last executing test programs: 9m42.186594924s ago: executing program 4 (id=794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x40, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 9m40.372493935s ago: executing program 4 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 9m39.548829732s ago: executing program 4 (id=800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 9m39.121475253s ago: executing program 4 (id=804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x737, 0x739, &(0x7f0000000000)="ff", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="68030000", @ANYRES16, @ANYBLOB="000825bd7000ffdbdf251b000000df0019003c91a537dac1b0844b5731813d904857b0d419563d08a3a89ebddbef608a24adc3486a1c94249f8721407084b468a5b5dd031ec67eca350810baa3fb5ffe9614d89644f14f7c304a18a13b4eed2eb25dffa28231e7def219053b01403bd6a58f9a5297760c3e01693ffc615d7778fceead1145e66c2a281dc32498d797f9d29dc826ff45fcba0a3083c76ec0993e3d60462f2c090c5c07f66912932cb8b87b223d2ad8fe75f0be32299dbd450011f6df8c9d89cfd63dd24c5c73de105dd9c8f387e27b40a1859708f3765a3f21dc0008000100", @ANYRES32=r1, @ANYBLOB="df0019000a0fc402e985cbfceee1066b028f61d6f6391840d2670e22a28a6f1910f6ecffc3e66a629c21f247a9573b551a429b8335aba4a15482e43dc17df122cb75cc8aa93a610f0ce838d1d406ce608f06e04a86f6573312f1086547b7bc327441f39bdfe8316b37ee4ba29431f7f8d400e163520f34cd1e527a45b612bebae6686f6e82eda07a1d65fc0f7af3cd0bf28e1c5868797be146010fdd4e097dc7c14549278cb05b71e8c0308c23ee525b5702e0e4b3ed828cb71585395c6c621efdbc8dc74736d9a7f5fc6343964c570134edabc7e7dd", @ANYRES32=r2, @ANYBLOB="0800150000000000dc001900129bd5bf0f482fa9fb51abf7846e5b1e4e4daf0eae886fa90a01ced0779a7a0ec8a2749317532cb1c99db53cccd69dcf9aedd571e19337337d247ce8a4b73cb002ee4d05e2c1aa00795db5afb22d35ea4296b87b1e019744a327776a466898784a34c628c1b7cb65554f1bd2b18d0381d29319689cfe28cfd7718e6946f99fd0edec6279356548381426288a0a27f622e473edae4fa3e9e2ca7d94a3577eef20bc3d3c372887b3bcdf89b9ec66fa69b592", @ANYRES32=r6, @ANYBLOB="0800150001000000080015000100000087001900e1238718c81bf9ae455716e899748177bd9f223958cb02c81ba5369f64643f233c27d7408b78870d24792edb339f8b1677ab"], 0x368}, 0x1, 0x0, 0x0, 0x4008080}, 0x50) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc626fc1e80a9fd11}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010080fffffffdffffff0100000008000100000600000c0004c005000300020000000800020003"], 0x30}}, 0x8000) 9m35.959098437s ago: executing program 4 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2a020400) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) pipe2(0x0, 0x80000) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m33.761625682s ago: executing program 4 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000ac0)="d93ce0d5", 0x0, 0x0, 0x1}, 0x50) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x14}}, 0x4004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, '\x00', "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='user.incfs.size\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 9m18.57408999s ago: executing program 32 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000ac0)="d93ce0d5", 0x0, 0x0, 0x1}, 0x50) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x14}}, 0x4004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, '\x00', "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='user.incfs.size\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 8m35.346377204s ago: executing program 5 (id=1097): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000009c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={0xffffffffffffffff, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x180) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = socket(0x840000000002, 0x3, 0x100) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0xf}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24048844) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b00)={0x494, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x96, 0x5, "ac523fa75c90d773f8a3a7bd30064388c8e4db10f97ffc6e4c45a93295c2331364d4bf10916f21c8e0acbf5183f0a101b819d25a88e466de34408e79af400252afb6f206f56ec94248ba82a7447313d63f8265e60bd3ca55d212864c3b1f6dc367413befe3ba3eed3df20b7f0cdfee7987bdc899f4d22e767f4af516c84bbee8795a6cbdd2f2cc7ea47170918819c169ec44"}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "03dfbbd5c7df5d4854e0d08af310c76503af8b635d40c19ed3978116defd111ed1f67ace13fbd9073b8140c41bda0472e9321ec6fb34680342859dc54025e87f6fae4f281d4ec778829f634564f65e5da1cecff7cc7d1ad5bf2f2d38269fa17b2ebe14f253065d706cb4ffdceeb79f"}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x308, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "22aa7a7b8fa94e5cad58fa7c6acd342c59a24ea50489d074b765cf6a820d44324a9badaf01fa057b03d5f45bc4e149cf9a4f44842c170b45f4554d89e7e9f4617586993d5c9b63cf55ddfdb43347c894f79e6cb38fa962da446d641474516ebf834c1890d0428058563d0c5ede6eac15fe98529038fb46cd5c4272a7740efd29b77db1ff642698ddbae83587ebb6824c08bd6dd6cd77d83452edf152a28bab858d0f84ce4eafcfa52fe6191ba0e7b90e742a79f26cd6f40bc9ded2f5fe563128b42c88c1e5668e9c50b7bed40159611ac81609366b468ab32abb8af9947750d54f16d80d36ca4ea1ed263bb6dc6bd2af393d6cae51"}, @ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "3a22be160d8c26ceff7bb2a8500b5a50c04d7bf53f26186b653fc23cb737e22058fe9802f9d8b3d227bae791990585b784bf91539d6f45b882849f7ca2fb8724dd3417e6f522a46ab3ad8aa20a5128e504204a4ebee34c976c50646414b80523ccbbe3180815dbd4c2a92b424ae16e9f9199e845478ff07ccdc45c39638ea99306441c04ea4a09fb42c8a29cc350d82d5972ea8533dfe27ebc3683c42b2b9add33dc550721cbfd34b6e9e3d39c6e904d0a101b"}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "5a48046fd426920b06276b3e6cd2c3a89ece97b5280be27351ccfb51e84237481725011ff3b89273213c2aed46aae900d6a091a1f0cc33e8f192"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x24000098}, 0x40000) 8m34.160213385s ago: executing program 5 (id=1100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="43128009000100760900"/20], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) mkdir(&(0x7f0000000080)='./file0\x00', 0x125) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000001280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0xd9d}], 0x1, 0x0, 0x0, 0x4000}, 0x40004) 8m32.814429782s ago: executing program 5 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x4, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 8m31.976685069s ago: executing program 5 (id=1115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x737, 0x739, &(0x7f0000000000)="ff", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="68030000", @ANYRES16, @ANYBLOB="000825bd7000ffdbdf251b000000df0019003c91a537dac1b0844b5731813d904857b0d419563d08a3a89ebddbef608a24adc3486a1c94249f8721407084b468a5b5dd031ec67eca350810baa3fb5ffe9614d89644f14f7c304a18a13b4eed2eb25dffa28231e7def219053b01403bd6a58f9a5297760c3e01693ffc615d7778fceead1145e66c2a281dc32498d797f9d29dc826ff45fcba0a3083c76ec0993e3d60462f2c090c5c07f66912932cb8b87b223d2ad8fe75f0be32299dbd450011f6df8c9d89cfd63dd24c5c73de105dd9c8f387e27b40a1859708f3765a3f21dc0008000100", @ANYRES32=r1, @ANYBLOB="df0019000a0fc402e985cbfceee1066b028f61d6f6391840d2670e22a28a6f1910f6ecffc3e66a629c21f247a9573b551a429b8335aba4a15482e43dc17df122cb75cc8aa93a610f0ce838d1d406ce608f06e04a86f6573312f1086547b7bc327441f39bdfe8316b37ee4ba29431f7f8d400e163520f34cd1e527a45b612bebae6686f6e82eda07a1d65fc0f7af3cd0bf28e1c5868797be146010fdd4e097dc7c14549278cb05b71e8c0308c23ee525b5702e0e4b3ed828cb71585395c6c621efdbc8dc74736d9a7f5fc6343964c570134edabc7e7dd", @ANYRES32=r2, @ANYBLOB="0800150000000000dc001900129bd5bf0f482fa9fb51abf7846e5b1e4e4daf0eae886fa90a01ced0779a7a0ec8a2749317532cb1c99db53cccd69dcf9aedd571e19337337d247ce8a4b73cb002ee4d05e2c1aa00795db5afb22d35ea4296b87b1e019744a327776a466898784a34c628c1b7cb65554f1bd2b18d0381d29319689cfe28cfd7718e6946f99fd0edec6279356548381426288a0a27f622e473edae4fa3e9e2ca7d94a3577eef20bc3d3c372887b3bcdf89b9ec66fa69b592", @ANYBLOB="0800150001000000080015000100000087001900e1238718c81bf9ae455716e899748177bd9f223958cb02c81ba5369f64643f233c27"], 0x368}, 0x1, 0x0, 0x0, 0x4008080}, 0x50) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc626fc1e80a9fd11}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010080fffffffdffffff0100000008000100000600000c0004c005000300020000000800020003"], 0x30}}, 0x8000) 8m29.637781642s ago: executing program 5 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2a020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x0, 0x0) pipe2(0x0, 0x80000) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m26.828393056s ago: executing program 5 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x0, 0x11, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4) 8m11.711648239s ago: executing program 33 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x0, 0x11, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4) 5m1.653044088s ago: executing program 0 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 5m1.503029419s ago: executing program 0 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000040), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 5m1.110894604s ago: executing program 0 (id=2329): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) 5m0.444434066s ago: executing program 0 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4m59.651535621s ago: executing program 0 (id=2343): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={0x0, 0x254c}}, 0x4000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) 4m58.832018584s ago: executing program 0 (id=2348): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4m43.698664881s ago: executing program 34 (id=2348): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4m17.100482769s ago: executing program 1 (id=2555): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4m16.567494572s ago: executing program 1 (id=2558): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x9) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 4m16.479570895s ago: executing program 1 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a00", @ANYRES32=0x0, @ANYBLOB="08002800010000000800"], 0x94}}, 0x0) 4m15.80292507s ago: executing program 1 (id=2566): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) pipe(&(0x7f0000000000)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 4m15.112364682s ago: executing program 1 (id=2568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000680)}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x4048084) 4m14.607359156s ago: executing program 1 (id=2574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m59.448972443s ago: executing program 35 (id=2574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m35.508080687s ago: executing program 3 (id=3005): mknod$loop(&(0x7f0000001340)='./file0\x00', 0xc000, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, &(0x7f0000000740)) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r3 = memfd_secret(0x80000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r3) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00') r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x3, 0x1}}, 0x40) 2m33.7461835s ago: executing program 3 (id=3013): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close(r1) 2m33.532326805s ago: executing program 3 (id=3015): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040), 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m31.562808508s ago: executing program 3 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000100001040000", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x0) 2m27.802102282s ago: executing program 3 (id=3021): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2m27.477631863s ago: executing program 3 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0xe, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 2m10.275460816s ago: executing program 6 (id=3099): syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 2m10.198651844s ago: executing program 6 (id=3100): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000ac0)="d93ce0d5", 0x0, 0x0, 0x1}, 0x50) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x14}}, 0x4004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, '\x00', "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) 2m8.840273806s ago: executing program 6 (id=3101): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2m8.720648787s ago: executing program 6 (id=3102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e000000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f0000010000000000000000000000000000000032"], 0x23c}}, 0x0) 2m8.651302972s ago: executing program 6 (id=3103): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2a020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) pipe2(0x0, 0x80000) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m8.442024475s ago: executing program 6 (id=3104): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'vxcan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x8, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.400101368s ago: executing program 36 (id=3104): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'vxcan1\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x8, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.718876245s ago: executing program 7 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001240)='.', &(0x7f0000000580), 0x1000, r0}, 0x38) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8", 0x60}], 0x1}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000003c0)={0x10005f, 0x1c}, 0x46) capset(0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7c, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026a00010100000009040000000202ffe9052406000005240004000d240f0100002000fdff00000005240101fc1524122604a317a88b045e4e01a607c0ffcb7e392a1524125b"], 0x0) 13.257240754s ago: executing program 2 (id=3352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 13.026595896s ago: executing program 2 (id=3353): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x108, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x25dfdbfc, {}, [{0xf4, 0x1, [@m_simple={0xf0, 0x15, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x14, 0xa}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-@(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x4, 0x3, 0x200, 0x2a9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8001, 0x2, 0x3, 0x3}}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7c, 0x20000000, 0x3ff, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x1ff, 0x20000000, 0xa028, 0x1}}]}, {0x25, 0x6, "0c327201da2b342e31814f400f6069f3c2331beb6b415297a37827c3398fe4194e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x108}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000140)=0xcd, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socketpair(0x23, 0x1, 0x7fff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e657400000000658cd8c1fa8d863bae20db169c17553861"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600054005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fbdbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="050035003700000067d79fac6132aafecef8e4ebc5c76b2a7a3445033191bd3aad119934d65bd8e60f8c34bf887155dd73348b38ae6e0fe83b0fb7d038653d2817a2827b"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.772403698s ago: executing program 8 (id=3354): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000c000000000095000000000000000482b1f24704ef7f2a40c205fc1b57ba80be473a63bc0aa756cd3b45e65e78a95203676531bef17a3679623a72d796dd760f2d9ffd414b4794d0a31f6bd1fe2b7e8bf44565bbc05af0c85a76f1b5abcbea142badb386dd8f68c5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x108, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x25dfdbfc, {}, [{0xf4, 0x1, [@m_simple={0xf0, 0x15, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x14, 0xa}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-@(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x4, 0x3, 0x200, 0x2a9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8001, 0x2, 0x3, 0x3}}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7c, 0x20000000, 0x3ff, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x1ff, 0x20000000, 