[\x8a>\xbbc-\x11\x15\x02\xe0bW\xfew\xb3\xe4@\xf9\x94.\xf9\x00\xfa\x17\xeb8>\v\x04|\x0eYZ\xd3\x06\xb4\xdb:fKW\xc9\xebhn\x82`'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x5553, &(0x7f000000b3c0)="$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") 19m51.982097906s ago: executing program 1 (id=978): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0xd, 0x2, "e54a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000040)={0x20, 0x30, 0x3, "511056"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) 19m50.972797633s ago: executing program 1 (id=985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe54, &(0x7f0000001b00)=ANY=[], 0x0) 19m49.405675234s ago: executing program 1 (id=988): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) chdir(0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x4}}, 0x10, &(0x7f0000000240), 0x0, &(0x7f00000003c0)="185d657cbaad6807c43edf0ab17a280a47501c1e21f65d", 0x17, 0x20008040}, 0x4000000) 19m48.251444377s ago: executing program 1 (id=994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 19m47.973593293s ago: executing program 1 (id=997): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 19m32.722612253s ago: executing program 33 (id=997): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 11m39.538772307s ago: executing program 6 (id=3093): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth1_vlan\x00', @remote}) 11m38.716972644s ago: executing program 6 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf"], 0x0) 11m35.186040762s ago: executing program 6 (id=3106): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100100, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000580)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000019000109000000bc614fc4cf864e2b200004fd010000000008000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00232abd7000fbdbdf258600010000009900060000000e000000050019010d000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340), 0x0, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @generic={0x312, 0x6006, 0x6, 0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "db5ebb4953", @remote}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcc3, 0x7e2, 0x4a9, 0x7b2]}) 11m34.310247758s ago: executing program 6 (id=3109): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 11m33.960535997s ago: executing program 6 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') pread64(r3, 0x0, 0x0, 0x100008) 11m30.949043579s ago: executing program 6 (id=3119): gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getpid() r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) 11m15.836513946s ago: executing program 34 (id=3119): gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getpid() r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) 5m18.245447061s ago: executing program 7 (id=4827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000700)="05032200d3fc2200000047a1031c09102c280a7ed6eaec2d835126aa953fb6892365e023fab1293beb91ae7d58d07c94b71ea9da", 0x34, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m14.044433931s ago: executing program 7 (id=4838): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x28, r0, 0x1, 0x70bd26, 0x27dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) 5m13.847891494s ago: executing program 7 (id=4841): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x6b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb085f) 5m13.180773415s ago: executing program 7 (id=4850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6361, 0x5, 0xf, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffffffffffff, 0x8000, 0x0, 0xf, 0x7, 0xc0e}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008894) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m8.839531958s ago: executing program 7 (id=4856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x4) write$tun(0xffffffffffffffff, &(0x7f0000001040)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xe2, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x1]}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0x40, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99fe25b8950382223c7931fa357112"}}}}, 0xf0) 5m8.345233621s ago: executing program 7 (id=4862): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') accept$netrom(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x200}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x32, 0x0, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) close(0x4) 4m53.248204807s ago: executing program 35 (id=4862): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') accept$netrom(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x200}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x32, 0x0, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) close(0x4) 2m28.915219206s ago: executing program 3 (id=5426): r0 = semget(0x0, 0x1, 0x388) semctl$GETNCNT(r0, 0x57c3fda1c1a9f830, 0x3, 0x0) 2m28.700500482s ago: executing program 3 (id=5430): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000180), 0x4) connect$rose(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) epoll_create1(0x0) socket(0x10, 0x3, 0x0) 2m28.345006491s ago: executing program 3 (id=5436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m28.117832469s ago: executing program 3 (id=5439): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100100, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000580)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000019000109000000bc614fc4cf864e2b200004fd010000000008000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="00232abd7000fbdbdf258600010000009900060000000e000000050019010d000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) sendmmsg$inet(r0, &(0x7f0000001340), 0x0, 0x20000014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @generic={0x312, 0x6006, 0x6, 0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "db5ebb4953", @remote}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcc3, 0x7e2, 0x4a9, 0x7b2]}) 2m27.445482291s ago: executing program 3 (id=5447): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc50e}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000180), 0x4) connect$rose(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) bind$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) epoll_create1(0x0) socket(0x10, 0x3, 0x0) 2m27.166742817s ago: executing program 3 (id=5454): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x20000000002) 2m11.412713562s ago: executing program 36 (id=5454): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x20000000002) 2m4.830700039s ago: executing program 2 (id=5591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000021850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m4.616918975s ago: executing program 2 (id=5593): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010000", 0x7) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m3.68085022s ago: executing program 2 (id=5606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m0.55471775s ago: executing program 2 (id=5610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1m55.285673977s ago: executing program 2 (id=5619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m54.711610692s ago: executing program 2 (id=5625): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="07000000010000", 0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 27.547805016s ago: executing program 8 (id=5812): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x6a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 23.938594197s ago: executing program 8 (id=5818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 20.905010542s ago: executing program 5 (id=5819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 20.776486753s ago: executing program 5 (id=5822): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000001040)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000003c0)={"0e00", 0xfffd, 0x6, 0x2, 0xfffffffe, 0x0, "f7000000000000000000001a00", "2c0100", "0300", "fcffffff", ['\x00', "808e88e2e9f7ffffffffd138", '\f\x00', "fff700000000002b725d5700"]}) 20.632994557s ago: executing program 8 (id=5823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000700)="05032200d3fc2200000047a1031c09102c280a7ed6eaec2d8351", 0x1a, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 20.487445691s ago: executing program 5 (id=5826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r6, r4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x50) 17.641308595s ago: executing program 5 (id=5829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x1b}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x894) 17.482153612s ago: executing program 8 (id=5830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) writev(r0, &(0x7f00000003c0), 0x0) 13.449659363s ago: executing program 9 (id=5838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x201, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 11.267624676s ago: executing program 8 (id=5839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000700)="05032200d3fc2200000047a1031c09102c280a7ed6eaec2d8351", 0x1a, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.746446831s ago: executing program 9 (id=5840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x312514d, 0x184) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000400)="411e3c7014cd4acc66c2d5", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 7.606266954s ago: executing program 5 (id=5841): syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000680)={0x25, &(0x7f0000000500)=[{0x21, '\x00', @data=0x3, 0x3}, {0x3a, '\x00', @data=0x1, 0xc113}, {0x26, '\x00', @st={0x4, [{0x2, @svalue=0x800}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x6}, {0x1, @svalue=0x2}]}}, {0x9, '\x00', @buffer={"df0c2e0fefd5e3a23b6080776912a0f4926bfa3ca59a2a58738d4d3ce4551c36", 0x20}, 0x3}, {0x1f, '\x00', @buffer={"ebde8efe075205ed06c8215882f13ec9efc333caa49d22e02c9bc98c191b3290", 0x20}, 0x4}]}) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r3, 0x0, 0x3, 'syz0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0xc) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000000c0)=0x8000) 6.369133361s ago: executing program 0 (id=5845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f687372000000"], 0xe8}}, 0x0) 6.136651679s ago: executing program 0 (id=5846): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000140)={r2}) 5.975640876s ago: executing program 0 (id=5847): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594", 0xf}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 5.798197996s ago: executing program 0 (id=5848): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) close(0x3) 5.516461742s ago: executing program 0 (id=5849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000006c0)={0x0, 0x300, &(0x7f0000000680)={&(0x7f00000005c0)={0x28, r1, 0x21, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 3.223939474s ago: executing program 5 (id=5850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, 0x0, 0x2880) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x1b}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x894) 3.221677624s ago: executing program 9 (id=5851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) 658.694781ms ago: executing program 0 (id=5852): socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22040004}, 0x4088) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa00000800", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 581.007734ms ago: executing program 8 (id=5853): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x5, @mcast2, 0x8}}, 0x0, 0x0, 0x47, 0x0, "bb02a3c3e07be97dc57d077508474004000b42a20000000000000010208a0e2f894e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 513.690655ms ago: executing program 9 (id=5854): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="07000000010000", 0x7) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 235.781411ms ago: executing program 9 (id=5855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f687372000000"], 0xe8}}, 0x0) 0s ago: executing program 9 (id=5856): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x24044092) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) kernel console output (not intermixed with test programs): esses unique to avoid problems! [ 1029.719791][T16421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.735571][T16929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1029.777636][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1029.816422][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1029.842493][T16421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.861038][T16421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.885428][T16421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.947685][T16421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.966364][T16421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.978996][T16421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.998796][T16421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.007780][T16941] device syzkaller0 entered promiscuous mode [ 1030.017080][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1030.035523][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.053862][T16421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.069570][T16421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.108324][T16421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.118895][T16421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.187221][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3685'. [ 1030.235560][T16948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.250369][T16950] netlink: 'syz.7.3685': attribute type 1 has an invalid length. [ 1030.303955][T16950] device vxlan0 entered promiscuous mode [ 1030.349960][T16950] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.360059][T16950] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.369299][T16950] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.378345][T16950] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.508998][T16950] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 1030.594746][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1030.611675][T16948] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3685'. [ 1030.631206][T16963] loop5: detected capacity change from 0 to 512 [ 1030.642968][T16948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1030.677233][T16960] device bridge12 entered promiscuous mode [ 1030.695039][T16960] team0: Port device bridge12 added [ 1030.774375][T16963] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3688: missing EA_INODE flag [ 1030.796692][T16963] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3688: error while reading EA inode 12 err=-117 [ 1030.894015][T16963] EXT4-fs (loop5): 1 orphan inode deleted [ 1030.912329][T16963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1031.704527][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.712504][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.820137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1031.828113][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.870014][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.880483][T16979] device bridge13 entered promiscuous mode [ 1031.916459][T16979] team0: Port device bridge13 added [ 1035.873975][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1035.882697][T16980] bridge0: port 1(team0) entered blocking state [ 1035.893006][T16980] bridge0: port 1(team0) entered disabled state [ 1036.006101][T17013] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1036.018198][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1036.209573][T17020] device syzkaller0 entered promiscuous mode [ 1036.277748][T17024] loop7: detected capacity change from 0 to 512 [ 1036.305817][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1036.346378][T17024] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.3701: missing EA_INODE flag [ 1036.388843][T17024] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3701: error while reading EA inode 12 err=-117 [ 1036.431568][T17024] EXT4-fs (loop7): 1 orphan inode deleted [ 1036.463691][T17024] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1036.743529][T17037] netlink: 'syz.3.3704': attribute type 1 has an invalid length. [ 1037.241255][T17045] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1037.263299][T17037] device ip6_vti0 entered promiscuous