0xa028, 0x1}}]}, {0x25, 0x6, "0c327201da2b342e31814f400f6069f3c2331beb6b415297a37827c3398fe4194e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x108}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000140)=0xcd, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socketpair(0x23, 0x1, 0x7fff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e657400000000658cd8c1fa8d863bae20db169c17553861"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600054005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fbdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="050035003700000067d79fac6132aafecef8e4ebc5c76b2a7a3445033191bd3aad119934d65bd8e60f8c34bf887155dd73348b38ae6e0fe83b0fb7d038653d2817a2827b"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.516927194s ago: executing program 7 (id=3355): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ae4000/0x2000)=nil, 0x2000, 0x1000002, 0x14, r0, 0x9a38d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 10.471665888s ago: executing program 2 (id=3356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 10.324419711s ago: executing program 2 (id=3357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x24dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.812949622s ago: executing program 7 (id=3358): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x5, 0x5}, {0x10, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x8, 0xcc4}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 3.979774285s ago: executing program 8 (id=3359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0xe, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) 3.833447935s ago: executing program 7 (id=3360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0}, &(0x7f0000000300)=0x40) 3.114978724s ago: executing program 2 (id=3361): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b54de130", 0x4}, {&(0x7f0000000200)="c9c98a5e1b", 0x5}, {&(0x7f0000000340)="01304d", 0x3}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d764", 0x2}, {&(0x7f0000000600)="4adfdd", 0x3}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)="3c15", 0x2}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000002a40)='sS', 0x2}, {&(0x7f0000002b00)="c7", 0x1}, {&(0x7f0000002bc0)="3e8a", 0x2}, {&(0x7f0000002cc0)="7686", 0x2}], 0x8}}], 0x2, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.966516057s ago: executing program 8 (id=3362): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000c000000000095000000000000000482b1f24704ef7f2a40c205fc1b57ba80be473a63bc0aa756cd3b45e65e78a95203676531bef17a3679623a72d796dd760f2d9ffd414b4794d0a31f6bd1fe2b7e8bf44565bbc05af0c85a76"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x108, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x25dfdbfc, {}, [{0xf4, 0x1, [@m_simple={0xf0, 0x15, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x14, 0xa}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-@(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x4, 0x3, 0x200, 0x2a9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8001, 0x2, 0x3, 0x3}}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7c, 0x20000000, 0x3ff, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x1ff, 0x20000000, 0xa028, 0x1}}]}, {0x25, 0x6, "0c327201da2b342e31814f400f6069f3c2331beb6b415297a37827c3398fe4194e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x108}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000140)=0xcd, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socketpair(0x23, 0x1, 0x7fff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e657400000000658cd8c1fa8d863bae20db169c17553861"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600054005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fbdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="050035003700000067d79fac6132aafecef8e4ebc5c76b2a7a3445033191bd3aad119934d65bd8e60f8c34bf887155dd73348b38ae6e0fe83b0fb7d038653d2817a2827b"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.632150638s ago: executing program 8 (id=3363): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa0082, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) unshare(0x20000400) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000080)={[], [{@fsmagic={'fsmagic', 0x3d, 0x30000000000000}}]}) 2.211654312s ago: executing program 7 (id=3364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d", 0x7c}, {&(0x7f00000007c0)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000000180)="d4", 0x1}, {&(0x7f0000000440)="48a26f723d8fad158ccda8671fff1c5dea8ce81be0a00176359efd1fa4ae438df968a57532dc3ec639a69424e2e57b8a271e44e082c113faf77002138e00d0b8344a74cecb9f8f2ea9b47134e80186fbeebfbdb2a4adca74df41e917f4fad6367f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="e1", 0x1}, {&(0x7f0000000880)="7c9dda24", 0x4}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788f", 0x3c}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000300)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000840)="ebf106b5a8ecc798e81c5d422f91b3f3753b8f3b5ffffac86749698123c43af04cccd666901ad1f8b8870000000000000000002b0048", 0x36}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.0541917s ago: executing program 2 (id=3365): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ae4000/0x2000)=nil, 0x2000, 0x1000002, 0x14, r0, 0x9a38d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.650300308s ago: executing program 7 (id=3366): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa0082, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) unshare(0x20000400) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb0000000000000000020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000080)={[], [{@fsmagic={'fsmagic', 0x3d, 0x30000000000000}}]}) 1.649487829s ago: executing program 8 (id=3367): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) sendto$packet(r0, &(0x7f0000000800), 0x0, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 0s ago: executing program 8 (id=3368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x80b, 0x0}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x2, 0x0, 0x1bb5818a4d1752a}, 0x4890) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r7, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x4}, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x7}, @jmp={0x5, 0x0, 0x1, 0x9, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5ee8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x9, 0x9, 0x5, 0xfffffffffffffffc, 0x1}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xb5, &(0x7f0000000340)=""/181, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x363, 0x5}, 0x10, r3, 0x0, 0x1, &(0x7f0000000540)=[r8, r9], &(0x7f0000000580)=[{0x1, 0x1, 0x5, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000f100000000000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000085000000a500000095000000000000001faa8d7fb5e805c67ba95f2ebd3befe5e6a29b5cc343eae87e11e6c42fd4c3083fc4c21054348735d370cd025ae699c23ec24a3ae9b0f041b6b41055488f0c5ef59bddc0acca6cd5585b404b0d000000000000000000ba683d50e80d43d549f8fb8b29c1eb5a7be68cccb9f58352f2c9f6340c249d200d7721eabace4b00f8de334ccb80cf5f1aa8656c20097f750c743c647e582883cdf9f60f32dce35223237066d2eec2b255e64228330074e18e"], &(0x7f0000000400)='GPL\x00', 0x1, 0xf0, &(0x7f0000000a40)=""/240, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e1400058005"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.1824'. [ 556.809892][T11418] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 557.704089][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1832'. [ 557.741754][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1832'. [ 558.126209][T11453] netlink: 'syz.3.1833': attribute type 24 has an invalid length. [ 558.719587][T11471] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 558.719609][T11471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1839'. [ 559.006126][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1845'. [ 559.058363][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1845'. [ 560.368624][T11500] netlink: 'syz.1.1849': attribute type 25 has an invalid length. [ 561.362424][T11523] netlink: 'syz.6.1859': attribute type 1 has an invalid length. [ 561.362447][T11523] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1859'. [ 561.579459][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 561.634626][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 561.815226][T11533] netlink: 'syz.2.1862': attribute type 25 has an invalid length. [ 561.893398][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1863'. [ 562.174461][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 562.330740][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 562.333120][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 562.333151][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 562.336252][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 562.336282][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.336303][ T5885] usb 2-1: Product: syz [ 562.336319][ T5885] usb 2-1: Manufacturer: syz [ 562.336334][ T5885] usb 2-1: SerialNumber: syz [ 562.360807][ T5885] usb 2-1: config 0 descriptor?? [ 562.378454][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 562.378495][ T5885] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 562.992740][ T5885] em28xx 2-1:0.0: unknown em28xx chip ID (180) [ 563.220167][ T5885] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 563.221251][ T5885] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 563.221271][ T5885] em28xx 2-1:0.0: No AC97 audio processor [ 563.328715][ T5885] usb 2-1: USB disconnect, device number 4 [ 563.349800][ T5885] em28xx 2-1:0.0: Disconnecting em28xx [ 563.377951][ T5885] em28xx 2-1:0.0: Freeing device [ 563.964439][T11576] netlink: 'syz.6.1878': attribute type 1 has an invalid length. [ 563.964462][T11576] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1878'. [ 565.767869][T11609] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1889'. [ 566.030763][ T5801] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 566.180879][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 566.196971][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 566.197007][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.216698][ T5801] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 566.216728][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.216747][ T5801] usb 1-1: Product: syz [ 566.216762][ T5801] usb 1-1: Manufacturer: syz [ 566.216777][ T5801] usb 1-1: SerialNumber: syz [ 566.273150][ T5801] usb 1-1: config 0 descriptor?? [ 566.302339][ T5801] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 566.302375][ T5801] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 566.416766][T11615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.779088][T11615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.821873][T11631] netlink: 'syz.6.1895': attribute type 1 has an invalid length. [ 566.821896][T11631] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1895'. [ 566.920131][ T5801] em28xx 1-1:0.0: unknown em28xx chip ID (180) [ 567.012516][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 567.012542][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1897'. [ 567.092464][T11615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.125220][ T5801] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 567.125658][ T5801] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 567.125675][ T5801] em28xx 1-1:0.0: No AC97 audio processor [ 567.174786][ T5801] usb 1-1: USB disconnect, device number 6 [ 567.177281][ T5801] em28xx 1-1:0.0: Disconnecting em28xx [ 567.194030][ T5801] em28xx 1-1:0.0: Freeing device [ 567.406118][T11615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.749239][ T69] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.904965][ T3941] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.994384][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1901'. [ 567.999931][T11644] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1901'. [ 568.044886][ T69] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.191551][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.231080][ T69] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.472990][T11668] netlink: 'syz.0.1909': attribute type 13 has an invalid length. [ 569.610167][T11671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1910'. [ 569.930708][ T6057] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 569.954755][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.968757][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.080648][ T6057] usb 3-1: Using ep0 maxpacket: 16 [ 570.083053][ T6057] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 570.083075][ T6057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 570.086244][ T6057] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 570.086273][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.086293][ T6057] usb 3-1: Product: syz [ 570.086308][ T6057] usb 3-1: Manufacturer: syz [ 570.086322][ T6057] usb 3-1: SerialNumber: syz [ 570.111749][ T6057] usb 3-1: config 0 descriptor?? [ 570.177974][ T6057] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 570.178011][ T6057] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 570.618340][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.641260][T11668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.779237][ T6057] em28xx 3-1:0.0: unknown em28xx chip ID (180) [ 571.663576][ T6057] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 571.664884][ T6057] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 571.664903][ T6057] em28xx 3-1:0.0: No AC97 audio processor [ 571.695529][ T6057] usb 3-1: USB disconnect, device number 6 [ 571.717135][ T6057] em28xx 3-1:0.0: Disconnecting em28xx [ 571.723447][ T6057] em28xx 3-1:0.0: Freeing device [ 571.738334][ T5985] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.738369][ T5985] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.786312][T11689] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.832430][ T1302] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.832466][ T1302] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.101262][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.140974][ T1302] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.141011][ T1302] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.141151][ T1302] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.141179][ T1302] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.898932][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.954705][T11689] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.231897][T11689] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.467064][T11689] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.189714][ T5985] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.297516][ T5996] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.358194][ T5986] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.541784][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.349628][T11768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 575.546455][T11773] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 575.714770][T11780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.768605][T11780] bond0: (slave rose0): Enslaving as an active interface with an up link [ 576.441636][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 576.553875][T11817] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 577.468970][T11822] netlink: 'syz.1.1967': attribute type 39 has an invalid length. [ 579.020020][T11859] netlink: 'syz.0.1979': attribute type 39 has an invalid length. [ 582.138564][T11913] netlink: 'syz.3.1993': attribute type 39 has an invalid length. [ 582.856967][T11937] netlink: 'syz.2.1999': attribute type 13 has an invalid length. [ 583.567837][T11933] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 584.115118][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.115607][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.489348][T11984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 585.503645][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 585.555869][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 585.593110][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.617261][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.905030][T11991] netlink: 'syz.3.2013': attribute type 25 has an invalid length. [ 586.251832][T11937] veth0: left allmulticast mode [ 586.411609][T11937] batadv0: left allmulticast mode [ 586.610571][ T5985] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.610605][ T5985] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.822842][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 586.973984][T11963] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.038324][ T5985] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.038359][ T5985] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.039510][ T5985] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.039543][ T5985] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.045668][ T5985] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.045705][ T5985] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.064505][T11963] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.083322][T12024] netlink: 'syz.3.2026': attribute type 25 has an invalid length. [ 588.100355][T12026] netlink: 'syz.0.2027': attribute type 13 has an invalid length. [ 588.113058][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 588.172155][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 588.255745][T12029] netlink: 'syz.3.2029': attribute type 39 has an invalid length. [ 588.469270][T11963] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.088383][T12059] netlink: 'syz.2.2039': attribute type 25 has an invalid length. [ 590.100422][T11963] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.219132][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 590.258253][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.294208][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 590.607781][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.455523][ T1302] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.529422][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.668590][ T1302] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.712217][ T1302] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.778995][ T1279] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.886563][T12090] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2050'. [ 592.103077][T12094] netlink: 'syz.1.2051': attribute type 25 has an invalid length. [ 592.112108][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2052'. [ 592.163749][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2052'. [ 592.208511][T12100] tipc: Enabled bearer , priority 0 [ 592.335661][T12096] tipc: Resetting bearer [ 592.762734][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.793718][T12095] tipc: Disabling bearer [ 593.798900][T12125] hugetlbfs: Unknown parameter 'fsmagic' [ 593.816081][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.861620][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.868471][ T991] tipc: Node number set to 3182832972 [ 594.027089][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.163236][T12127] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2062'. [ 594.415052][T12134] netlink: 'syz.2.2065': attribute type 25 has an invalid length. [ 594.856066][T12147] netlink: 'syz.6.2071': attribute type 1 has an invalid length. [ 594.856090][T12147] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2071'. [ 594.856568][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 594.904666][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 596.236482][T12160] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2073'. [ 596.318413][T12162] hugetlbfs: Unknown parameter 'fsmagic' [ 597.872133][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2085'. [ 597.919084][T12191] netlink: 'syz.2.2086': attribute type 13 has an invalid length. [ 597.930731][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2085'. [ 598.119615][T12194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2087'. [ 598.740029][T12206] veth0: entered promiscuous mode [ 598.749822][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 598.974586][T12206] veth0 (unregistering): left promiscuous mode [ 599.652702][T12235] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2097'. [ 599.940679][T12247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 599.960651][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 600.111243][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 600.115947][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 600.115980][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 600.119806][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 600.119836][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.119857][ T31] usb 2-1: Product: syz [ 600.119927][ T31] usb 2-1: Manufacturer: syz [ 600.119944][ T31] usb 2-1: SerialNumber: syz [ 600.247595][ T31] usb 2-1: config 0 descriptor?? [ 600.302378][T12253] netlink: 'syz.0.2100': attribute type 13 has an invalid length. [ 600.337279][ T31] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 600.337316][ T31] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 600.860439][ T31] em28xx 2-1:0.0: unknown em28xx chip ID (180) [ 601.067153][ T31] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 601.067654][ T31] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 601.067672][ T31] em28xx 2-1:0.0: No AC97 audio processor [ 601.100979][ T31] usb 2-1: USB disconnect, device number 5 [ 601.103635][ T31] em28xx 2-1:0.0: Disconnecting em28xx [ 601.146346][ T31] em28xx 2-1:0.0: Freeing device [ 601.225191][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 602.146235][T12280] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 602.287919][T12285] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2114'. [ 602.339679][T12287] netlink: 'syz.1.2113': attribute type 13 has an invalid length. [ 602.357046][T12284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 602.525014][T12294] netlink: 'syz.2.2118': attribute type 39 has an invalid length. [ 602.619609][T12297] veth0: entered promiscuous mode [ 602.623940][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2117'. [ 602.862333][T12302] netlink: 'syz.1.2120': attribute type 39 has an invalid length. [ 603.595530][T12316] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2126'. [ 605.256281][T12326] netlink: 'syz.1.2131': attribute type 13 has an invalid length. [ 606.049654][T12339] netlink: 'syz.6.2132': attribute type 1 has an invalid length. [ 606.049679][T12339] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2132'. [ 606.237358][T12344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.308120][T12346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 606.791360][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 607.092731][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 607.131419][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 607.220402][T12361] netlink: 'syz.6.2139': attribute type 25 has an invalid length. [ 607.774353][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2146'. [ 608.099779][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 608.461847][T12398] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 608.461868][T12398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2150'. [ 609.374800][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 609.433710][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 609.798695][T12435] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2158'. [ 610.305298][T12449] netlink: 'syz.1.2164': attribute type 1 has an invalid length. [ 610.305322][T12449] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2164'. [ 610.958614][T12470] netlink: 'syz.0.2167': attribute type 39 has an invalid length. [ 611.753209][T12493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2174'. [ 611.791957][T12489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2173'. [ 612.100857][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 612.260891][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 612.263507][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 612.263541][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.267937][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.267966][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.267988][ T31] usb 4-1: Product: syz [ 612.268003][ T31] usb 4-1: Manufacturer: syz [ 612.268020][ T31] usb 4-1: SerialNumber: syz [ 612.280373][ T31] usb 4-1: config 0 descriptor?? [ 612.300150][ T31] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 612.300193][ T31] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 612.901044][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2188'. [ 612.918537][ T31] em28xx 4-1:0.0: unknown em28xx chip ID (180) [ 613.120156][ T31] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 613.120695][ T31] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 613.120713][ T31] em28xx 4-1:0.0: No AC97 audio processor [ 613.151983][ T31] usb 4-1: USB disconnect, device number 4 [ 613.167399][ T31] em28xx 4-1:0.0: Disconnecting em28xx [ 613.182513][ T31] em28xx 4-1:0.0: Freeing device [ 613.217971][T12543] netlink: 'syz.1.2191': attribute type 39 has an invalid length. [ 613.533695][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 613.665941][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 614.851351][T12599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2206'. [ 615.120651][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 615.179064][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 615.281018][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 615.285157][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.285189][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.288325][T12619] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 615.288345][T12619] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2209'. [ 615.346798][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.346829][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.346849][ T31] usb 1-1: Product: syz [ 615.346863][ T31] usb 1-1: Manufacturer: syz [ 615.346878][ T31] usb 1-1: SerialNumber: syz [ 615.388544][ T31] usb 1-1: config 0 descriptor?? [ 615.410141][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.410177][ T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 616.003392][ T31] em28xx 1-1:0.0: unknown em28xx chip ID (180) [ 616.209604][ T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 616.210085][ T31] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 616.210100][ T31] em28xx 1-1:0.0: No AC97 audio processor [ 616.267114][ T31] usb 1-1: USB disconnect, device number 7 [ 616.269667][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 616.293075][ T31] em28xx 1-1:0.0: Freeing device [ 618.153389][T12678] hugetlbfs: Unknown parameter 'fsmagic' [ 619.808763][T12710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2237'. [ 620.070734][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 620.240993][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 620.245790][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 620.245824][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.252485][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 620.252518][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.252541][ T31] usb 4-1: Product: syz [ 620.252558][ T31] usb 4-1: Manufacturer: syz [ 620.252573][ T31] usb 4-1: SerialNumber: syz [ 620.293680][ T31] usb 4-1: config 0 descriptor?? [ 620.341484][ T31] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 620.341522][ T31] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 620.964162][ T31] em28xx 4-1:0.0: unknown em28xx chip ID (180) [ 621.183993][ T31] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 621.184485][ T31] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 621.184503][ T31] em28xx 4-1:0.0: No AC97 audio processor [ 621.227351][ T31] usb 4-1: USB disconnect, device number 5 [ 621.229736][ T31] em28xx 4-1:0.0: Disconnecting em28xx [ 621.274132][ T31] em28xx 4-1:0.0: Freeing device [ 621.294283][T12742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 623.600915][T12806] tc_dump_action: action bad kind [ 624.679914][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 624.985300][T12837] hugetlbfs: Unknown parameter 'fsmagic' [ 626.304634][T12854] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.662360][T12854] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.156176][T12878] hugetlbfs: Unknown parameter 'fsmagic' [ 628.178858][T12854] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.650184][T12854] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.997160][ T5986] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.112892][ T69] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.202775][ T5986] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.353166][ T5986] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.623399][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.106053][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2309'. [ 630.770807][ T1302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.294058][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.404003][ T1302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.528718][T12972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2328'. [ 632.763639][ T1302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.049133][T12980] netlink: 'syz.0.2329': attribute type 39 has an invalid length. [ 633.287045][ T1302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.534486][T12993] netlink: 'syz.6.2332': attribute type 39 has an invalid length. [ 633.943057][T13002] tipc: Enabling of bearer rejected, failed to enable media [ 633.944857][T13010] netlink: 'syz.3.2334': attribute type 1 has an invalid length. [ 633.944879][T13010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2334'. [ 633.945454][T13012] syzkaller0: entered promiscuous mode [ 633.945476][T13012] syzkaller0: entered allmulticast mode [ 634.202361][T13022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2341'. [ 634.882508][T13040] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 634.882531][T13040] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2346'. [ 634.992391][ T1302] bridge_slave_1: left allmulticast mode [ 634.992421][ T1302] bridge_slave_1: left promiscuous mode [ 634.992690][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.111046][ T1302] bridge_slave_0: left allmulticast mode [ 635.111075][ T1302] bridge_slave_0: left promiscuous mode [ 635.111366][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.162379][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 637.135569][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 637.171279][ T1302] dvmrp1 (unregistering): left allmulticast mode [ 638.181462][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.261578][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.283597][ T1302] bond0 (unregistering): Released all slaves [ 638.299055][ T1302] bond1 (unregistering): Released all slaves [ 638.315773][ T1302] bond2 (unregistering): Released all slaves [ 638.394233][T13102] bridge_slave_1: left allmulticast mode [ 638.394265][T13102] bridge_slave_1: left promiscuous mode [ 638.395107][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.518079][T13102] bridge_slave_0: left allmulticast mode [ 638.518118][T13102] bridge_slave_0: left promiscuous mode [ 638.518354][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.081511][ T1302] tipc: Left network mode [ 639.203024][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 639.262659][T13125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2367'. [ 639.866447][T13116] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 641.226670][T13161] syzkaller0: entered promiscuous mode [ 641.226701][T13161] syzkaller0: entered allmulticast mode [ 641.395689][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 