mode [ 1037.382181][T14714] EXT4-fs (loop7): unmounting filesystem. [ 1037.572059][T17054] device bridge1 entered promiscuous mode [ 1037.606336][T17054] team0: Port device bridge1 added [ 1037.634208][T17054] bridge0: port 3(team0) entered blocking state [ 1037.640726][T17054] bridge0: port 3(team0) entered disabled state [ 1037.664760][T17054] device team0 entered promiscuous mode [ 1037.670879][T17054] device team_slave_0 entered promiscuous mode [ 1037.677591][T17054] device team_slave_1 entered promiscuous mode [ 1037.693760][T17054] bridge0: port 3(team0) entered blocking state [ 1037.700526][T17054] bridge0: port 3(team0) entered forwarding state [ 1038.907716][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1039.067275][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3719'. [ 1039.081064][T17090] device syzkaller0 entered promiscuous mode [ 1040.273541][ T4349] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1040.464456][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1040.483465][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 1040.491578][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.235646][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.272194][ T4349] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.299302][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.312144][ T4349] usb 4-1: Product: syz [ 1041.316485][ T4349] usb 4-1: Manufacturer: syz [ 1041.321113][ T4349] usb 4-1: SerialNumber: syz [ 1041.583737][ T4349] usb 4-1: 0:2 : does not exist [ 1041.634678][ T4349] usb 4-1: USB disconnect, device number 77 [ 1041.652758][T17138] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1041.712473][T17141] netlink: 'syz.2.3736': attribute type 10 has an invalid length. [ 1041.732153][T17141] device veth0_vlan left promiscuous mode [ 1041.739281][T17141] device veth0_vlan entered promiscuous mode [ 1041.757412][T17141] team0: Device veth0_vlan failed to register rx_handler [ 1041.842120][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3737'. [ 1041.855022][T17108] udevd[17108]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.011003][T17152] device syzkaller0 entered promiscuous mode [ 1043.371918][T17182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1043.402537][T17182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1043.435519][T17181] netlink: 'syz.0.3750': attribute type 10 has an invalid length. [ 1043.518862][T17181] device veth0_vlan left promiscuous mode [ 1043.568448][T17181] device veth0_vlan entered promiscuous mode [ 1043.630991][T17181] team0: Device veth0_vlan failed to register rx_handler [ 1044.463658][ T4309] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1044.703308][ T4309] usb 3-1: Using ep0 maxpacket: 16 [ 1044.729268][ T4309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.912193][ T4309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.971975][ T4309] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.013408][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.016731][T17215] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3761'. [ 1045.042966][ T4309] usb 3-1: Product: syz [ 1045.047190][ T4309] usb 3-1: Manufacturer: syz [ 1045.075080][ T4309] usb 3-1: SerialNumber: syz [ 1045.186444][T17221] loop5: detected capacity change from 0 to 512 [ 1045.207724][T17218] device syzkaller0 entered promiscuous mode [ 1045.227849][T17218] 0: reclassify loop, rule prio 0, protocol 800 [ 1045.290575][T17221] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3764: missing EA_INODE flag [ 1045.307545][ T4309] usb 3-1: 0:2 : does not exist [ 1045.322346][ T4309] usb 3-1: USB disconnect, device number 22 [ 1045.358188][T17221] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3764: error while reading EA inode 12 err=-117 [ 1045.384279][T17221] EXT4-fs (loop5): 1 orphan inode deleted [ 1045.391202][T17221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1045.581826][T17231] device bridge_slave_1 left promiscuous mode [ 1045.603365][T17231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.625306][T17231] device bridge_slave_0 left promiscuous mode [ 1045.632679][T17231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.750366][T17108] udevd[17108]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.185872][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3768'. [ 1046.258677][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1046.262138][T17235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1046.272666][T17236] netlink: 'syz.7.3768': attribute type 1 has an invalid length. [ 1046.542033][T17246] loop5: detected capacity change from 0 to 512 [ 1046.630263][T17246] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3772: missing EA_INODE flag [ 1046.753540][T17246] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3772: error while reading EA inode 12 err=-117 [ 1046.775726][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 1046.793605][T17261] No such timeout policy "syz0" [ 1046.829375][T17246] EXT4-fs (loop5): 1 orphan inode deleted [ 1046.873195][T17246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1047.662325][T17268] device syzkaller0 entered promiscuous mode [ 1047.814235][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1047.921596][T17274] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 1047.990288][T17277] device bond3 entered promiscuous mode [ 1048.105256][T17277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1051.210481][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1051.239103][T17297] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 1051.259445][T17297] device vxlan0 entered promiscuous mode [ 1051.272605][T17298] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1051.287830][T17298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1051.345287][T17300] device bridge0 entered promiscuous mode [ 1051.374781][T17300] team0: Port device bridge0 added [ 1051.676791][T17320] loop5: detected capacity change from 0 to 512 [ 1051.784073][T17320] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3793: missing EA_INODE flag [ 1051.849364][T17320] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3793: error while reading EA inode 12 err=-117 [ 1051.863506][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3795'. [ 1051.893050][T17320] EXT4-fs (loop5): 1 orphan inode deleted [ 1051.899077][T17320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1052.844680][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1053.005828][T17349] device bridge2 entered promiscuous mode [ 1053.068009][T17349] team0: Port device bridge2 added [ 1053.075036][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3804'. [ 1053.861931][T17377] device syzkaller0 entered promiscuous mode [ 1054.757560][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.764503][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.324480][T17384] device bridge6 entered promiscuous mode [ 1058.334294][T17406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1058.350355][T17408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1058.503669][T17417] netlink: 'syz.2.3826': attribute type 10 has an invalid length. [ 1058.541275][T17417] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1058.586194][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.743436][T17428] device syzkaller0 entered promiscuous mode [ 1058.744214][T17430] loop5: detected capacity change from 0 to 512 [ 1058.835911][T17430] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3831: missing EA_INODE flag [ 1058.861558][T17430] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3831: error while reading EA inode 12 err=-117 [ 1058.908723][T17430] EXT4-fs (loop5): 1 orphan inode deleted [ 1058.922457][T17430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1059.121034][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3833'. [ 1059.227079][T17438] netlink: 'syz.3.3833': attribute type 1 has an invalid length. [ 1059.867744][T17438] device vxlan0 entered promiscuous mode [ 1059.901382][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1060.165353][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1060.181578][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1061.125302][T17457] device syzkaller0 entered promiscuous mode [ 1061.323098][T17466] netlink: 'syz.2.3843': attribute type 1 has an invalid length. [ 1061.513492][T17470] device bond1 entered promiscuous mode [ 1061.519370][T17470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1061.589900][T17478] loop5: detected capacity change from 0 to 512 [ 1061.720720][T17478] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3846: missing EA_INODE flag [ 1061.766804][T17478] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3846: error while reading EA inode 12 err=-117 [ 1061.803310][T17478] EXT4-fs (loop5): 1 orphan inode deleted [ 1061.809811][T17478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1063.047260][T17474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.085081][T17474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.352572][T17474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.361945][T17474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.371879][T17474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.381172][T17474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.645120][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1064.092443][T17519] device syzkaller0 entered promiscuous mode [ 1064.953068][T17549] loop5: detected capacity change from 0 to 512 [ 1064.995147][T17549] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3866: missing EA_INODE flag [ 1065.008313][T17549] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3866: error while reading EA inode 12 err=-117 [ 1065.043205][T17549] EXT4-fs (loop5): 1 orphan inode deleted [ 1065.050237][T17549] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1068.835087][T17542] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 1069.004971][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1069.191599][T17568] device syzkaller0 entered promiscuous mode [ 1069.305718][T17572] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1069.318976][T17572] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1070.292217][T17585] device syzkaller0 entered promiscuous mode [ 1070.314496][T17587] device syzkaller0 entered promiscuous mode [ 1070.323636][ T4308] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1070.354278][T17591] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1070.494638][ T4308] usb 3-1: device descriptor read/64, error -71 [ 1071.366054][ T4308] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1071.535622][ T4308] usb 3-1: device descriptor read/64, error -71 [ 1071.654487][ T4308] usb usb3-port1: attempt power cycle [ 1072.073804][ T4308] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1072.113083][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 1072.139866][ T4308] usb 3-1: device descriptor read/8, error -71 [ 1072.420811][ T4308] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1072.475427][ T4308] usb 3-1: device descriptor read/8, error -71 [ 1072.607790][ T4308] usb usb3-port1: unable to enumerate USB device [ 1074.332103][T17601] netlink: 'syz.2.3882': attribute type 1 has an invalid length. [ 1074.672929][T17614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1074.685338][T17614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1075.483706][T17618] device syzkaller0 entered promiscuous mode [ 1075.621517][T17627] device syzkaller0 entered promiscuous mode [ 1076.956102][T17663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1077.048479][T17665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1077.062310][T17665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1078.114515][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3905'. [ 1078.181988][T17682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1078.220175][T17684] bond3: (slave veth7): Enslaving as an active interface with an up link [ 1078.264197][T17690] loop5: detected capacity change from 0 to 512 [ 1078.270665][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1078.289632][T17681] device syzkaller0 entered promiscuous mode [ 1078.308967][T17690] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3909: missing EA_INODE flag [ 1078.344949][T17690] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3909: error while reading EA inode 12 err=-117 [ 1078.374381][T17682] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1078.393389][T17690] EXT4-fs (loop5): 1 orphan inode deleted [ 1078.399352][T17690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1078.420599][T17682] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1078.879642][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3910'. [ 1079.315275][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1079.883874][T17735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1080.260582][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1080.288747][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1080.329132][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1080.364495][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1080.441391][T17754] device bridge1 entered promiscuous mode [ 1080.449234][T17754] team0: Port device bridge1 added [ 1080.456111][T17755] bridge0: port 1(team0) entered blocking state [ 1080.474592][T17755] bridge0: port 1(team0) entered disabled state [ 1080.720589][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 1081.392171][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1081.527159][T17802] netlink: 'syz.5.3948': attribute type 1 has an invalid length. [ 1081.701578][T17804] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1081.757740][T17806] device syzkaller0 entered promiscuous mode [ 1082.059331][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3955'. [ 1082.284304][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3959'. [ 1082.764878][T17852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.102264][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3972'. [ 1083.393095][ T26] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1083.583067][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 1083.620195][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.740757][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.931603][ T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1084.071616][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.243828][ T26] usb 4-1: Product: syz [ 1084.264268][ T26] usb 4-1: Manufacturer: syz [ 1084.275394][ T26] usb 4-1: SerialNumber: syz [ 1084.512115][ T26] usb 4-1: 0:2 : does not exist [ 1084.545060][ T26] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1084.621775][ T26] usb 4-1: USB disconnect, device number 78 [ 1084.690665][T17912] device syzkaller0 entered promiscuous mode [ 1084.853860][T17597] udevd[17597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.078413][T17930] netlink: 'syz.5.3992': attribute type 1 has an invalid length. [ 1085.198771][T17934] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1085.429748][T17945] __nla_validate_parse: 4 callbacks suppressed [ 1085.429840][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1086.202569][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1086.360526][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4002'. [ 1086.485473][T17971] netlink: 'syz.2.4007': attribute type 10 has an invalid length. [ 1086.510759][T17968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.592640][T17974] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1086.692905][ T129] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1086.723011][ T7969] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1087.532915][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 1087.587903][ T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.603298][ T7969] usb 4-1: Using ep0 maxpacket: 16 [ 1087.608597][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.623875][ T7969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.654975][ T7969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.667050][ T129] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1087.683531][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.695025][ T7969] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1087.708156][ T129] usb 1-1: Product: syz [ 1087.712645][ T129] usb 1-1: Manufacturer: syz [ 1087.717821][ T7969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.726947][ T129] usb 1-1: SerialNumber: syz [ 1087.729258][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4013'. [ 1087.731823][ T7969] usb 4-1: Product: syz [ 1087.755908][ T7969] usb 4-1: Manufacturer: syz [ 1087.785653][ T7969] usb 4-1: SerialNumber: syz [ 1087.977423][ T129] usb 1-1: 0:2 : does not exist [ 1087.994032][ T129] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1088.031792][ T7969] usb 4-1: 0:2 : does not exist [ 1088.057561][ T129] usb 1-1: USB disconnect, device number 72 [ 1088.083376][ T7969] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1088.116476][T17597] udevd[17597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.158218][ T7969] usb 4-1: USB disconnect, device number 79 [ 1091.140990][T18015] team0 (unregistering): Port device team_slave_0 removed [ 1091.187746][T18015] team0 (unregistering): Port device team_slave_1 removed [ 1091.218308][T18015] team0 (unregistering): Port device bridge0 removed [ 1091.239046][T18015] team0 (unregistering): Port device bridge1 removed [ 1091.469167][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4019'. [ 1092.526612][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1092.547398][ T26] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1092.619852][T18057] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 1092.732919][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 1092.739882][ T26] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.760782][ T26] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.804477][ T26] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.832863][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.840938][ T26] usb 8-1: Product: syz [ 1092.853219][ T26] usb 8-1: Manufacturer: syz [ 1092.857892][ T26] usb 8-1: SerialNumber: syz [ 1093.094065][ T26] usb 8-1: 0:2 : does not exist [ 1093.180146][ T26] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1093.578457][ T26] usb 8-1: USB disconnect, device number 7 [ 1093.901762][T17597] udevd[17597]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.240535][T18069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1097.249812][T18070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4036'. [ 1097.596042][T18094] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1097.660187][T18094] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1097.766649][T18105] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4047'. [ 1097.943130][ T7969] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1098.133092][ T7969] usb 6-1: Using ep0 maxpacket: 16 [ 1098.145645][ T7969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.183171][ T7969] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1098.494606][T18123] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4051'. [ 1098.506590][T18124] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4051'. [ 1098.944377][ T7969] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.004050][ T7969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.013729][ T7969] usb 6-1: Product: syz [ 1099.018144][ T7969] usb 6-1: Manufacturer: syz [ 1099.023477][ T7969] usb 6-1: SerialNumber: syz [ 1099.238630][ T7969] usb 6-1: 0:2 : does not exist [ 1099.243897][ T7969] usb 6-1: unit 6 not found! [ 1099.309122][ T7969] usb 6-1: USB disconnect, device number 54 [ 1099.544045][T17597] udevd[17597]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.618190][T18137] netlink: 'syz.7.4056': attribute type 10 has an invalid length. [ 1102.627422][T18137] device veth0_vlan left promiscuous mode [ 1102.638080][T18137] device veth0_vlan entered promiscuous mode [ 1102.652070][T18137] team0: Device veth0_vlan failed to register rx_handler [ 1103.500554][T18168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1103.511331][T18169] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1103.774979][T18183] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4067'. [ 1103.793621][T18183] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1104.278988][T18201] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 1104.675744][T18204] netlink: 'syz.5.4078': attribute type 17 has an invalid length. [ 1104.767094][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1104.871281][T18204] bond0: option all_slaves_active: invalid value (64) [ 1108.817354][T18227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1108.831841][T18229] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4084'. [ 1108.849541][T18229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1109.029521][T18247] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4090'. [ 1110.073556][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1110.175148][T18274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1110.184844][T18274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1110.383174][ T4308] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1110.563193][ T4308] usb 8-1: device descriptor read/64, error -71 [ 1110.852398][ T4308] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1110.881157][T18294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4105'. [ 1111.058784][ T4308] usb 8-1: device descriptor read/64, error -71 [ 1111.199214][ T4308] usb usb8-port1: attempt power cycle [ 1111.623619][ T4308] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1111.692029][ T4308] usb 8-1: device descriptor read/8, error -71 [ 1111.972092][ T4308] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1112.048025][ T4308] usb 8-1: device descriptor read/8, error -71 [ 1112.186798][ T4308] usb usb8-port1: unable to enumerate USB device [ 1113.073101][T12640] Bluetooth: hci1: command 0x0406 tx timeout [ 1115.143604][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4110'. [ 1115.561825][T18320] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4115'. [ 1115.744225][T18328] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1115.757588][T18328] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4119'. [ 1116.115453][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.511694][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1116.551764][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4125'. [ 1116.761936][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'. [ 1116.776432][T18348] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4128'. [ 1116.787959][T18348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1121.180476][T18377] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4135'. [ 1121.190038][T18378] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4135'. [ 1121.402672][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1121.438924][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1121.518870][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 1121.761757][T18404] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4143'. [ 1121.811015][T18404] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1122.024685][T18413] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1122.039222][T18413] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1122.690431][T18416] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4150'. [ 1123.119961][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1126.604198][T18445] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4163'. [ 1126.613800][T18445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1126.958664][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4172'. [ 1127.135943][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4176'. [ 1127.214507][T18502] device bridge2 entered promiscuous mode [ 1127.542003][T18508] netlink: 'syz.2.4180': attribute type 10 has an invalid length. [ 1127.697382][T18511] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1127.710240][T18511] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1128.045482][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1129.011087][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056870000: rx timeout, send abort [ 1129.502609][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056871c00: rx timeout, send abort [ 1129.522227][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056870000: abort rx timeout. Force session deactivation [ 1130.011054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056871c00: abort rx timeout. Force session deactivation [ 1131.847644][T18519] device syzkaller0 entered promiscuous mode [ 1131.976561][T18546] device bridge3 entered promiscuous mode [ 1132.093670][T18555] netlink: 'syz.0.4196': attribute type 10 has an invalid length. [ 1132.134951][T18555] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1132.229106][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1132.637011][T18581] xt_connbytes: Forcing CT accounting to be enabled [ 1132.768939][T18587] device bridge3 entered promiscuous mode [ 1132.791700][T18587] team0: Port device bridge3 added [ 1132.824915][T18589] device syzkaller0 entered promiscuous mode [ 1132.845349][T18587] bridge0: port 1(team0) entered blocking state [ 1132.857613][T18587] bridge0: port 1(team0) entered disabled state [ 1132.919234][T18592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4211'. [ 1133.127358][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4214'. [ 1133.168324][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4214'. [ 1133.188339][T18600] netlink: 'syz.7.4215': attribute type 10 has an invalid length. [ 1133.236457][T18600] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1133.326322][T18602] device syzkaller0 entered promiscuous mode [ 1133.645464][T18619] device bridge4 entered promiscuous mode [ 1133.672359][T18619] team0: Port device bridge4 added [ 1133.690626][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1133.691049][T18623] bridge0: port 1(team0) entered blocking state [ 1133.726082][T18623] bridge0: port 1(team0) entered disabled state [ 1133.779064][T18626] device syzkaller0 entered promiscuous mode [ 1133.956832][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1134.013972][T18634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1134.115404][T18640] netlink: 'syz.3.4232': attribute type 10 has an invalid length. [ 1134.203110][T18640] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1134.413889][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4238'. [ 1134.455853][T18653] device bridge7 entered promiscuous mode [ 1134.474187][T18653] team0: Port device bridge7 added [ 1134.490789][T18653] bridge0: port 1(team0) entered blocking state [ 1134.507628][T18653] bridge0: port 1(team0) entered disabled state [ 1134.529239][T18653] device team0 entered promiscuous mode [ 1134.549302][T18653] device team_slave_0 entered promiscuous mode [ 1134.571824][T18653] device team_slave_1 entered promiscuous mode [ 1134.610075][T18664] device syzkaller0 entered promiscuous mode [ 1134.716711][T18668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4242'. [ 1134.732443][T18668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4242'. [ 1135.399127][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bee800: rx timeout, send abort [ 1135.407793][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d24c00: rx timeout, send abort [ 1135.907559][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bee800: abort rx timeout. Force session deactivation [ 1135.926891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d24c00: abort rx timeout. Force session deactivation [ 1136.875816][T18701] device bridge8 entered promiscuous mode [ 1136.971117][T18701] team0: Port device bridge8 added [ 1137.015120][T18716] device syzkaller0 entered promiscuous mode [ 1137.567550][T18738] __nla_validate_parse: 4 callbacks suppressed [ 1137.567576][T18738] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1137.637577][T18738] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1137.668611][T18740] device bridge9 entered promiscuous mode [ 1137.707652][T18740] team0: Port device bridge9 added [ 1138.004490][T18751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1138.019679][T18751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1138.726093][T18754] device bridge4 entered promiscuous mode [ 1139.000928][T18766] device syzkaller0 entered promiscuous mode [ 1139.417109][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 1139.950213][T18784] device team_slave_0 left promiscuous mode [ 1139.973834][T18784] team0: Port device team_slave_0 removed [ 1141.091290][T18821] device syzkaller0 entered promiscuous mode [ 1141.851186][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4299'. [ 1141.921279][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4299'. [ 1142.159124][T18858] device syzkaller0 entered promiscuous mode [ 1142.533481][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4309'. [ 1142.549132][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4309'. [ 1143.578208][T18887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4315'. [ 1143.600346][T18887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4315'. [ 1143.713093][ T4309] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1143.872922][ T4309] usb 4-1: device descriptor read/64, error -71 [ 1143.926743][T18895] device syzkaller0 entered promiscuous mode [ 1144.017713][T18897] device syzkaller0 entered promiscuous mode [ 1144.163077][ T4309] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1144.333143][ T4309] usb 4-1: device descriptor read/64, error -71 [ 1144.453580][ T4309] usb usb4-port1: attempt power cycle [ 1144.467745][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4323'. [ 1144.483537][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4323'. [ 1144.902939][ T4309] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1144.944986][ T4309] usb 4-1: device descriptor read/8, error -71 [ 1145.225664][ T4309] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1145.275723][ T4309] usb 4-1: device descriptor read/8, error -71 [ 1145.292552][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4327'. [ 1145.325669][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4327'. [ 1145.406293][ T4309] usb usb4-port1: unable to enumerate USB device [ 1145.759106][T18924] device syzkaller0 entered promiscuous mode [ 1145.852586][T18926] device syzkaller0 entered promiscuous mode [ 1146.019948][T18929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.525249][T18944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1146.726261][T18952] device syzkaller0 entered promiscuous mode [ 1146.744433][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4344'. [ 1147.468172][T18976] device bridge2 entered promiscuous mode [ 1147.477986][T18976] team0: Port device bridge2 added [ 1147.507649][T18978] netlink: 'syz.2.4356': attribute type 10 has an invalid length. [ 1147.583004][ T7969] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1147.604053][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4358'. [ 1147.743540][ T7969] usb 4-1: device descriptor read/64, error -71 [ 1147.999944][T19001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4364'. [ 1148.013171][ T7969] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1148.173328][ T7969] usb 4-1: device descriptor read/64, error -71 [ 1148.290212][T19009] device bridge3 entered promiscuous mode [ 1148.303618][ T7969] usb usb4-port1: attempt power cycle [ 1148.307027][T19009] team0: Port device bridge3 added [ 1148.618315][T19019] netlink: 'syz.2.4371': attribute type 10 has an invalid length. [ 1148.719493][ T7969] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1148.763874][ T7969] usb 4-1: device descriptor read/8, error -71 [ 1148.805751][T19027] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4373'. [ 1149.053555][ T7969] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1149.093872][ T7969] usb 4-1: device descriptor read/8, error -71 [ 1149.254978][ T7969] usb usb4-port1: unable to enumerate USB device [ 1149.350906][ T4308] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1149.612988][ T4308] usb 8-1: Using ep0 maxpacket: 16 [ 1149.621950][ T4308] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.706077][ T4308] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.734639][ T4308] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1149.751808][ T4308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.763021][ T4308] usb 8-1: Product: syz [ 1149.767394][ T4308] usb 8-1: Manufacturer: syz [ 1149.772042][ T4308] usb 8-1: SerialNumber: syz [ 1149.876206][T19082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1149.891337][T19082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1149.982140][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4383'. [ 1150.002667][ T4308] usb 8-1: 0:2 : does not exist [ 1150.034211][ T4308] usb 8-1: USB disconnect, device number 12 [ 1150.276434][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.413790][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4386'. [ 1150.615493][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4389'. [ 1151.141352][T19124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4399'. [ 1151.279114][T19130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1151.353771][T19133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1151.387315][T19133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1151.423069][ T4308] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1151.612947][ T4308] usb 6-1: Using ep0 maxpacket: 16 [ 1151.620329][ T4308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.654852][ T4308] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.677740][ T4308] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.705793][ T4308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.721488][ T4308] usb 6-1: Product: syz [ 1151.729481][ T4308] usb 6-1: Manufacturer: syz [ 1151.737840][ T4308] usb 6-1: SerialNumber: syz [ 1151.969571][ T4308] usb 6-1: 0:2 : does not exist [ 1151.997694][ T4308] usb 6-1: USB disconnect, device number 55 [ 1152.254233][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1152.829263][T19189] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1153.553192][ T8190] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1153.748982][ T8190] usb 6-1: Using ep0 maxpacket: 16 [ 1153.756183][ T8190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.788796][ T8190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.800635][ T8190] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.826781][ T8190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.859038][ T8190] usb 6-1: Product: syz [ 1153.863607][ T8190] usb 6-1: Manufacturer: syz [ 1153.868335][ T8190] usb 6-1: SerialNumber: syz [ 1154.103319][ T8190] usb 6-1: 0:2 : does not exist [ 1154.152259][ T8190] usb 6-1: USB disconnect, device number 56 [ 1154.232252][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.740124][T19242] __nla_validate_parse: 5 callbacks suppressed [ 1154.740149][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4447'. [ 1155.939571][T19264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1156.377579][T19287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1156.432921][ T4349] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1156.622971][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 1156.638489][T19293] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1156.643322][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.668869][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1156.692154][ T4349] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1156.712842][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.720979][ T4349] usb 4-1: Product: syz [ 1156.753475][ T4349] usb 4-1: Manufacturer: syz [ 1156.758465][ T4349] usb 4-1: SerialNumber: syz [ 1157.001888][ T4349] usb 4-1: 0:2 : does not exist [ 1157.060036][ T4349] usb 4-1: USB disconnect, device number 88 [ 1158.105266][T19315] device syzkaller0 entered promiscuous mode [ 1158.158595][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4475'. [ 1158.275278][T19323] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4478'. [ 1158.397458][T19329] loop5: detected capacity change from 0 to 512 [ 1158.419974][T19329] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.4480: missing EA_INODE flag [ 1158.476213][T19329] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.4480: error while reading EA inode 12 err=-117 [ 1158.503163][T19335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1158.517610][T19335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1158.592347][T19329] EXT4-fs (loop5): 1 orphan inode deleted [ 1158.721716][T19329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1159.809452][T19347] netlink: 'syz.0.4486': attribute type 9 has an invalid length. [ 1159.861372][T15828] EXT4-fs (loop5): unmounting filesystem. [ 1159.912927][ T4335] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1159.973849][T19350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4487'. [ 1159.999009][T19350] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1160.102929][ T4335] usb 8-1: Using ep0 maxpacket: 16 [ 1160.109978][ T4335] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.148728][ T4335] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.186539][ T4335] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1160.213151][ T4335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.242381][ T4335] usb 8-1: Product: syz [ 1160.252643][ T4335] usb 8-1: Manufacturer: syz [ 1160.283214][ T4335] usb 8-1: SerialNumber: syz [ 1160.525624][ T4335] usb 8-1: 0:2 : does not exist [ 1160.603642][ T4335] usb 8-1: USB disconnect, device number 13 [ 1160.874723][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1163.817846][T19378] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1164.029904][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4498'. [ 1164.033439][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1164.058729][T19392] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1165.172580][T19424] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4507'. [ 1165.977678][ T8190] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1166.162957][ T8190] usb 4-1: Using ep0 maxpacket: 16 [ 1166.179789][ T8190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.199330][ T8190] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.213314][ T8190] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.222701][ T8190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.231644][ T8190] usb 4-1: Product: syz [ 1166.236334][ T8190] usb 4-1: Manufacturer: syz [ 1166.241248][ T8190] usb 4-1: SerialNumber: syz [ 1166.478701][ T8190] usb 4-1: 0:2 : does not exist [ 1166.506926][ T8190] usb 4-1: USB disconnect, device number 89 [ 1168.827895][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4516'. [ 1168.900584][T19451] team0: Port device team_slave_0 removed [ 1168.910972][T19461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1168.958451][T19462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1173.180463][T19501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1173.189838][T19502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1173.207468][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1173.418786][T19514] device team_slave_0 left promiscuous mode [ 1173.448063][T19514] team0: Port device team_slave_0 removed [ 1173.535555][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4545'. [ 1173.919689][T19551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4552'. [ 1173.974857][T19551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4552'. [ 1177.574864][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.117289][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4559'. [ 1178.132146][T19590] device bridge14 entered promiscuous mode [ 1178.150699][T19590] team0: Port device bridge14 added [ 1178.183531][T19592] bridge0: port 1(team0) entered blocking state [ 1178.210554][T19592] bridge0: port 1(team0) entered disabled state [ 1178.541201][T19612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4572'. [ 1178.566635][T19612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4572'. [ 1178.645188][ T4335] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1178.833184][ T4335] usb 1-1: Using ep0 maxpacket: 16 [ 1178.841931][ T4335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.866237][ T4335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1178.889326][ T4335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1178.899306][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.908120][ T4335] usb 1-1: Product: syz [ 1178.912525][ T4335] usb 1-1: Manufacturer: syz [ 1178.917971][ T4335] usb 1-1: SerialNumber: syz [ 1179.153930][ T4335] usb 1-1: 0:2 : does not exist [ 1179.184590][ T4335] usb 1-1: USB disconnect, device number 73 [ 1179.461314][T19595] udevd[19595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.096179][T19631] device bridge15 entered promiscuous mode [ 1183.110150][T19631] team0: Port device bridge15 added [ 1183.117288][T19632] bridge0: port 1(team0) entered blocking state [ 1183.127284][T19632] bridge0: port 1(team0) entered disabled state [ 1183.148029][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1183.397476][T19674] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4594'. [ 1183.789971][T19692] device syzkaller0 entered promiscuous mode [ 1183.895085][ T4308] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1183.928905][T19697] device bridge10 entered promiscuous mode [ 1183.944745][T19697] team0: Port device bridge10 added [ 1184.083068][ T4308] usb 6-1: Using ep0 maxpacket: 16 [ 1184.089877][ T4308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.111677][ T4308] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1184.142518][ T4308] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1184.163281][ T4308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.186022][ T4308] usb 6-1: Product: syz [ 1184.190533][ T4308] usb 6-1: Manufacturer: syz [ 1184.197680][ T4308] usb 6-1: SerialNumber: syz [ 1184.228276][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1184.373939][T19712] team0: Port device team_slave_0 removed [ 1184.444449][ T4308] usb 6-1: 0:2 : does not exist [ 1184.474791][ T4308] usb 6-1: USB disconnect, device number 57 [ 1184.489534][T19721] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 1184.591298][T19723] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1184.636708][T19723] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1184.718859][T19721] bond1: (slave gretap1): making interface the new active one [ 1184.741422][T19721] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1184.754283][T19595] udevd[19595]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.804321][T19728] device macvlan2 entered promiscuous mode [ 1184.831553][T19728] device bond1 entered promiscuous mode [ 1184.842901][T19728] device gretap1 entered promiscuous mode [ 1184.860111][T19728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1184.891093][T19728] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1184.923538][T19728] device bond1 left promiscuous mode [ 1184.930267][T19728] device gretap1 left promiscuous mode [ 1184.969351][T19738] device bridge11 entered promiscuous mode [ 1184.977353][T19738] team0: Port device bridge11 added [ 1185.206776][T19751] device syzkaller0 entered promiscuous mode [ 1185.348949][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1185.846695][T19786] device bridge5 entered promiscuous mode [ 1185.913418][ T4349] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1186.122923][ T4349] usb 8-1: Using ep0 maxpacket: 16 [ 1186.137576][ T4349] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.186920][ T4349] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.230845][ T4349] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.269725][ T4349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.293542][ T4349] usb 8-1: Product: syz [ 1186.298117][ T4349] usb 8-1: Manufacturer: syz [ 1186.313771][ T4349] usb 8-1: SerialNumber: syz [ 1186.536998][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4651'. [ 1186.562903][ T4349] usb 8-1: 0:2 : does not exist [ 1186.611466][ T4349] usb 8-1: USB disconnect, device number 14 [ 1186.854880][T19595] udevd[19595]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.916196][T19828] device bridge4 entered promiscuous mode [ 1186.960164][T19828] team0: Port device bridge4 added [ 1187.505128][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'. [ 1187.820803][T19868] device bridge16 entered promiscuous mode [ 1187.851585][T19868] team0: Port device bridge16 added [ 1187.878871][T19875] bridge0: port 1(team0) entered blocking state [ 1187.893456][T19875] bridge0: port 1(team0) entered disabled state [ 1188.582976][T19906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4690'. [ 1188.681832][T19909] device bridge5 entered promiscuous mode [ 1188.709329][T19909] team0: Port device bridge5 added [ 1189.038919][T19916] device syzkaller0 entered promiscuous mode [ 1189.560580][T19941] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4704'. [ 1193.079561][T19950] device syzkaller0 entered promiscuous mode [ 1196.967609][T19967] device bridge6 entered promiscuous mode [ 1196.975539][T19967] team0: Port device bridge6 added [ 1197.278699][T20009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4716'. [ 1197.563453][T20015] device syzkaller0 entered promiscuous mode [ 1200.789727][T20028] device bridge7 entered promiscuous mode [ 1200.797204][T20028] team0: Port device bridge7 added [ 1200.825747][T20036] device syzkaller0 entered promiscuous mode [ 1204.971828][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4731'. [ 1205.247377][T20107] device bridge5 entered promiscuous mode [ 1205.258353][T20107] team0: Port device bridge5 added [ 1205.283295][T20107] bridge0: port 1(team0) entered blocking state [ 1205.290487][T20107] bridge0: port 1(team0) entered disabled state [ 1205.355318][T20105] device syzkaller0 entered promiscuous mode [ 1205.520863][T20112] device syzkaller0 entered promiscuous mode [ 1205.731537][T20121] loop7: detected capacity change from 0 to 512 [ 1205.835018][T20121] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.4744: missing EA_INODE flag [ 1205.869688][T20121] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.4744: error while reading EA inode 12 err=-117 [ 1205.889441][T20121] EXT4-fs (loop7): 1 orphan inode deleted [ 1205.895371][T20121] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1209.829051][T20122] device syzkaller0 entered promiscuous mode [ 1209.934293][T14714] EXT4-fs (loop7): unmounting filesystem. [ 1210.097030][T20151] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1210.318111][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1210.341105][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1210.479105][T20169] device syzkaller0 entered promiscuous mode [ 1210.715288][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1210.727687][T20186] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1210.762864][T20184] bond0: option resend_igmp: invalid value (18446744072210219584) [ 1210.781264][T20184] bond0: option resend_igmp: allowed values 0 - 255 [ 1211.105622][T20193] device syzkaller0 entered promiscuous mode [ 1211.127573][T20192] device syzkaller0 entered promiscuous mode [ 1214.745825][T20207] device syzkaller0 entered promiscuous mode [ 1214.898592][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1214.959996][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1214.995815][T20218] device syzkaller0 entered promiscuous mode [ 1215.124388][T20229] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4774'. [ 1215.165854][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1215.191022][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1215.240800][T20223] bond0: option resend_igmp: invalid value (18446744072210219584) [ 1215.274338][T20223] bond0: option resend_igmp: allowed values 0 - 255 [ 1215.460731][T20224] device syzkaller0 entered promiscuous mode [ 1215.501129][T20241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1219.526753][T20252] device bridge8 entered promiscuous mode [ 1219.535267][T20252] team0: Port device bridge8 added [ 1219.737606][T20272] device syzkaller0 entered promiscuous mode [ 1219.810072][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1219.847002][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1219.939645][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1219.962690][T20282] netlink: 'syz.3.4787': attribute type 9 has an invalid length. [ 1220.071338][T20288] netlink: 'syz.2.4790': attribute type 17 has an invalid length. [ 1220.103864][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4790'. [ 1221.879087][T20341] loop7: detected capacity change from 0 to 512 [ 1221.949909][T20341] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.4806: missing EA_INODE flag [ 1222.070920][T20341] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.4806: error while reading EA inode 12 err=-117 [ 1222.131246][T20341] EXT4-fs (loop7): 1 orphan inode deleted [ 1222.134567][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1222.143776][T20341] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1223.069145][T14714] EXT4-fs (loop7): unmounting filesystem. [ 1223.203569][T20369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4817'. [ 1223.277177][T20371] device syzkaller0 entered promiscuous mode [ 1223.468207][T20379] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1223.902199][T20392] device syzkaller0 entered promiscuous mode [ 1224.041068][T20409] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1227.827812][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1228.070597][T20450] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1228.228569][T20460] netlink: 'syz.3.4842': attribute type 16 has an invalid length. [ 1228.271337][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1228.642089][T20482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4847'. [ 1228.888511][T20485] device syzkaller0 entered promiscuous mode [ 1229.496399][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4851'. [ 1229.643200][T12640] block nbd0: Receive control failed (result -1) [ 1230.476937][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1232.810123][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4846'. [ 1232.819946][T20497] device syzkaller0 entered promiscuous mode [ 1233.886146][T20551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1234.007035][ T7969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1234.045220][ T7969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1234.083768][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1234.170535][T20553] device syzkaller0 entered promiscuous mode [ 1234.409274][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1235.003149][ T7969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1237.713097][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1238.887714][T20583] device syzkaller0 entered promiscuous mode [ 1239.005847][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.095799][T20670] device syzkaller0 entered promiscuous mode [ 1244.372326][T20677] device syzkaller0 entered promiscuous mode [ 1244.811543][T20700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1245.403374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1248.557569][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4894'. [ 1248.626258][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1248.879384][T20764] device bridge18 entered promiscuous mode [ 1248.921965][T20764] team0: Port device bridge18 added [ 1248.972535][T20764] bridge0: port 1(team0) entered blocking state [ 1248.999629][T20764] bridge0: port 1(team0) entered disabled state [ 1249.041293][T20773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1249.611486][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1249.646091][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1249.656491][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1249.669145][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1249.677239][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1249.685030][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1250.237694][T20809] device syzkaller0 entered promiscuous mode [ 1250.259132][T20788] device syzkaller0 entered promiscuous mode [ 1251.795136][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 1253.350552][T20813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1253.360291][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1253.384364][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1253.668638][T20823] device bridge9 entered promiscuous mode [ 1253.741569][T20823] team0: Port device bridge9 added [ 1253.873199][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 1253.916202][T20786] chnl_net:caif_netlink_parms(): no params data found [ 1254.237719][T20786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.286019][T20786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.307444][T20786] device bridge_slave_0 entered promiscuous mode [ 1254.339118][T20786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.367354][T20786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.402310][T20786] device bridge_slave_1 entered promiscuous mode [ 1254.503824][T20859] device syzkaller0 entered promiscuous mode [ 1254.533665][T20786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.613739][T20786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.631392][T20863] device syzkaller0 entered promiscuous mode [ 1254.856153][T20872] device syzkaller0 entered promiscuous mode [ 1254.977396][T20786] team0: Port device team_slave_0 added [ 1255.962966][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 1258.049634][T12640] Bluetooth: hci2: command 0x0419 tx timeout [ 1258.536928][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4923'. [ 1258.547848][T20786] team0: Port device team_slave_1 added [ 1258.627823][T20786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.642513][T20786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.730518][T20786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.752695][T20786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.772064][T20786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.829745][T20786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.881942][T20909] device syzkaller0 entered promiscuous mode [ 1258.921085][T20917] device xfrm0 entered promiscuous mode [ 1258.954965][T20786] device hsr_slave_0 entered promiscuous mode [ 1258.962345][T20786] device hsr_slave_1 entered promiscuous mode [ 1258.978270][T20786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.990038][T20786] Cannot create hsr debugfs directory [ 1259.378354][T20786] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1259.412414][T20786] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1259.489111][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1259.505820][T20930] device syzkaller0 entered promiscuous mode [ 1259.534907][T20786] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1259.564549][T20786] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1260.122907][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1263.290232][T20946] netlink: 'syz.3.4946': attribute type 16 has an invalid length. [ 1263.298255][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1263.535102][T20786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.585804][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1263.603652][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1263.630673][T20786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.650025][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1263.668492][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1263.688563][T19068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.695867][T19068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.743373][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1263.752096][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1263.771384][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1263.798185][T19068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.805615][T19068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.821899][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1263.831403][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1263.853832][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1263.866410][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1263.882656][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1263.899949][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1263.951983][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.979013][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1264.002646][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1264.036753][T20786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.061557][T20786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1264.098995][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1264.118502][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1265.026547][T21000] device bond4 entered promiscuous mode [ 1265.071400][T21000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1265.141859][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1265.173424][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1265.226280][T21003] device veth5 entered promiscuous mode [ 1265.244170][T21003] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1265.269167][T20786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.303199][T21005] netlink: 'syz.5.4959': attribute type 16 has an invalid length. [ 1265.321860][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1265.365053][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1265.534070][T21007] device syzkaller0 entered promiscuous mode [ 1269.351190][T21041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4972'. [ 1269.580152][T21050] netlink: 'syz.2.4973': attribute type 16 has an invalid length. [ 1269.623296][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1270.008471][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1270.059387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1270.079487][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1270.262998][T21075] device syzkaller0 entered promiscuous mode [ 1270.290609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1270.309320][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1270.322712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1270.331797][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1274.164130][T20786] device veth0_vlan entered promiscuous mode [ 1274.175877][T21091] netlink: 'syz.0.4990': attribute type 16 has an invalid length. [ 1274.192318][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 1274.205195][T21091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.236923][T20786] device veth1_vlan entered promiscuous mode [ 1274.348870][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1274.366592][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1274.386416][T20786] device veth0_macvtap entered promiscuous mode [ 1274.421469][T20786] device veth1_macvtap entered promiscuous mode [ 1274.440800][T21110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1274.465698][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4996'. [ 1274.515821][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.542928][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.563189][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.584239][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.614357][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.650035][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.688185][T20786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.760261][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1274.771246][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1274.790176][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1274.801184][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1274.817268][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.864417][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.881445][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.913173][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.942961][T20786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.954466][T20786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.970915][T20786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.993751][T21128] device syzkaller0 entered promiscuous mode [ 1275.012591][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4999'. [ 1275.030400][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1275.042573][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1275.058752][T20786] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.072130][T20786] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.082297][T20786] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.099173][T20786] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.204308][T21134] device syzkaller0 entered promiscuous mode [ 1275.254054][T21137] netlink: 'syz.3.5003': attribute type 16 has an invalid length. [ 1275.262431][T21137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1278.303769][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1278.471246][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.501015][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.523404][T17703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.531452][T17703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.558782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1278.580377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1278.622161][T21153] device syzkaller0 entered promiscuous mode [ 1278.671066][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1278.767662][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5009'. [ 1279.110514][T21168] device syzkaller0 entered promiscuous mode [ 1279.357553][T21170] device syzkaller0 entered promiscuous mode [ 1279.399554][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5016'. [ 1279.516502][T12640] block nbd1: Receive control failed (result -1) [ 1279.675984][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5018'. [ 1279.837887][T21186] team0: Port device team_slave_0 removed [ 1279.883969][T21187] device syzkaller0 entered promiscuous mode [ 1287.611213][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1287.628284][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1287.656616][T21206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1287.710642][ T3653] hid (null): global environment stack underflow [ 1287.733733][ T3653] hid-generic 0005:10CF:0004.0008: global environment stack underflow [ 1287.743999][ T3653] hid-generic 0005:10CF:0004.0008: item 0 0 1 11 parsing failed [ 1287.752346][ T3653] hid-generic: probe of 0005:10CF:0004.0008 failed with error -22 [ 1287.798411][T21222] device syzkaller0 entered promiscuous mode [ 1288.087593][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1288.122927][T21230] bond0: option lp_interval: invalid value (0) [ 1288.140074][T21230] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1288.359773][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1288.370845][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1288.438101][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1288.701971][T21250] device syzkaller0 entered promiscuous mode [ 1288.933201][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1293.080012][T21259] device syzkaller0 entered promiscuous mode [ 1293.348268][T21284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.485130][T21286] device syzkaller0 entered promiscuous mode [ 1293.589287][T21288] device syzkaller0 entered promiscuous mode [ 1300.449003][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.027226][T17703] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.054645][T17703] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.130528][T21339] device syzkaller0 entered promiscuous mode [ 1301.256118][T17703] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.311067][T17703] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.576551][T17703] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.628261][T17703] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.766661][T17703] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.841942][T17703] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.109438][T21374] device syzkaller0 entered promiscuous mode [ 1302.146265][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 1307.726704][T21399] device syzkaller0 entered promiscuous mode [ 1307.735261][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5097'. [ 1313.012042][T21502] device syzkaller0 entered promiscuous mode [ 1313.130643][T21514] device syzkaller0 entered promiscuous mode [ 1313.255231][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1321.326436][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1322.152392][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5138'. [ 1322.223203][T21609] device syzkaller0 entered promiscuous mode [ 1325.649472][T21619] device syzkaller0 