642.442013][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2384'. [ 642.646986][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2389'. [ 642.780021][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 642.941408][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2392'. [ 642.941468][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2392'. [ 643.161948][ T1302] hsr_slave_0: left promiscuous mode [ 643.205151][ T1302] hsr_slave_1: left promiscuous mode [ 643.206163][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.206326][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.268184][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.268223][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.676914][T13249] hugetlbfs: Unknown parameter 'fsmagic' [ 644.824583][ T1302] veth1_macvtap: left promiscuous mode [ 644.824698][ T1302] veth0_macvtap: left promiscuous mode [ 644.824982][ T1302] veth1_vlan: left promiscuous mode [ 644.825181][ T1302] veth0_vlan: left promiscuous mode [ 647.821332][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 648.021495][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 650.513149][T13230] gretap0: entered promiscuous mode [ 650.540797][T13230] gretap0: left promiscuous mode [ 650.694623][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.714809][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.730887][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.751896][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.752718][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.136782][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 652.820848][T11762] Bluetooth: hci0: command tx timeout [ 653.008112][T13322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2414'. [ 653.320599][ T5801] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 653.344428][T13258] chnl_net:caif_netlink_parms(): no params data found [ 653.480627][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 653.483349][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 653.483382][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.486501][ T5801] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 653.486530][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.486552][ T5801] usb 3-1: Product: syz [ 653.486568][ T5801] usb 3-1: Manufacturer: syz [ 653.486583][ T5801] usb 3-1: SerialNumber: syz [ 653.555161][ T5801] usb 3-1: config 0 descriptor?? [ 653.572624][ T5801] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 653.572659][ T5801] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 654.217009][ T5801] em28xx 3-1:0.0: unknown em28xx chip ID (180) [ 654.416952][ T5801] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 654.417408][ T5801] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 654.417426][ T5801] em28xx 3-1:0.0: No AC97 audio processor [ 654.476161][ T5801] usb 3-1: USB disconnect, device number 7 [ 654.478640][ T5801] em28xx 3-1:0.0: Disconnecting em28xx [ 654.492184][ T5801] em28xx 3-1:0.0: Freeing device [ 654.890922][ T5799] Bluetooth: hci0: command tx timeout [ 655.056512][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.056633][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.056832][T13258] bridge_slave_0: entered allmulticast mode [ 655.065707][T13258] bridge_slave_0: entered promiscuous mode [ 655.084640][T13258] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.084796][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.085054][T13258] bridge_slave_1: entered allmulticast mode [ 655.103427][ T1302] IPVS: stop unused estimator thread 0... [ 655.108131][T13258] bridge_slave_1: entered promiscuous mode [ 655.193044][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 655.467403][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.503066][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.863436][T13373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.888901][T13373] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.952238][T13373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.182089][T13258] team0: Port device team_slave_0 added [ 656.206617][T13388] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.260095][T13258] team0: Port device team_slave_1 added [ 656.683409][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 656.878370][T13388] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.926375][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.926394][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.926422][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.970704][ T5799] Bluetooth: hci0: command tx timeout [ 656.993329][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.993348][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.993380][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.102801][T13388] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.385631][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2441'. [ 657.456712][T13388] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.874749][T13425] team0: Port device team_slave_1 removed [ 658.039318][T13258] hsr_slave_0: entered promiscuous mode [ 658.047029][T13258] hsr_slave_1: entered promiscuous mode [ 658.048186][T13258] debugfs: 'hsr0' already exists in 'hsr' [ 658.048214][T13258] Cannot create hsr debugfs directory [ 658.397498][ T5985] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.434477][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 658.471377][ T1302] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.525301][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2452'. [ 658.581489][T13442] netlink: 'syz.1.2451': attribute type 6 has an invalid length. [ 658.586475][ T5986] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.650129][T13444] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.705813][ T1302] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.050960][ T5799] Bluetooth: hci0: command tx timeout [ 659.301936][T13258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.693195][T13258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 661.021557][T13258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 661.083303][T13258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 661.411968][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.444143][T13513] tipc: Enabled bearer , priority 0 [ 661.448536][T13513] syzkaller0: entered promiscuous mode [ 661.448563][T13513] syzkaller0: entered allmulticast mode [ 661.580974][T13514] tipc: Resetting bearer [ 661.630921][T13512] tipc: Resetting bearer [ 661.731682][T13512] tipc: Disabling bearer [ 661.873309][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.909691][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.909949][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.968965][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.969118][ T3941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.096473][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.003557][T13258] veth0_vlan: entered promiscuous mode [ 664.038980][T13258] veth1_vlan: entered promiscuous mode [ 664.151693][T13258] veth0_macvtap: entered promiscuous mode [ 664.181845][T13258] veth1_macvtap: entered promiscuous mode [ 664.343378][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.362576][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.396946][ T1302] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.407953][ T1302] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.412510][ T1302] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.412774][ T1302] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.993120][T13587] hugetlbfs: Unknown parameter 'fsmagic' [ 667.183661][T13586] team0: Port device team_slave_1 removed [ 667.552046][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.552068][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.719760][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 667.832162][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.832184][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.152238][T13640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2500'. [ 669.751071][T13640] hugetlbfs: Unknown parameter 'fsmagic' [ 671.841682][T13683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.515857][T13724] tc_dump_action: action bad kind [ 674.169246][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2534'. [ 674.171232][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2534'. [ 675.670222][T13783] tipc: Started in network mode [ 675.670256][T13783] tipc: Node identity 0800000000000000faffffffffffffff, cluster identity 4711 [ 676.350080][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 676.400941][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 676.553938][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 676.813269][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2553'. [ 676.853611][T13818] vlan1: entered promiscuous mode [ 676.853635][T13818] batadv0: entered promiscuous mode [ 677.217649][T13822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.557869][T13835] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 677.594398][T13835] bond2 (unregistering): Released all slaves [ 677.665311][T13845] Bluetooth: MGMT ver 1.23 [ 678.671613][T13843] tc_dump_action: action bad kind [ 678.846834][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.849113][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.140676][T13850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.690570][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 679.694427][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 681.338145][T13893] hugetlbfs: Unknown parameter 'fsmagic' [ 684.892443][T11762] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 685.810597][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 685.984546][T13952] hugetlbfs: Unknown parameter 'fsmagic' [ 687.073255][T13969] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.266293][T13969] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.087966][T13969] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.100802][T13987] hugetlbfs: Unknown parameter 'fsmagic' [ 690.304672][T13969] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.836049][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2611'. [ 691.065662][ T1321] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 691.066421][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.340857][ T1302] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.454640][ T5996] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.589627][ T5986] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.771682][ T5996] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.580821][T14026] hugetlbfs: Unknown parameter 'fsmagic' [ 693.796874][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2620'. [ 693.796912][T14028] netlink: 'syz.7.2620': attribute type 12 has an invalid length. [ 693.855995][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2620'. [ 693.856040][T14030] netlink: 'syz.7.2620': attribute type 12 has an invalid length. [ 693.857907][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2620'. [ 693.857936][T14028] netlink: 'syz.7.2620': attribute type 12 has an invalid length. [ 693.858006][ T58] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.858433][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2620'. [ 693.858455][T14030] netlink: 'syz.7.2620': attribute type 12 has an invalid length. [ 693.871498][ T58] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.871552][ T58] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.871591][ T58] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.717604][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 695.384479][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 695.407519][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 695.408832][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 695.410310][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 695.411787][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.461217][ T5799] Bluetooth: hci1: command tx timeout [ 699.530750][ T5799] Bluetooth: hci1: command tx timeout [ 701.610686][ T5799] Bluetooth: hci1: command tx timeout [ 703.454950][T14040] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.827367][ T5799] Bluetooth: hci1: command tx timeout [ 703.841740][T14040] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.839761][T14065] dvmrp1: left allmulticast mode [ 705.003519][T14071] hugetlbfs: Unknown parameter 'fsmagic' [ 705.692926][T14040] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.890345][T14040] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.171456][T14081] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 706.171481][T14081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2635'. [ 706.313060][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2638'. [ 706.313097][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2638'. [ 706.457236][ T1279] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.544556][ T5986] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.664232][ T9538] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.786889][ T9538] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.333763][T14110] hugetlbfs: Unknown parameter 'fsmagic' [ 708.887864][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 708.944420][T14049] chnl_net:caif_netlink_parms(): no params data found [ 710.112867][T14145] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2656'. [ 710.227400][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.227579][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.227825][T14049] bridge_slave_0: entered allmulticast mode [ 710.238626][T14049] bridge_slave_0: entered promiscuous mode [ 710.342987][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.343127][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.343404][T14049] bridge_slave_1: entered allmulticast mode [ 710.346366][T14049] bridge_slave_1: entered promiscuous mode [ 710.739332][T14049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.819547][T14049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.091839][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2664'. [ 711.174921][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2664'. [ 711.209706][T14049] team0: Port device team_slave_0 added [ 711.224193][T14049] team0: Port device team_slave_1 added [ 711.393089][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2664'. [ 711.485951][T14049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.485968][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.485998][T14049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.589171][T14049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.589190][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.589221][T14049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.013541][T14049] hsr_slave_0: entered promiscuous mode [ 712.015048][T14049] hsr_slave_1: entered promiscuous mode [ 712.016055][T14049] debugfs: 'hsr0' already exists in 'hsr' [ 712.016080][T14049] Cannot create hsr debugfs directory [ 712.049015][T14188] netlink: 264 bytes leftover after parsing attributes in process `syz.7.2668'. [ 712.355322][T14191] syzkaller1: entered promiscuous mode [ 712.355348][T14191] syzkaller1: entered allmulticast mode [ 712.576056][T14201] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.576392][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2677'. [ 712.667229][T14208] : entered promiscuous mode [ 712.767363][T14201] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.013136][T14201] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.155840][T14219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 713.413709][T14201] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.743428][T14225] syzkaller0: entered promiscuous mode [ 713.743455][T14225] syzkaller0: entered allmulticast mode [ 713.962326][ T1279] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.414828][ T5985] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.455099][ T1302] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.491800][ T5985] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.495625][T14049] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 714.538534][T14049] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 714.606719][T14049] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 714.707925][T14049] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 715.226611][T14049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.696167][T14049] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.726606][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.726918][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.759397][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.759539][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.645557][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2710'. [ 716.645580][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'. [ 716.674895][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.697477][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'. [ 716.735555][T14306] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 716.735577][T14306] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2709'. [ 717.118437][T14320] syz_tun: left allmulticast mode [ 717.118584][T14320] dvmrp1: left allmulticast mode [ 718.172378][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2719'. [ 718.172417][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2719'. [ 718.379459][T14049] veth0_vlan: entered promiscuous mode [ 718.393857][T14349] tipc: Enabling of bearer rejected, failed to enable media [ 718.422655][T14349] syzkaller0: entered promiscuous mode [ 718.422684][T14349] syzkaller0: entered allmulticast mode [ 718.613095][T14049] veth1_vlan: entered promiscuous mode [ 720.119075][T14363] hugetlbfs: Unknown parameter 'fsmagic' [ 721.470739][T14374] Bluetooth: MGMT ver 1.23 [ 721.818425][T14049] veth0_macvtap: entered promiscuous mode [ 721.828073][T14049] veth1_macvtap: entered promiscuous mode [ 721.888609][T14049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.908931][T14049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.933526][ T1279] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.933809][ T1279] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.933852][ T1279] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.933891][ T1279] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.925839][T14394] hugetlbfs: Unknown parameter 'fsmagic' [ 723.863667][ T9538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.863688][ T9538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.979109][T14408] tipc: Started in network mode [ 723.979141][T14408] tipc: Node identity d2be5000584b, cluster identity 4711 [ 723.979367][T14408] tipc: Enabled bearer , priority 0 [ 724.019205][T14408] syzkaller0: entered promiscuous mode [ 724.019233][T14408] syzkaller0: entered allmulticast mode [ 724.034831][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.034853][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.205786][T14408] tipc: Resetting bearer [ 724.241550][T14407] tipc: Resetting bearer [ 724.395181][T14424] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 724.395212][T14424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2742'. [ 724.493276][T14407] tipc: Disabling bearer [ 724.865820][T14429] tipc: Started in network mode [ 724.865855][T14429] tipc: Node identity 66413269b661, cluster identity 4711 [ 724.866137][T14429] tipc: Enabled bearer , priority 0 [ 724.868647][T14429] syzkaller0: entered promiscuous mode [ 724.868674][T14429] syzkaller0: entered allmulticast mode [ 725.047186][T14441] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2747'. [ 725.063608][T14429] tipc: Resetting bearer [ 725.482061][T14427] tipc: Resetting bearer [ 726.586727][T14450] hugetlbfs: Unknown parameter 'fsmagic' [ 726.615892][ T1709] tipc: Node number set to 3491770985 [ 726.960086][T14454] netlink: 'syz.6.2750': attribute type 13 has an invalid length. [ 727.045863][T14427] tipc: Disabling bearer [ 727.593524][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.595138][T14454] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.045095][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.061073][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.909504][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2761'. [ 728.909531][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2761'. [ 728.957861][ T5986] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.116244][T14465] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.154826][ T5986] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.266477][T14485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.266998][ T5986] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.267358][ T5986] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.297050][T14465] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.488956][T14465] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.534913][T14496] netlink: 'syz.6.2767': attribute type 1 has an invalid length. [ 729.576811][T14496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 729.624559][T14496] bond2: (slave geneve2): making interface the new active one [ 729.626262][T14496] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 729.628995][ T58] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.705226][T14465] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.762341][ T58] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.767670][ T58] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.768447][ T58] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.809040][T14501] tc_dump_action: action bad kind [ 730.010174][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.186266][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2770'. [ 730.208744][T14501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2769'. [ 730.234091][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.478439][ T58] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.594758][ T9538] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.890556][T11762] Bluetooth: hci2: command 0x0406 tx timeout [ 730.890556][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 731.404474][T14527] syzkaller0: entered promiscuous mode [ 731.404502][T14527] syzkaller0: entered allmulticast mode [ 732.239475][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2783'. [ 733.186654][T14561] tc_dump_action: action bad kind [ 733.317666][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2791'. [ 733.317682][T14567] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 733.317699][T14567] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2792'. [ 733.940107][T14579] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 734.375708][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2800'. [ 734.375741][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 734.416868][T14589] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 734.459402][T14589] bond3 (unregistering): Released all slaves [ 734.981741][T14608] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2806'. [ 735.311210][T14616] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2810'. [ 735.658872][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2815'. [ 735.854188][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2816'. [ 735.854226][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2816'. [ 735.971352][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2817'. [ 735.971383][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2817'. [ 736.267073][T14633] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 736.327375][T14633] bond1 (unregistering): Released all slaves [ 736.689104][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2822'. [ 736.794120][T14644] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 736.840598][T14644] bond3 (unregistering): Released all slaves [ 737.745067][T14665] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2830'. [ 737.807059][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2830'. [ 739.437894][T14691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2841'. [ 739.515199][T14695] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€Ôxµ…üô–)%ë ]ÓÙ.˜>„n÷6‡# [ 740.607703][T14731] __nla_validate_parse: 2 callbacks suppressed [ 740.607723][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 741.261478][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2855'. [ 742.446909][T14768] netlink: 'syz.7.2867': attribute type 13 has an invalid length. [ 742.762959][T11762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.800274][T11762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.808691][T11762] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.820379][T11762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.821361][T11762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.004842][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2863'. [ 743.276797][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.278292][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.034563][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.060187][T14768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.380964][T14794] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2873'. [ 744.890772][T11762] Bluetooth: hci4: command tx timeout [ 744.947508][T14770] tc_dump_action: action bad kind [ 745.033919][T14796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2874'. [ 745.192936][ T12] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.192972][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.232115][ T12] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.232153][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.252591][ T12] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.252637][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.269491][ T12] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.269527][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.283931][T14798] tipc: Enabled bearer , priority 0 [ 745.314073][T14798] syzkaller0: entered promiscuous mode [ 745.314100][T14798] syzkaller0: entered allmulticast mode [ 745.411516][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2876'. [ 745.461783][T14798] tipc: Resetting bearer [ 745.540858][T14797] tipc: Resetting bearer [ 745.836358][T14797] tipc: Disabling bearer [ 746.341264][T11762] Bluetooth: hci2: command 0x0406 tx timeout [ 746.341592][ T5799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 746.970725][ T5799] Bluetooth: hci4: command tx timeout [ 748.718114][T14777] chnl_net:caif_netlink_parms(): no params data found [ 749.051056][ T5799] Bluetooth: hci4: command tx timeout [ 749.209192][T14876] netlink: 'syz.7.2894': attribute type 13 has an invalid length. [ 749.691490][T14880] tc_dump_action: action bad kind [ 749.870510][ T1244] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 749.872898][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.873039][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.873301][T14777] bridge_slave_0: entered allmulticast mode [ 749.919914][T14777] bridge_slave_0: entered promiscuous mode [ 749.942858][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.943005][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.943208][T14777] bridge_slave_1: entered allmulticast mode [ 749.969188][T14777] bridge_slave_1: entered promiscuous mode [ 750.071407][ T1244] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.071442][ T1244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.071469][ T1244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 750.071517][ T1244] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.071562][ T1244] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.071586][ T1244] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.206736][ T1244] usb 8-1: config 0 descriptor?? [ 750.577572][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.694710][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.842810][ T1244] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 751.130610][ T5799] Bluetooth: hci4: command tx timeout [ 751.169936][T14060] udevd[14060]: 'fido_id' [14915] terminated by signal 33 (Unknown signal 33) [ 751.248140][T14777] team0: Port device team_slave_0 added [ 751.257592][T14777] team0: Port device team_slave_1 added [ 751.571836][T14922] netlink: 'syz.3.2905': attribute type 13 has an invalid length. [ 752.257766][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.257786][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.257815][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.266082][T14928] tc_dump_action: action bad kind [ 752.311044][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.312330][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.312345][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.312376][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.342145][ T5996] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.345088][ T5996] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.345164][ T5996] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.497045][ T1321] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 752.497854][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.735614][T14943] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2911'. [ 752.863340][ T5801] usb 8-1: USB disconnect, device number 2 [ 753.082169][T14777] hsr_slave_0: entered promiscuous mode [ 753.085625][T14777] hsr_slave_1: entered promiscuous mode [ 753.087558][T14777] debugfs: 'hsr0' already exists in 'hsr' [ 753.087584][T14777] Cannot create hsr debugfs directory [ 754.293147][T14976] netlink: 'syz.7.2918': attribute type 1 has an invalid length. [ 754.293169][T14976] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2918'. [ 755.033864][T14981] netlink: 'syz.6.2919': attribute type 13 has an invalid length. [ 755.300568][ T1244] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 756.075065][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 756.075098][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 756.111302][ T1244] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.111335][ T1244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.111356][ T1244] usb 4-1: Product: syz [ 756.111371][ T1244] usb 4-1: Manufacturer: syz [ 756.111387][ T1244] usb 4-1: SerialNumber: syz [ 756.118750][ T1244] usb 4-1: config 0 descriptor?? [ 756.170680][ T5985] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.203913][ T1244] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 756.522760][ T5985] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.949081][ T1244] usb 4-1: USB disconnect, device number 6 [ 757.069093][T14078] udevd[14078]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.271657][ T5985] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.271930][ T5985] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.366725][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2926'. [ 757.366761][T15009] netlink: 'syz.8.2926': attribute type 12 has an invalid length. [ 757.426273][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2926'. [ 757.517016][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2926'. [ 757.519432][ T5996] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.519493][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2926'. [ 757.523113][ T5996] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.523883][ T5996] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.523946][ T5996] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.730565][ T1709] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 757.900501][ T1709] usb 7-1: Using ep0 maxpacket: 16 [ 757.903982][ T1709] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 757.904016][ T1709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 757.913741][ T1709] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 757.913774][ T1709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.913796][ T1709] usb 7-1: Product: syz [ 757.913812][ T1709] usb 7-1: Manufacturer: syz [ 757.913828][ T1709] usb 7-1: SerialNumber: syz [ 757.974737][ T1709] usb 7-1: config 0 descriptor?? [ 758.020912][ T1709] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 758.020950][ T1709] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 759.592451][ T1709] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 759.685835][ T1709] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 759.688302][ T1709] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 759.688322][ T1709] em28xx 7-1:0.0: No AC97 audio processor [ 759.693182][ T5799] Bluetooth: hci5: command 0x0406 tx timeout [ 759.760856][T15033] netlink: 'syz.7.2934': attribute type 13 has an invalid length. [ 759.785529][ T1709] usb 7-1: USB disconnect, device number 7 [ 759.909767][ T1709] em28xx 7-1:0.0: Disconnecting em28xx [ 759.937548][ T1709] em28xx 7-1:0.0: Freeing device [ 761.099612][T14777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 761.384213][T14777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.561523][T15043] tipc: Enabling of bearer rejected, failed to enable media [ 761.580251][T14777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.656769][T14777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 763.883360][T15103] tc_dump_action: action bad kind [ 763.918402][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.073572][ T5801] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 764.220602][ T5801] usb 7-1: Using ep0 maxpacket: 16 [ 764.225114][ T5801] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 764.225148][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 764.228845][ T5801] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 764.228872][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.228892][ T5801] usb 7-1: Product: syz [ 764.228907][ T5801] usb 7-1: Manufacturer: syz [ 764.228921][ T5801] usb 7-1: SerialNumber: syz [ 764.319164][ T5801] usb 7-1: config 0 descriptor?? [ 764.350567][ T5801] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 764.350599][ T5801] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 764.381362][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.418401][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.422814][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.485140][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.498768][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.666681][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2948'. [ 764.726488][T15104] hsr_slave_0: left promiscuous mode [ 764.775961][T15104] hsr_slave_1: left promiscuous mode [ 765.054045][ T5801] em28xx 7-1:0.0: unknown em28xx chip ID (180) [ 765.261740][ T5801] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 765.262190][ T5801] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 765.262208][ T5801] em28xx 7-1:0.0: No AC97 audio processor [ 765.318967][ T5801] usb 7-1: USB disconnect, device number 8 [ 765.351075][ T5801] em28xx 7-1:0.0: Disconnecting em28xx [ 765.353103][ T5801] em28xx 7-1:0.0: Freeing device [ 765.506090][T15133] tipc: Enabled bearer , priority 0 [ 765.745038][T15134] tipc: Resetting bearer [ 766.870613][T15135] hugetlbfs: Unknown parameter 'fsmagic' [ 767.642064][T15145] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2955'. [ 767.774227][T15131] tipc: Disabling bearer [ 768.481754][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2962'. [ 768.661733][T15161] tipc: Enabled bearer , priority 0 [ 768.662158][T15167] tc_dump_action: action bad kind [ 768.664251][T15176] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2966'. [ 768.765056][T15163] syzkaller0: entered promiscuous mode [ 768.765083][T15163] syzkaller0: entered allmulticast mode [ 768.873050][T15161] tipc: Resetting bearer [ 768.950931][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'. [ 768.955193][T15159] tipc: Resetting bearer [ 769.065669][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2969'. [ 769.135533][T15159] tipc: Disabling bearer [ 769.508706][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.619781][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2974'. [ 769.664512][T15197] tipc: Enabling of bearer rejected, failed to enable media [ 770.192588][T14777] veth0_vlan: entered promiscuous mode [ 770.288503][T14777] veth1_vlan: entered promiscuous mode [ 772.059873][T15227] hugetlbfs: Unknown parameter 'fsmagic' [ 772.587860][T14777] veth0_macvtap: entered promiscuous mode [ 772.628457][T14777] veth1_macvtap: entered promiscuous mode [ 772.761388][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 775.054953][T11762] Bluetooth: hci0: command 0x0406 tx timeout [ 775.230359][ T5799] Bluetooth: min 0 < 6 [ 776.621228][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.681427][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.703357][ T5985] bond0 (unregistering): Released all slaves [ 776.718160][ T5985] bond1 (unregistering): Released all slaves [ 776.765631][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.767448][T15251] tipc: Enabling of bearer rejected, failed to enable media [ 776.768212][T15257] tc_dump_action: action bad kind [ 776.932835][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.981766][ T5985] tipc: Left network mode [ 776.981820][ T5996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.044962][ T5996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.047367][ T5996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.057015][ T5996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.309367][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 777.959293][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2997'. [ 778.217659][T15310] tipc: Enabling of bearer rejected, failed to enable media [ 778.815266][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3004'. [ 779.706780][T15334] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3007'. [ 779.833672][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.833695][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.230635][T15351] capability: warning: `syz.8.3012' uses deprecated v2 capabilities in a way that may be insecure [ 780.324822][ T5985] hsr_slave_0: left promiscuous mode [ 780.373088][ T5985] hsr_slave_1: left promiscuous mode [ 780.374127][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.431948][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.348062][T15372] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3017'. [ 783.712799][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 785.986411][T15354] netlink: 'syz.6.3011': attribute type 1 has an invalid length. [ 785.986435][T15354] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3011'. [ 786.196914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.196937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.633862][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3025'. [ 787.221155][ T5985] IPVS: stop unused estimator thread 0... [ 787.794199][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3030'. [ 788.768920][T15435] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3031'. [ 788.799313][ T1244] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 788.950510][ T1244] usb 3-1: Using ep0 maxpacket: 16 [ 788.953104][ T1244] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 788.953131][ T1244] usb 3-1: config 0 has no interface number 0 [ 788.953181][ T1244] usb 3-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 788.953207][ T1244] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 788.953235][ T1244] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 788.958966][ T1244] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 788.958995][ T1244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.959018][ T1244] usb 3-1: Product: syz [ 788.959033][ T1244] usb 3-1: Manufacturer: syz [ 788.959048][ T1244] usb 3-1: SerialNumber: syz [ 789.055122][ T1244] usb 3-1: config 0 descriptor?? [ 789.165708][T15437] netlink: 'syz.6.3032': attribute type 13 has an invalid length. [ 789.353496][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 789.376961][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 789.378335][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.379998][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.402008][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.667947][T15429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3029'. [ 790.067177][T15451] tc_dump_action: action bad kind [ 790.477780][ T1709] usb 3-1: USB disconnect, device number 8 [ 791.450914][ T5799] Bluetooth: hci3: command tx timeout [ 792.072165][T15488] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3042'. [ 792.494864][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3044'. [ 792.606038][T15443] chnl_net:caif_netlink_parms(): no params data found [ 792.770645][T15506] tc_dump_action: action bad kind [ 793.337529][T15526] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3052'. [ 793.543700][ T5799] Bluetooth: hci3: command tx timeout [ 793.821182][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 793.976246][ T31] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.976294][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 793.976321][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 793.976344][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.976389][ T31] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.976412][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.993159][ T31] usb 8-1: config 0 descriptor?? [ 794.136099][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.137901][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.144216][T15443] bridge_slave_0: entered allmulticast mode [ 794.187532][T15443] bridge_slave_0: entered promiscuous mode [ 794.215017][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.215206][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.217822][T15443] bridge_slave_1: entered allmulticast mode [ 794.217892][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3056'. [ 794.253881][T15443] bridge_slave_1: entered promiscuous mode [ 794.508651][ T31] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 795.610684][ T5799] Bluetooth: hci3: command tx timeout [ 795.930639][ T1244] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 796.018270][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.045859][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.144456][T15572] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3064'. [ 796.185286][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'. [ 797.564252][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'. [ 797.746382][ T5799] Bluetooth: hci3: command tx timeout [ 797.781821][ T6057] usb 8-1: USB disconnect, device number 3 [ 797.883154][T15582] macvtap1: entered promiscuous mode [ 797.883381][T15582] macvtap1: entered allmulticast mode [ 797.883397][T15582] batadv0: entered allmulticast mode [ 797.887811][T15582] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 797.899320][T15443] team0: Port device team_slave_0 added [ 797.916771][T15592] tc_dump_action: action bad kind [ 797.942240][T15443] team0: Port device team_slave_1 added [ 798.758602][T15620] overlayfs: failed to clone upperpath [ 798.785383][T15620] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3077'. [ 798.921993][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.922013][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.922044][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.011377][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.011396][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.011427][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.098598][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3082'. [ 800.267634][T15642] macvtap1: entered promiscuous mode [ 800.267657][T15642] batadv0: entered promiscuous mode [ 800.267879][T15642] macvtap1: entered allmulticast mode [ 800.267894][T15642] batadv0: entered allmulticast mode [ 800.275585][T15642] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 800.412399][T15652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3085'. [ 800.611425][T15659] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3089'. [ 801.014566][T11302] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 801.570530][T11302] usb 8-1: Using ep0 maxpacket: 16 [ 801.579183][T11302] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 801.579216][T11302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 801.614816][T11302] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 801.614848][T11302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.614870][T11302] usb 8-1: Product: syz [ 801.614885][T11302] usb 8-1: Manufacturer: syz [ 801.614900][T11302] usb 8-1: SerialNumber: syz [ 801.675100][T11302] usb 8-1: config 0 descriptor?? [ 801.721249][T11302] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 801.721291][T11302] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 801.756075][T15669] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3090'. [ 802.254260][T15679] tc_dump_action: action bad kind [ 802.267845][T15443] hsr_slave_0: entered promiscuous mode [ 802.269398][T15443] hsr_slave_1: entered promiscuous mode [ 802.271318][T15443] debugfs: 'hsr0' already exists in 'hsr' [ 802.271347][T15443] Cannot create hsr debugfs directory [ 802.307798][T11302] em28xx 8-1:0.0: unknown em28xx chip ID (180) [ 802.485005][ T5985] bridge_slave_1: left allmulticast mode [ 802.485034][ T5985] bridge_slave_1: left promiscuous mode [ 802.488201][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.514019][T11302] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 802.514473][T11302] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 802.514491][T11302] em28xx 8-1:0.0: No AC97 audio processor [ 802.580621][T11302] usb 8-1: USB disconnect, device number 4 [ 802.583125][T11302] em28xx 8-1:0.0: Disconnecting em28xx [ 802.603076][T11302] em28xx 8-1:0.0: Freeing device [ 802.687542][ T5985] bridge_slave_0: left allmulticast mode [ 802.687572][ T5985] bridge_slave_0: left promiscuous mode [ 802.687838][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.360600][T15694] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3097'. [ 805.173100][T15706] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3102'. [ 806.621340][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.701549][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.741921][ T5985] bond0 (unregistering): Released all slaves [ 806.770682][ T5985] bond1 (unregistering): Released all slaves [ 806.801956][ T5985] bond2 (unregistering): Released all slaves [ 809.384188][ T5985] tipc: Left network mode [ 809.859967][T15734] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3111'. [ 809.980112][T15736] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3112'. [ 810.455953][T15743] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3114'. [ 811.706099][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 811.759137][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3118'. [ 811.759161][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3118'. [ 811.759188][T15757] netlink: 'syz.7.3118': attribute type 12 has an invalid length. [ 811.971888][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3118'. [ 811.971912][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3118'. [ 811.971940][T15757] netlink: 'syz.7.3118': attribute type 12 has an invalid length. [ 812.781710][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 813.980560][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 813.983223][ T31] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 813.983250][ T31] usb 3-1: config 0 has no interface number 0 [ 813.983300][ T31] usb 3-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 813.983328][ T31] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 813.983358][ T31] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 813.987044][ T31] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 813.987091][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.987113][ T31] usb 3-1: Product: syz [ 813.987128][ T31] usb 3-1: Manufacturer: syz [ 813.987144][ T31] usb 3-1: SerialNumber: syz [ 814.021500][ T1321] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 814.022127][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.222823][ T31] usb 3-1: config 0 descriptor?? [ 815.204293][ T5985] hsr_slave_0: left promiscuous mode [ 815.236666][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3123'. [ 815.252026][ T5985] hsr_slave_1: left promiscuous mode [ 815.253019][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.303437][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.672938][ T991] usb 3-1: USB disconnect, device number 9 [ 815.984925][T15790] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3124'. [ 817.971298][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 818.271271][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 820.984002][T15799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.989150][T15799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.013180][T15799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.045961][T15799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.048339][T15799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 821.131794][T15799] Bluetooth: hci1: command 0x0406 tx timeout [ 821.479331][T15807] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3128'. [ 821.888490][T15825] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3132'. [ 822.081281][T15819] syzkaller0: entered promiscuous mode [ 822.081308][T15819] syzkaller0: entered allmulticast mode [ 822.456733][T15833] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3134'. [ 822.906631][T15841] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3137'. [ 822.932352][ T5985] IPVS: stop unused estimator thread 0... [ 823.130540][ T5799] Bluetooth: hci2: command tx timeout [ 823.208184][T15845] netlink: 'syz.7.3139': attribute type 13 has an invalid length. [ 823.232770][T15845] batadv0: left allmulticast mode [ 823.232798][T15845] batadv0: left promiscuous mode [ 823.237530][T15848] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3140'. [ 823.355471][T15850] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3141'. [ 823.466108][T15852] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3143'. [ 823.662459][T15857] netlink: 'syz.7.3142': attribute type 1 has an invalid length. [ 823.662483][T15857] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3142'. [ 823.931316][T15443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 825.110016][T15443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 825.210672][ T5799] Bluetooth: hci2: command tx timeout [ 825.268996][T15443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 825.516869][T15443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 825.535844][T15878] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3149'. [ 825.736853][T15884] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3151'. [ 827.258188][T15797] chnl_net:caif_netlink_parms(): no params data found [ 827.409521][ T5799] Bluetooth: hci2: command tx timeout [ 827.668496][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 829.453125][ T5799] Bluetooth: hci2: command tx timeout [ 829.478635][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.478786][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.479012][T15797] bridge_slave_0: entered allmulticast mode [ 829.514086][T15797] bridge_slave_0: entered promiscuous mode [ 829.552028][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.552272][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.552552][T15797] bridge_slave_1: entered allmulticast mode [ 829.599075][T15797] bridge_slave_1: entered promiscuous mode [ 830.640837][T15951] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3164'. [ 830.834665][ T5985] bridge_slave_1: left allmulticast mode [ 830.834695][ T5985] bridge_slave_1: left promiscuous mode [ 830.835357][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.125656][ T5985] bridge_slave_0: left allmulticast mode [ 832.125687][ T5985] bridge_slave_0: left promiscuous mode [ 832.126402][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.342580][ T5985] bond2 (unregistering): (slave geneve2): Releasing active interface [ 835.421274][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.512275][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.531558][ T5985] bond0 (unregistering): Released all slaves [ 836.293573][ T5985] bond1 (unregistering): Released all slaves [ 837.044839][ T5985] bond2 (unregistering): Released all slaves [ 837.204122][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.227240][T15982] tc_dump_action: action bad kind [ 837.254301][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.672284][T15996] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3171'. [ 839.042470][ T5985] tipc: Left network mode [ 839.105431][T16011] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3174'. [ 839.203829][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3175'. [ 839.264591][ T1244] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 839.287352][T15797] team0: Port device team_slave_0 added [ 839.410553][ T1244] usb 8-1: Using ep0 maxpacket: 16 [ 839.414137][ T1244] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 839.414169][ T1244] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 839.419553][ T1244] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 839.419582][ T1244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.419602][ T1244] usb 8-1: Product: syz [ 839.419617][ T1244] usb 8-1: Manufacturer: syz [ 839.419632][ T1244] usb 8-1: SerialNumber: syz [ 839.502343][ T1244] usb 8-1: config 0 descriptor?? [ 839.526129][ T1244] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 839.526164][ T1244] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 839.622792][T15797] team0: Port device team_slave_1 added [ 839.626456][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3176'. [ 839.626482][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3176'. [ 839.626509][T16019] netlink: 'syz.8.3176': attribute type 12 has an invalid length. [ 839.869941][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 839.896383][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3176'. [ 839.896407][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3176'. [ 839.896433][T16019] netlink: 'syz.8.3176': attribute type 12 has an invalid length. [ 840.521390][ T1244] em28xx 8-1:0.0: unknown em28xx chip ID (180) [ 840.712834][ T1244] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 840.719287][ T1244] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 840.719308][ T1244] em28xx 8-1:0.0: No AC97 audio processor [ 840.756131][ T1244] usb 8-1: USB disconnect, device number 5 [ 840.758608][ T1244] em28xx 8-1:0.0: Disconnecting em28xx [ 840.763984][ T1244] em28xx 8-1:0.0: Freeing device [ 840.948861][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.948877][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.948901][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.001323][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.001344][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.001380][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.088505][T15443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.089293][T16037] tc_dump_action: action bad kind [ 841.484168][ T5985] hsr_slave_0: left promiscuous mode [ 841.533760][ T5985] hsr_slave_1: left promiscuous mode [ 841.534773][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.869922][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.761707][ T5985] batadv0: left allmulticast mode [ 843.159733][T16063] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3182'. [ 843.893473][T16064] hugetlbfs: Unknown parameter 'fsmagic' [ 844.084890][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 844.762201][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 844.762233][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 845.044636][ T5885] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 845.044659][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.044674][ T5885] usb 3-1: Product: syz [ 845.044685][ T5885] usb 3-1: Manufacturer: syz [ 845.044695][ T5885] usb 3-1: SerialNumber: syz [ 845.055073][ T5885] usb 3-1: config 0 descriptor?? [ 845.164116][ T5885] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 845.568377][ T1709] usb 3-1: USB disconnect, device number 10 [ 846.153651][T16071] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3184'. [ 846.581344][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 846.821128][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 847.880234][T15799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.901641][T15799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.902971][T15799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.904992][T15799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.905909][T15799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 849.751186][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3187'. [ 849.751212][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3187'. [ 849.751239][T16081] netlink: 'syz.8.3187': attribute type 12 has an invalid length. [ 849.784422][T15797] hsr_slave_0: entered promiscuous mode [ 849.789354][T15797] hsr_slave_1: entered promiscuous mode [ 849.821365][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3187'. [ 849.821400][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3187'. [ 849.821426][T16081] netlink: 'syz.8.3187': attribute type 12 has an invalid length. [ 850.014065][T15799] Bluetooth: hci5: command tx timeout [ 851.685006][T16117] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3193'. [ 852.093108][T15799] Bluetooth: hci5: command tx timeout [ 853.242215][ T5985] IPVS: stop unused estimator thread 0... [ 853.515999][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3197'. [ 853.516034][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3197'. [ 853.516061][T16131] netlink: 'syz.7.3197': attribute type 12 has an invalid length. [ 853.563226][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3197'. [ 853.563248][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3197'. [ 853.563273][T16131] netlink: 'syz.7.3197': attribute type 12 has an invalid length. [ 854.308050][T15799] Bluetooth: hci5: command tx timeout [ 854.509913][T16139] tc_dump_action: action bad kind [ 855.213492][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3201'. [ 856.717547][T15799] Bluetooth: hci5: command tx timeout [ 858.028983][T16167] tc_dump_action: action bad kind [ 859.665233][T16185] tc_dump_action: action bad kind [ 861.302570][T16208] hugetlbfs: Unknown parameter 'fsmagic' [ 861.635901][T16076] chnl_net:caif_netlink_parms(): no params data found [ 861.670194][T15797] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 861.674406][T16210] netlink: 'syz.8.3211': attribute type 13 has an invalid length. [ 862.742016][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.743174][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.258881][T16210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.271857][T16210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.390896][T15797] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 864.456505][ T3475] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.456532][ T3475] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.473410][T15797] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 864.614910][T16227] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3216'. [ 864.820611][ T3475] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.820649][ T3475] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.821326][T15797] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 864.897943][ T3475] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.897979][ T3475] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.919127][ T3475] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.919162][ T3475] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.145071][T16245] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3219'. [ 866.263476][T16253] hugetlbfs: Unknown parameter 'fsmagic' [ 866.516007][T11302] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 866.660487][T11302] usb 8-1: Using ep0 maxpacket: 16 [ 866.662573][T11302] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 866.662606][T11302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 866.665277][T11302] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 866.665305][T11302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.665326][T11302] usb 8-1: Product: syz [ 866.665342][T11302] usb 8-1: Manufacturer: syz [ 866.665357][T11302] usb 8-1: SerialNumber: syz [ 866.667221][T16257] netlink: 'syz.8.3222': attribute type 13 has an invalid length. [ 866.740216][T11302] usb 8-1: config 0 descriptor?? [ 866.757291][T11302] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 866.757329][T11302] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 866.793546][T16076] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.793670][T16076] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.793911][T16076] bridge_slave_0: entered allmulticast mode [ 866.838854][T16076] bridge_slave_0: entered promiscuous mode [ 867.063922][T16076] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.064147][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.065317][T16076] bridge_slave_1: entered allmulticast mode [ 867.076792][T16076] bridge_slave_1: entered promiscuous mode [ 867.495850][T11302] em28xx 8-1:0.0: unknown em28xx chip ID (180) [ 867.698824][T11302] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 867.699292][T11302] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 867.699310][T11302] em28xx 8-1:0.0: No AC97 audio processor [ 867.736655][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.765138][T11302] usb 8-1: USB disconnect, device number 6 [ 867.797495][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.803287][T11302] em28xx 8-1:0.0: Disconnecting em28xx [ 867.809031][T11302] em28xx 8-1:0.0: Freeing device [ 867.834549][T16265] netlink: 'syz.8.3224': attribute type 13 has an invalid length. [ 867.896424][ T5985] bridge_slave_1: left allmulticast mode [ 867.896448][ T5985] bridge_slave_1: left promiscuous mode [ 867.896625][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.951689][ T5985] bridge_slave_0: left allmulticast mode [ 867.951712][ T5985] bridge_slave_0: left promiscuous mode [ 867.951918][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.487503][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.637999][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.475650][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.521929][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.561896][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.661914][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.723165][ T5985] bond0 (unregistering): Released all slaves [ 870.978341][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.069114][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3229'. [ 871.069248][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3229'. [ 871.074085][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 871.688362][T16076] team0: Port device team_slave_0 added [ 871.707261][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 871.718064][T16076] team0: Port device team_slave_1 added [ 871.727650][ T3475] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.984543][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.994067][T16291] hugetlbfs: Unknown parameter 'fsmagic' [ 873.012581][ T5985] hsr_slave_0: left promiscuous mode [ 873.307670][ T5985] hsr_slave_1: left promiscuous mode [ 873.308609][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.354232][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.503689][T16298] netlink: 'syz.7.3233': attribute type 13 