entered promiscuous mode [ 1325.873258][T21652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1328.966190][T21664] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 1329.043630][T21673] device bond2 entered promiscuous mode [ 1329.049873][T21673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1329.250734][T21680] device veth9 entered promiscuous mode [ 1329.282403][T21680] bond2: (slave veth9): Enslaving as a backup interface with a down link [ 1329.449396][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5159'. [ 1329.560810][T21697] device syzkaller0 entered promiscuous mode [ 1329.797403][T17703] bond0: (slave wlan1): Releasing backup interface [ 1329.829471][T21676] device syzkaller1 entered promiscuous mode [ 1329.980830][T21713] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1333.939622][T17703] device team0 left promiscuous mode [ 1333.987850][T17703] device team_slave_1 left promiscuous mode [ 1334.033498][T17703] bridge0: port 1(team0) entered disabled state [ 1334.218591][T17703] device hsr_slave_0 left promiscuous mode [ 1334.250419][T17703] device hsr_slave_1 left promiscuous mode [ 1334.259519][T17703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.276716][T17703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.301768][T17703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.325288][T17703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.651312][T17703] device veth1_macvtap left promiscuous mode [ 1334.669566][T17703] device veth0_macvtap left promiscuous mode [ 1334.696326][T17703] device veth1_vlan left promiscuous mode [ 1335.188569][T17703] team0 (unregistering): Port device bridge11 removed [ 1335.258505][T17703] team0 (unregistering): Port device bridge10 removed [ 1335.338553][T17703] team0 (unregistering): Port device bridge9 removed [ 1335.398619][T17703] team0 (unregistering): Port device bridge8 removed [ 1335.477802][T17703] team0 (unregistering): Port device bridge7 removed [ 1335.552262][T17703] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 1335.587267][T17703] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1335.781020][T17703] bond3 (unregistering): Released all slaves [ 1336.003731][T17703] bond2 (unregistering): Released all slaves [ 1336.024889][T17703] bond1 (unregistering): (slave vxlan0): Releasing backup interface [ 1336.197820][T17703] bond1 (unregistering): Released all slaves [ 1336.391172][T17703] team0 (unregistering): Port device bridge3 removed [ 1336.447921][T17703] team0 (unregistering): Port device bridge2 removed [ 1336.508709][T17703] team0 (unregistering): Port device bridge1 removed [ 1337.180358][T17703] team0 (unregistering): Port device team_slave_1 removed [ 1337.263839][T17703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.344593][T17703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.005715][T17703] bond0 (unregistering): Released all slaves [ 1338.045111][T21779] device bridge1 entered promiscuous mode [ 1338.065884][T21779] team0: Port device bridge1 added [ 1338.080050][T21783] bridge0: port 3(team0) entered blocking state [ 1338.088851][T21783] bridge0: port 3(team0) entered disabled state [ 1338.099553][T21783] device team0 entered promiscuous mode [ 1338.105652][T21783] device team_slave_1 entered promiscuous mode [ 1338.119042][T21783] bridge0: port 3(team0) entered blocking state [ 1338.125679][T21783] bridge0: port 3(team0) entered forwarding state [ 1338.480689][T21821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1338.552942][T21820] device syzkaller0 entered promiscuous mode [ 1338.600728][T21824] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1339.507207][T21866] device bridge10 entered promiscuous mode [ 1339.548436][T21866] team0: Port device bridge10 added [ 1339.667421][T21876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5193'. [ 1339.711054][T21878] device syzkaller0 entered promiscuous mode [ 1340.202948][T21894] device syzkaller0 entered promiscuous mode [ 1344.100355][T21926] device bridge7 entered promiscuous mode [ 1344.463353][T21942] device syzkaller0 entered promiscuous mode [ 1345.038763][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1345.351740][T21979] device bridge11 entered promiscuous mode [ 1345.390285][T21979] team0: Port device bridge11 added [ 1345.552412][T21983] device syzkaller0 entered promiscuous mode [ 1345.595809][T21993] device syzkaller0 entered promiscuous mode [ 1346.512911][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1350.491809][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'. [ 1350.826142][T22081] device bridge8 entered promiscuous mode [ 1351.575963][T22104] device syzkaller0 entered promiscuous mode [ 1355.709360][T22119] device syzkaller0 entered promiscuous mode [ 1356.024698][T22164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5249'. [ 1360.031155][T22206] netlink: 'syz.0.5258': attribute type 16 has an invalid length. [ 1360.070172][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5258'. [ 1360.275225][T22212] device syzkaller0 entered promiscuous mode [ 1360.297649][T22217] device bridge12 entered promiscuous mode [ 1360.357824][T22217] team0: Port device bridge12 added [ 1361.878184][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.919240][T22220] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5261'. [ 1363.957828][T22231] device syzkaller0 entered promiscuous mode [ 1364.215751][T22252] device syzkaller0 entered promiscuous mode [ 1364.255436][T22254] device syzkaller0 entered promiscuous mode [ 1364.278366][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5265'. [ 1364.548570][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5267'. [ 1364.648355][T12640] block nbd2: Receive control failed (result -1) [ 1365.256407][T22293] device bridge2 entered promiscuous mode [ 1365.277469][T22293] team0: Port device bridge2 added [ 1365.432190][T22298] device syzkaller0 entered promiscuous mode [ 1365.469851][T22301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5276'. [ 1369.944260][T22310] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1370.241056][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5282'. [ 1370.543615][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'. [ 1370.617345][T12640] block nbd3: Receive control failed (result -1) [ 1371.289833][T22400] device syzkaller0 entered promiscuous mode [ 1375.429501][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1375.487171][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5306'. [ 1375.546488][T12640] block nbd4: Receive control failed (result -1) [ 1376.096421][T22474] device syzkaller0 entered promiscuous mode [ 1376.221973][T22476] device syzkaller0 entered promiscuous mode [ 1384.250756][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1384.393267][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5327'. [ 1384.456113][T12640] block nbd5: Receive control failed (result -1) [ 1384.804510][T22572] device syzkaller0 entered promiscuous mode [ 1384.883133][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5336'. [ 1384.993438][T22580] device syzkaller0 entered promiscuous mode [ 1385.343685][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1385.414749][T12640] block nbd6: Receive control failed (result -1) [ 1389.209740][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5357'. [ 1389.304657][T12640] block nbd7: Receive control failed (result -1) [ 1390.307372][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1390.335891][T22699] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1390.354525][T22699] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1390.414586][T12640] block nbd8: Receive control failed (result -1) [ 1390.494966][T22704] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1390.574968][T22699] device macvlan2 entered promiscuous mode [ 1390.582259][T22699] device bond3 entered promiscuous mode [ 1390.588459][T22699] device gretap1 entered promiscuous mode [ 1390.601172][T22699] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1390.625092][T22699] device bond3 left promiscuous mode [ 1390.639502][T22699] device gretap1 left promiscuous mode [ 1391.233435][T22747] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5391'. [ 1391.316990][T12640] block nbd9: Receive control failed (result -1) [ 1391.731615][T22766] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1391.744235][T22766] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1391.827336][T22772] device macvlan2 entered promiscuous mode [ 1391.913396][T22772] device bond3 entered promiscuous mode [ 1391.957103][T22772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1391.984917][T22772] device bond3 left promiscuous mode [ 1392.162358][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5408'. [ 1392.256897][T12640] block nbd10: Receive control failed (result -1) [ 1392.479765][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1392.533440][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1393.318493][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'. [ 1393.507286][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5433'. [ 1394.075686][T22888] device bridge10 entered promiscuous mode [ 1394.337390][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1394.631964][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1395.300459][T22939] device bridge19 entered promiscuous mode [ 1395.358819][T22939] team0: Port device bridge19 added [ 1395.395911][T22943] bridge0: port 1(team0) entered blocking state [ 1395.439867][T22943] bridge0: port 1(team0) entered disabled state [ 1395.901271][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5464'. [ 1396.169520][T22966] device syzkaller0 entered promiscuous mode [ 1399.547812][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1400.084580][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5489'. [ 1400.200018][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1400.395796][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5491'. [ 1400.585379][T23059] device syzkaller0 entered promiscuous mode [ 1403.685820][T23084] device bridge3 entered promiscuous mode [ 1403.693522][T23084] team0: Port device bridge3 added [ 1403.897027][T23100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1404.545484][T23131] device bridge6 entered promiscuous mode [ 1404.567578][T23131] team0: Port device bridge6 added [ 1404.585167][T23131] bridge0: port 1(team0) entered blocking state [ 1404.607194][T23131] bridge0: port 1(team0) entered disabled state [ 1404.666113][T23135] device syzkaller0 entered promiscuous mode [ 1408.294827][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5517'. [ 1408.658762][T23188] device bridge7 entered promiscuous mode [ 1408.687449][T23188] team0: Port device bridge7 added [ 1408.714928][T23188] bridge0: port 1(team0) entered blocking state [ 1408.721510][T23188] bridge0: port 1(team0) entered disabled state [ 1410.886117][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1410.919477][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1410.943002][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1410.959933][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1410.968156][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1410.975880][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1412.870223][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5537'. [ 1413.074215][T12640] Bluetooth: hci4: command 0x0409 tx timeout [ 1413.219832][T23251] device bridge8 entered promiscuous mode [ 1413.309861][T23251] team0: Port device bridge8 added [ 1413.414703][T23263] bridge0: port 1(team0) entered blocking state [ 1413.421627][T23263] bridge0: port 1(team0) entered disabled state [ 1413.637952][T23243] chnl_net:caif_netlink_parms(): no params data found [ 1413.698191][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5550'. [ 1413.805686][T23243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.814771][T23243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.824864][T23243] device bridge_slave_0 entered promiscuous mode [ 1413.852376][T23243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.908164][T23243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.964134][T23243] device bridge_slave_1 entered promiscuous mode [ 1414.111234][T23243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.161942][T23243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.316739][T23243] team0: Port device team_slave_0 added [ 1414.348609][T23243] team0: Port device team_slave_1 added [ 1414.539150][T23243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.568167][T23243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.699829][T23243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.745613][T23243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.773268][T23243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.893009][T23243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.909402][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1415.018214][T23243] device hsr_slave_0 entered promiscuous mode [ 1415.042064][T23243] device hsr_slave_1 entered promiscuous mode [ 1415.099666][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5564'. [ 1415.158916][T12640] Bluetooth: hci4: command 0x041b tx timeout [ 1415.646435][T23243] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1415.698325][T23243] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1415.728717][T23243] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1415.763906][T23243] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1415.926729][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5576'. [ 1416.060951][T23243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.091640][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1416.103704][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1416.116177][T23243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.129173][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1416.138993][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1416.148412][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.155918][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.178607][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1416.187046][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1416.197498][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1416.223596][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.230780][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.264313][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1416.303240][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1416.326756][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1416.349343][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1416.372390][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1416.395429][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1416.405195][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1416.428270][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1416.449087][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1416.477000][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1416.502561][T23243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1416.547974][T23243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1416.584370][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1416.609658][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1417.119804][T23410] device syzkaller0 entered promiscuous mode [ 1417.233686][T12640] Bluetooth: hci4: command 0x040f tx timeout [ 1417.344840][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1417.363556][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1417.391188][T23243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.480059][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5595'. [ 1418.122487][T23451] device syzkaller0 entered promiscuous mode [ 1419.320749][T12640] Bluetooth: hci4: command 0x0419 tx timeout [ 1421.286871][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1421.300749][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1421.422961][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1421.442896][T19068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1421.490133][T23243] device veth0_vlan entered promiscuous mode [ 1421.511616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1421.524338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1421.561126][T23243] device veth1_vlan entered promiscuous mode [ 1421.588693][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5609'. [ 1421.681992][T23480] device syzkaller0 entered promiscuous mode [ 1421.752032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1421.776239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1421.795057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1421.824895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1421.863668][T23243] device veth0_macvtap entered promiscuous mode [ 1423.333419][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.402871][T12640] Bluetooth: hci2: command 0x0406 tx timeout [ 1426.487281][T23243] device veth1_macvtap entered promiscuous mode [ 1426.512099][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1426.521719][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1426.596978][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.619943][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.639837][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.654462][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.674676][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.690618][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.751571][T23243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.771958][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1426.792360][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1426.914580][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.974000][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.996569][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.023947][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.035295][T23243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.046489][T23243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.058886][T23243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.096412][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1427.128686][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1427.161310][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1427.186166][T23243] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.206589][T23243] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.234378][T23243] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.262739][T23243] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.474281][ T5125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.496150][ T5125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.540847][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.590296][ T4863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.600898][ T4863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.618733][T23576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5628'. [ 1427.638846][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1427.828771][T23578] device syzkaller0 entered promiscuous mode [ 1428.208894][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5635'. [ 1429.075371][T23606] device syzkaller0 entered promiscuous mode [ 1429.274306][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1429.298490][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1429.321629][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1429.343447][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1429.351409][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1429.362983][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1429.521420][T23626] Bluetooth: MGMT ver 1.22 [ 1431.396736][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 1431.421531][T12640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1433.482811][T12640] Bluetooth: hci0: command 0x041b tx timeout [ 1433.910746][T23663] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1433.984651][T23663] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1434.057278][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5652'. [ 1434.106351][T23656] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1434.126155][T23669] device macvlan2 entered promiscuous mode [ 1434.133548][T23669] device bond1 entered promiscuous mode [ 1434.143982][T23669] device gretap1 entered promiscuous mode [ 1434.156326][T23669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1434.173654][T23669] device bond1 left promiscuous mode [ 1434.186383][T23669] device gretap1 left promiscuous mode [ 1434.271785][T23618] chnl_net:caif_netlink_parms(): no params data found [ 1434.526440][T23618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.542483][T23618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.583931][T23618] device bridge_slave_0 entered promiscuous mode [ 1434.627163][T23618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.639781][T23618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.652710][T23618] device bridge_slave_1 entered promiscuous mode [ 1434.748507][T23686] device syzkaller0 entered promiscuous mode [ 1434.811780][T23618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.564864][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 1435.571334][T12640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1437.643181][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 1438.015726][T23618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.112466][T23707] device syzkaller0 entered promiscuous mode [ 1439.723403][T12640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1441.792952][T12640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1441.992514][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5668'. [ 1442.117413][T23731] team0: Port device team_slave_0 removed [ 1442.126407][T23733] netlink: 'syz.5.5669': attribute type 1 has an invalid length. [ 1442.176756][T23618] team0: Port device team_slave_0 added [ 1442.187761][T23618] team0: Port device team_slave_1 added [ 1442.272622][T23618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.280222][T23618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.324250][T23618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.358631][T23618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.388212][T23618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.473394][T23618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.760939][T23765] device syzkaller0 entered promiscuous mode [ 1442.781850][T23618] device hsr_slave_0 entered promiscuous mode [ 1442.796910][T23618] device hsr_slave_1 entered promiscuous mode [ 1442.809737][T23618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1442.820635][T23618] Cannot create hsr debugfs directory [ 1446.596714][T23789] device syzkaller0 entered promiscuous mode [ 1450.151267][T23803] netlink: 'syz.5.5683': attribute type 1 has an invalid length. [ 1450.189703][T23807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1450.308282][T23808] device syzkaller0 entered promiscuous mode [ 1454.039874][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1454.966451][T23857] device syzkaller0 entered promiscuous mode [ 1455.128808][T23871] netlink: 'syz.9.5695': attribute type 1 has an invalid length. [ 1455.146375][T23870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1459.520259][T23920] device syzkaller0 entered promiscuous mode [ 1460.334304][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1460.448343][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5707'. [ 1460.604358][T23618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1460.622151][T23618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1460.661540][T23618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1460.698375][T23618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1460.980845][T23950] device syzkaller0 entered promiscuous mode [ 1464.446278][T23964] device syzkaller0 entered promiscuous mode [ 1464.467934][T23618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.276610][T23979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5717'. [ 1469.403865][T23996] device syzkaller0 entered promiscuous mode [ 1473.139028][T24005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1473.175113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1473.199069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.262143][T24030] device syzkaller0 entered promiscuous mode [ 1473.274166][T23618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.701892][T24058] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5730'. [ 1477.751595][T23618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1477.820409][T23618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1477.839142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1477.890288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1477.914026][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.921163][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.960229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1477.977832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1477.990095][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.997482][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.060968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1478.121497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1478.160503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1478.202846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1478.230716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1478.301883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1478.323461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1478.355951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1478.373932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1478.403341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1478.424495][T24094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5736'. [ 1478.446614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1478.464317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1478.493366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1478.630108][T24101] device syzkaller0 entered promiscuous mode [ 1478.803669][T24106] device syzkaller0 entered promiscuous mode [ 1481.159235][T12640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1481.159350][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1484.757226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.834901][T24136] tipc: Started in network mode [ 1485.839855][T24136] tipc: Node identity 1e358a7e3027, cluster identity 4711 [ 1485.847458][T24136] tipc: Enabled bearer , priority 0 [ 1485.854831][T24130] device syzkaller0 entered promiscuous mode [ 1485.888002][T24125] tipc: Resetting bearer [ 1485.969327][T24125] tipc: Disabling bearer [ 1485.990183][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1486.003128][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1486.027819][T23618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.257039][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1486.311629][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.442183][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.460147][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.494653][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1486.520584][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1486.542403][T23618] device veth0_vlan entered promiscuous mode [ 1486.603757][T23618] device veth1_vlan entered promiscuous mode [ 1486.702394][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1486.740518][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1486.782036][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1486.801198][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1488.832771][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1488.838936][T12640] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1489.131478][ T4279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1489.160385][ T4279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1489.170911][ T4279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1489.195118][ T4279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1489.214205][ T4279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1489.233672][ T4279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1491.325201][T12640] Bluetooth: hci6: command 0x0409 tx timeout [ 1492.980263][T23618] device veth0_macvtap entered promiscuous mode [ 1493.005572][T17703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1493.392746][T12640] Bluetooth: hci6: command 0x041b tx timeout [ 1495.472867][T12640] Bluetooth: hci6: command 0x040f tx timeout [ 1497.149731][T24267] netlink: 'syz.0.5767': attribute type 1 has an invalid length. [ 1497.166277][T24267] netlink: 'syz.0.5767': attribute type 2 has an invalid length. [ 1497.560541][ T4279] Bluetooth: hci6: command 0x0419 tx timeout [ 1498.649784][T24228] chnl_net:caif_netlink_parms(): no params data found [ 1498.996491][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5769'. [ 1499.310756][T24287] device syzkaller0 entered promiscuous mode [ 1501.937778][T24314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1504.313802][T24228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.321380][T24228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.354992][T24228] device bridge_slave_0 entered promiscuous mode [ 1504.403631][T24228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.419538][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5786'. [ 1504.423132][T24228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.476147][T24228] device bridge_slave_1 entered promiscuous mode [ 1504.661607][T24228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.510278][T24228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.559473][T24353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1505.794753][T24228] team0: Port device team_slave_0 added [ 1509.134317][T24228] team0: Port device team_slave_1 added [ 1509.379590][T24228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.408950][T24228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.527475][T24228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.648051][T24228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.689052][T24228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.794922][T24228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.085904][T24228] device hsr_slave_0 entered promiscuous mode [ 1510.103445][T24228] device hsr_slave_1 entered promiscuous mode [ 1510.178557][T24228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.196911][T24228] Cannot create hsr debugfs directory [ 1510.947197][ T4494] device hsr_slave_0 left promiscuous mode [ 1510.962559][ T4494] device hsr_slave_1 left promiscuous mode [ 1510.991006][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.038602][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.066750][ T4494] device bridge_slave_1 left promiscuous mode [ 1511.085667][T24427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5799'. [ 1511.116993][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.146419][ T4494] device bridge_slave_0 left promiscuous mode [ 1511.156376][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.271898][ T4494] device veth0_macvtap left promiscuous mode [ 1511.291552][ T4494] device veth1_vlan left promiscuous mode [ 1511.302337][ T4494] device veth0_vlan left promiscuous mode [ 1511.622843][ T7969] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1511.835194][ T7969] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1511.845289][ T7969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.857254][ T7969] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1511.867045][ T7969] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1511.876870][ T7969] usb 6-1: Manufacturer: syz [ 1511.888689][ T7969] usb 6-1: config 0 descriptor?? [ 1512.033924][ T7969] rc_core: IR keymap rc-hauppauge not found [ 1512.046648][ T7969] Registered IR keymap rc-empty [ 1512.064145][ T7969] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1512.093262][ T7969] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 1512.107827][T24433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.131730][T24433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.673316][ T7969] usb 6-1: USB disconnect, device number 58 [ 1513.085494][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 1513.168890][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 1513.252181][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.350627][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.465676][T24449] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1513.856818][ T4494] bond0 (unregistering): Released all slaves [ 1514.437641][T24462] device syzkaller0 entered promiscuous mode [ 1514.677569][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5813'. [ 1515.001000][T24469] device syzkaller0 entered promiscuous mode [ 1520.913261][T24493] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5816'. [ 1521.220021][T24228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1521.341661][T24228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1521.442873][T24228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1521.488071][T24525] device syzkaller0 entered promiscuous mode [ 1523.667464][T24228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1524.472681][T24228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.548757][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1524.587017][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1524.602524][T24228] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.657341][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1524.688351][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1524.715760][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.723229][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.816503][T24557] tipc: Started in network mode [ 1524.837480][T24557] tipc: Node identity 4ab57d6f3df4, cluster identity 4711 [ 1524.861786][T24557] tipc: Enabled bearer , priority 0 [ 1524.970661][T24560] device syzkaller0 entered promiscuous mode [ 1524.980549][T24560] tipc: Resetting bearer [ 1525.094150][T24565] device syzkaller0 entered promiscuous mode [ 1525.471256][ T4385] tipc: Resetting bearer [ 1525.514514][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1525.565921][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1525.595502][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1525.623995][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.631302][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.678182][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1525.728404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1525.763063][T24556] tipc: Resetting bearer [ 1526.939539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.097370][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5834'. [ 1530.454148][T24556] tipc: Disabling bearer [ 1534.104666][ T22] tipc: Node number set to 2000780655 [ 1534.122837][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1534.134504][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1534.209703][T24619] device syzkaller0 entered promiscuous mode [ 1534.261900][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1534.270800][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1534.289106][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1535.665824][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1537.615061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1538.040989][T12640] Bluetooth: hci4: command 0x0406 tx timeout [ 1540.232947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1541.167630][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1541.176925][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1541.188561][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1541.213750][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1541.332410][T24682] device syzkaller0 entered promiscuous mode [ 1541.359201][T24228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1541.839415][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5855'. [ 1544.273450][ T28] INFO: task syz.3.5454:22920 blocked for more than 145 seconds. [ 1544.283554][ T28] Not tainted syzkaller #0 [ 1544.288635][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1544.298668][ T28] task:syz.3.5454 state:D stack:26224 pid:22920 ppid:16421 flags:0x00004004 [ 1544.308487][ T28] Call Trace: [ 1544.311849][ T28] [ 1544.314926][ T28] __schedule+0x11d1/0x40e0 [ 1544.319713][ T28] ? __sched_text_start+0x8/0x8 [ 1544.328895][ T28] schedule+0xb9/0x180 [ 1544.333171][ T28] schedule_timeout+0xbd/0x2d0 [ 1544.338151][ T28] ? console_conditional_schedule+0x40/0x40 [ 1544.345189][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1544.351423][ T28] ? lock_chain_count+0x20/0x20 [ 1544.356459][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1544.361811][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1544.368856][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1544.374144][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1544.379988][ T28] ? wait_for_completion+0x276/0x5a0 [ 1544.386295][ T28] wait_for_completion+0x2c7/0x5a0 [ 1544.391714][ T28] ? io_schedule+0xd0/0xd0 [ 1544.396809][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1544.405003][ T28] ? __flush_work+0x10d/0xae0 [ 1544.410059][ T28] __flush_work+0x952/0xae0 [ 1544.414930][ T28] ? __flush_work+0x10d/0xae0 [ 1544.420036][ T28] ? flush_work+0x20/0x20 [ 1544.424505][ T28] ? move_linked_works+0x250/0x250 [ 1544.430051][ T28] ? lock_chain_count+0x20/0x20 [ 1544.435662][ T28] ? locks_remove_file+0x377/0xec0 [ 1544.440884][ T28] ? __cancel_work_timer+0x36a/0x560 [ 1544.446490][ T28] __cancel_work_timer+0x3f4/0x560 [ 1544.451690][ T28] ? cancel_work_sync+0x20/0x20 [ 1544.456805][ T28] tls_sk_proto_close+0xc4/0x8f0 [ 1544.461911][ T28] inet_release+0x139/0x180 [ 1544.466596][ T28] sock_close+0xd5/0x240 [ 1544.470876][ T28] ? sock_mmap+0x90/0x90 [ 1544.475269][ T28] __fput+0x22c/0x920 [ 1544.479305][ T28] task_work_run+0x1d0/0x260 [ 1544.484529][ T28] ? task_work_cancel+0x220/0x220 [ 1544.490007][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1544.496059][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1544.501440][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1544.507220][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1544.513244][ T28] do_syscall_64+0x58/0xa0 [ 1544.518243][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1544.523061][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1544.529439][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.535454][ T28] RIP: 0033:0x7f686f39c819 [ 1544.539998][ T28] RSP: 002b:00007fff207307e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1544.548754][ T28] RAX: 0000000000000000 RBX: 00007f686f617da0 RCX: 00007f686f39c819 [ 1544.557074][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1544.565309][ T28] RBP: 00007f686f617da0 R08: 0000000000000006 R09: 0000000000000000 [ 1544.573388][ T28] R10: 00007f686f617cb0 R11: 0000000000000246 R12: 0000000000154bf7 [ 1544.581677][ T28] R13: 00007f686f61609c R14: 000000000015496a R15: 00007fff207308f0 [ 1544.590373][ T28] [ 1544.602492][ T28] [ 1544.602492][ T28] Showing all locks held in the system: [ 1544.619295][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1544.625866][ T28] #0: ffffffff8cb2df30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1544.637439][ T28] 1 lock held by rcu_tasks_trace/13: [ 1544.643365][ T28] #0: ffffffff8cb2e750 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1544.656563][ T28] 1 lock held by khungtaskd/28: [ 1544.661458][ T28] #0: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1544.672107][ T28] 3 locks held by kworker/u4:3/46: [ 1544.677805][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.689950][ T28] #1: ffffc90000b77d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.701060][ T28] #2: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1544.710280][ T28] 2 locks held by getty/4034: [ 1544.715208][ T28] #0: ffff88814d213098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1544.725985][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1544.736306][ T28] 2 locks held by kworker/1:4/4309: [ 1544.741608][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.752402][ T28] #1: ffffc90003ec7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.764639][ T28] 3 locks held by kworker/1:7/4335: [ 1544.769884][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.780640][ T28] #1: ffffc90003f67d00 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.794880][ T28] #2: ffff888079064cd8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0xfd/0x1f0 [ 1544.805049][ T28] 4 locks held by kworker/u4:17/4494: [ 1544.810553][ T28] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.821290][ T28] #1: ffffc900048afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.831506][ T28] #2: ffffffff8dd3af10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1544.841240][ T28] #3: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: caif_exit_net+0x66/0x490 [ 1544.850809][ T28] 3 locks held by kworker/0:4/7969: [ 1544.856514][ T28] #0: ffff88814d04bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.867655][ T28] #1: ffffc900034dfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.880269][ T28] #2: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x14f0 [ 1544.890233][ T28] 3 locks held by kworker/1:11/8190: [ 1544.895800][ T28] #0: ffff88814d04bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.906977][ T28] #1: ffffc90004d3fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1544.926245][ T28] #2: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x14f0 [ 1544.935850][ T28] 1 lock held by syz.3.5454/22920: [ 1544.941042][ T28] #0: ffff888073a96e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1544.952096][ T28] 1 lock held by syz-executor/24228: [ 1544.957579][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1544.967301][ T28] 2 locks held by syz.5.5850/24670: [ 1544.973150][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1544.982267][ T28] #1: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1544.994195][ T28] 1 lock held by syz.0.5852/24700: [ 1544.999425][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1545.009520][ T28] 1 lock held by syz.0.5852/24704: [ 1545.014872][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1545.024620][ T28] 1 lock held by syz.0.5852/24711: [ 1545.030072][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1545.040234][ T28] 1 lock held by syz.8.5853/24697: [ 1545.045769][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3fc/0x1e60 [ 1545.055568][ T28] 1 lock held by syz.8.5853/24705: [ 1545.060880][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x288/0x1af0 [ 1545.070539][ T28] 1 lock held by syz.9.5856/24726: [ 1545.076116][ T28] #0: ffffffff8dd47de8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1545.085756][ T28] [ 1545.088115][ T28] ============================================= [ 1545.088115][ T28] [ 1545.097339][ T28] NMI backtrace for cpu 0 [ 1545.101721][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1545.108943][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.119024][ T28] Call Trace: [ 1545.122441][ T28] [ 1545.125381][ T28] dump_stack_lvl+0x188/0x24e [ 1545.130106][ T28] ? show_regs_print_info+0x12/0x12 [ 1545.135336][ T28] ? load_image+0x400/0x400 [ 1545.139851][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1545.144556][ T28] ? printk_sprint+0x460/0x460 [ 1545.149465][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1545.154633][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1545.160847][ T28] ? _printk+0xda/0x130 [ 1545.165279][ T28] ? load_image+0x400/0x400 [ 1545.170023][ T28] ? load_image+0x400/0x400 [ 1545.174568][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1545.180740][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1545.187115][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1545.193130][ T28] watchdog+0xeee/0xf30 [ 1545.197403][ T28] ? watchdog+0x1ed/0xf30 [ 1545.201849][ T28] kthread+0x29d/0x330 [ 1545.206016][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1545.211347][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1545.215954][ T28] ret_from_fork+0x1f/0x30 [ 1545.220497][ T28] [ 1545.224471][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1545.229854][ C1] NMI backtrace for cpu 1 [ 1545.229866][ C1] CPU: 1 PID: 4421 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1545.229883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.229893][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1545.229918][ C1] RIP: 0010:__get_immv32+0x220/0x330 [ 1545.229936][ C1] Code: c3 3d 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 75 49 40 88 2b b8 01 00 00 00 eb 07 e8 59 5f 60 f7 31 c0 48 83 c4 08 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 e8 43 5f 60 f7 eb e8 e8 3c 5f 60 f7 eb e1 [ 1545.229950][ C1] RSP: 0018:ffffc90004607850 EFLAGS: 00000292 [ 1545.229963][ C1] RAX: 0000000000000001 RBX: 1ffff920008c0f33 RCX: ffff88802e778000 [ 1545.229975][ C1] RDX: dffffc0000000000 RSI: ffffffff8e093ca0 RDI: 0000000000000008 [ 1545.229986][ C1] RBP: 1ffff920008c0f04 R08: ffff88802e778000 R09: 0000000000000003 [ 1545.229998][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffffc9000460799c [ 1545.230009][ C1] R13: dffffc0000000000 R14: ffffc900046079c8 R15: 0000000000000206 [ 1545.230021][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1545.230035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1545.230047][ C1] CR2: 00005555585664e8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1545.230062][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1545.230072][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1545.230082][ C1] Call Trace: [ 1545.230088][ C1] [ 1545.230095][ C1] insn_get_immediate+0xc09/0x1290 [ 1545.230115][ C1] insn_decode+0x386/0x520 [ 1545.230130][ C1] ? kmem_cache_alloc+0x62/0x2f0 [ 1545.230148][ C1] __jump_label_patch+0x103/0x490 [ 1545.230165][ C1] ? rcu_is_watching+0x11/0xa0 [ 1545.230186][ C1] ? arch_jump_label_transform_queue+0xd0/0xd0 [ 1545.230207][ C1] ? kmem_cache_alloc+0x62/0x2f0 [ 1545.230222][ C1] ? kmem_cache_alloc+0x71/0x2f0 [ 1545.230236][ C1] ? kmem_cache_alloc+0x67/0x2f0 [ 1545.230256][ C1] ? static_key_disable_cpuslocked+0x89/0x1a0 [ 1545.230274][ C1] ? mutex_lock_nested+0x10/0x10 [ 1545.230299][ C1] arch_jump_label_transform_queue+0x48/0xd0 [ 1545.230317][ C1] __jump_label_update+0x17d/0x390 [ 1545.230338][ C1] static_key_disable_cpuslocked+0xc1/0x1a0 [ 1545.230355][ C1] static_key_disable+0x16/0x20 [ 1545.230370][ C1] toggle_allocation_gate+0x3d1/0x470 [ 1545.230387][ C1] ? show_object+0xa0/0xa0 [ 1545.230404][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1545.230427][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1545.230446][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1545.230464][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1545.230482][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1545.230501][ C1] ? process_one_work+0x7b0/0x1160 [ 1545.230519][ C1] process_one_work+0x8a2/0x1160 [ 1545.230543][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1545.230563][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1545.230580][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1545.230597][ C1] ? kthread_data+0x4b/0xc0 [ 1545.230621][ C1] worker_thread+0xaa2/0x1270 [ 1545.230644][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1545.230664][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1545.230687][ C1] kthread+0x29d/0x330 [ 1545.230709][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1545.230726][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1545.230741][ C1] ret_from_fork+0x1f/0x30 [ 1545.230767][ C1] [ 1545.567260][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1545.574321][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1545.581535][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.591609][ T28] Call Trace: [ 1545.595254][ T28] [ 1545.598175][ T28] dump_stack_lvl+0x188/0x24e [ 1545.602988][ T28] ? memcpy+0x3c/0x60 [ 1545.607225][ T28] ? show_regs_print_info+0x12/0x12 [ 1545.612512][ T28] ? load_image+0x400/0x400 [ 1545.617058][ T28] panic+0x2e5/0x730 [ 1545.620966][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1545.626641][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1545.631145][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1545.637414][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1545.643884][ T28] watchdog+0xf2d/0xf30 [ 1545.648074][ T28] ? watchdog+0x1ed/0xf30 [ 1545.652738][ T28] kthread+0x29d/0x330 [ 1545.656899][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1545.662277][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1545.667082][ T28] ret_from_fork+0x1f/0x30 [ 1545.671624][ T28] [ 1545.675249][ T28] Kernel Offset: disabled [ 1545.679597][ T28] Rebooting in 86400 seconds..