has an invalid length. [ 874.181148][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 874.341424][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 875.041560][ T3475] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.130908][T16306] overlayfs: failed to clone upperpath [ 875.191758][T16306] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3235'. [ 875.377343][ T1321] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.377982][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.419990][ T3475] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.083428][ T3475] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.436770][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.436788][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.436820][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.540269][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.540287][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.540317][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.949792][T16342] netlink: 'syz.7.3244': attribute type 13 has an invalid length. [ 879.512642][T16345] tipc: Started in network mode [ 879.512675][T16345] tipc: Node identity 5258e49fe3bc, cluster identity 4711 [ 879.512885][T16345] tipc: Enabled bearer , priority 0 [ 879.719884][T16347] tipc: Resetting bearer [ 879.729886][T16076] hsr_slave_0: entered promiscuous mode [ 879.732471][T16076] hsr_slave_1: entered promiscuous mode [ 879.736790][T16076] debugfs: 'hsr0' already exists in 'hsr' [ 879.736819][T16076] Cannot create hsr debugfs directory [ 879.748714][T16359] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3247'. [ 879.841681][T16343] tipc: Disabling bearer [ 883.291547][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.294679][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.315182][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.335536][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.354607][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.373882][T16423] netlink: 'syz.8.3256': attribute type 13 has an invalid length. [ 883.751007][ T3475] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.789418][T16434] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3257'. [ 883.800900][T16424] syzkaller0: entered promiscuous mode [ 883.800928][T16424] syzkaller0: entered allmulticast mode [ 883.802770][ T3475] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.843711][ T3475] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.649685][ T3475] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.434367][T15799] Bluetooth: hci3: command tx timeout [ 887.604913][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3263'. [ 888.176672][T16479] netlink: 'syz.8.3266': attribute type 13 has an invalid length. [ 889.480817][T15799] Bluetooth: hci3: command tx timeout [ 889.697366][T16488] syzkaller0: entered promiscuous mode [ 889.697399][T16488] syzkaller0: entered allmulticast mode [ 889.857432][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.697711][T16506] netlink: 'syz.7.3272': attribute type 13 has an invalid length. [ 890.907110][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.076397][T16509] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3271'. [ 891.409861][T16509] hugetlbfs: Unknown parameter 'fsmagic' [ 891.414604][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.643843][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.644688][T15799] Bluetooth: hci3: command tx timeout [ 892.030228][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.463114][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.744437][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.485748][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.700398][T15799] Bluetooth: hci3: command tx timeout [ 894.453444][T16542] syzkaller0: entered promiscuous mode [ 894.453483][T16542] syzkaller0: entered allmulticast mode [ 895.597832][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3281'. [ 895.653712][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3281'. [ 895.682907][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3281'. [ 895.683148][T16415] chnl_net:caif_netlink_parms(): no params data found [ 895.714785][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3281'. [ 895.717434][ T5986] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.069160][T16563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.115722][T16577] netlink: 380 bytes leftover after parsing attributes in process `syz.8.3286'. [ 896.137333][ T5986] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.177359][ T5986] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.192405][ T5986] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.315542][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.435620][T16563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.930660][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 898.416588][T16563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.475956][ T5985] bridge_slave_1: left allmulticast mode [ 898.475986][ T5985] bridge_slave_1: left promiscuous mode [ 898.476259][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.573656][ T5985] bridge_slave_0: left allmulticast mode [ 898.573689][ T5985] bridge_slave_0: left promiscuous mode [ 898.573926][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.884947][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.955375][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.219249][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.320034][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.421020][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.548598][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.615941][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.761130][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.841296][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.903372][ T5985] bond0 (unregistering): Released all slaves [ 900.006991][T16611] tc_dump_action: action bad kind [ 900.013989][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3294'. [ 900.014030][T16617] netlink: 'syz.8.3294': attribute type 12 has an invalid length. [ 900.178524][T16622] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3296'. [ 900.200023][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.382061][T16563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.411760][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3294'. [ 900.411795][T16617] netlink: 'syz.8.3294': attribute type 12 has an invalid length. [ 900.700568][ T5985] hsr_slave_0: left promiscuous mode [ 900.740614][ T5985] hsr_slave_1: left promiscuous mode [ 900.741407][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.794386][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.132004][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.235359][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.366331][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.461346][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 901.552253][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.621347][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 902.261607][T16076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 902.312208][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.313187][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.313385][T16415] bridge_slave_0: entered allmulticast mode [ 902.315196][T16415] bridge_slave_0: entered promiscuous mode [ 902.332601][T16627] tipc: Enabling of bearer rejected, failed to enable media [ 902.350506][T16076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 902.403187][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.403325][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.403557][T16415] bridge_slave_1: entered allmulticast mode [ 902.407728][T16415] bridge_slave_1: entered promiscuous mode [ 902.418228][T16076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 902.644406][T16076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 902.836488][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3303'. [ 902.888904][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3303'. [ 902.929416][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.937214][ T1302] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.983088][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.983157][ T3475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.302100][T10326] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.302549][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3306'. [ 903.302581][T16663] netlink: 'syz.7.3306': attribute type 12 has an invalid length. [ 903.338149][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3306'. [ 903.338184][T16663] netlink: 'syz.7.3306': attribute type 12 has an invalid length. [ 903.400880][T16415] team0: Port device team_slave_0 added [ 904.044297][ T5986] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.083202][T16415] team0: Port device team_slave_1 added [ 906.774370][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.774389][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.774420][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.778931][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.778942][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.778963][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.502094][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3316'. [ 907.980547][T16716] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3319'. [ 908.029154][T16415] hsr_slave_0: entered promiscuous mode [ 908.067187][T16415] hsr_slave_1: entered promiscuous mode [ 909.591911][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.609519][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.619516][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.634312][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.635513][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.773156][T15799] Bluetooth: hci2: command tx timeout [ 911.996951][T16763] tc_dump_action: action bad kind [ 913.850589][T15799] Bluetooth: hci2: command tx timeout [ 914.588683][ T5985] bridge_slave_1: left allmulticast mode [ 914.588711][ T5985] bridge_slave_1: left promiscuous mode [ 914.588913][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.774433][ T5985] bridge_slave_0: left allmulticast mode [ 914.774471][ T5985] bridge_slave_0: left promiscuous mode [ 914.774749][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.964808][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 915.198021][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 916.439690][T15799] Bluetooth: hci2: command tx timeout [ 918.490672][T15799] Bluetooth: hci2: command tx timeout [ 919.811400][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.911165][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.931625][ T5985] bond0 (unregistering): Released all slaves [ 919.946979][ T5985] bond1 (unregistering): Released all slaves [ 919.962151][ T5985] bond2 (unregistering): Released all slaves [ 919.981492][ T5985] bond3 (unregistering): Released all slaves [ 920.003232][ T5985] bond4 (unregistering): Released all slaves [ 920.091033][T16841] tipc: Enabling of bearer rejected, failed to enable media [ 920.244729][ T5985] tipc: Left network mode [ 920.526937][T16415] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 920.682433][T16415] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 920.800112][T16415] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 920.854236][T16736] chnl_net:caif_netlink_parms(): no params data found [ 920.890479][ T1709] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 920.963099][T16415] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 921.040718][ T1709] usb 8-1: Using ep0 maxpacket: 16 [ 921.043642][ T1709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.046278][ T1709] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.046306][ T1709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 921.046328][ T1709] usb 8-1: SerialNumber: syz [ 921.947239][T16872] tc_dump_action: action bad kind [ 922.786171][ T1709] usb 8-1: bad CDC descriptors [ 922.807203][ T1709] usb 8-1: USB disconnect, device number 7 [ 923.381222][ T5985] hsr_slave_0: left promiscuous mode [ 923.430465][ T5985] hsr_slave_1: left promiscuous mode [ 923.431493][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.752700][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.215401][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 927.461196][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 929.852550][T16904] tc_dump_action: action bad kind [ 929.969005][T16914] syzkaller0: entered promiscuous mode [ 929.969035][T16914] syzkaller0: entered allmulticast mode [ 929.994745][T16736] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.994948][T16736] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.995176][T16736] bridge_slave_0: entered allmulticast mode [ 929.998025][T16736] bridge_slave_0: entered promiscuous mode [ 930.607024][T16736] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.607176][T16736] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.607436][T16736] bridge_slave_1: entered allmulticast mode [ 930.632805][T16736] bridge_slave_1: entered promiscuous mode [ 930.967769][T16736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.987807][T16736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.122187][T16943] tc_dump_action: action bad kind [ 931.637551][T16736] team0: Port device team_slave_0 added [ 931.650644][T16736] team0: Port device team_slave_1 added [ 935.641562][ T5985] IPVS: stop unused estimator thread 0... [ 935.644015][T16736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.644031][T16736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.644096][T16736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.721054][T16736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.721106][T16736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.721171][T16736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.200966][T16962] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3366'. [ 937.361912][T16962] hugetlbfs: Unknown parameter 'fsmagic' [ 937.707203][ T23] ================================================================== [ 937.707220][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 937.707271][ T23] Read of size 8 at addr ffffc90005dc1090 by task irq_work/0/23 [ 937.707289][ T23] [ 937.707317][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 937.707341][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.707364][ T23] Call Trace: [ 937.707376][ T23] [ 937.707387][ T23] dump_stack_lvl+0x189/0x250 [ 937.707429][ T23] ? run_irq_workd+0x116/0x190 [ 937.707462][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.707495][ T23] ? __pfx__printk+0x10/0x10 [ 937.707524][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 937.707556][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 937.707590][ T23] print_report+0xca/0x240 [ 937.707620][ T23] ? run_irq_workd+0x116/0x190 [ 937.707649][ T23] kasan_report+0x118/0x150 [ 937.707681][ T23] ? run_irq_workd+0x116/0x190 [ 937.707717][ T23] run_irq_workd+0x116/0x190 [ 937.707747][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 937.707777][ T23] ? schedule+0x91/0x360 [ 937.707804][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.707833][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.707859][ T23] smpboot_thread_fn+0x542/0xa60 [ 937.707887][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.707920][ T23] kthread+0x711/0x8a0 [ 937.707953][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 937.707981][ T23] ? __pfx_kthread+0x10/0x10 [ 937.708010][ T23] ? rt_spin_unlock+0x150/0x200 [ 937.708035][ T23] ? rt_spin_unlock+0x161/0x200 [ 937.708055][ T23] ? __pfx_kthread+0x10/0x10 [ 937.708088][ T23] ret_from_fork+0x4bc/0x870 [ 937.708116][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 937.708146][ T23] ? __switch_to_asm+0x39/0x70 [ 937.708167][ T23] ? __switch_to_asm+0x33/0x70 [ 937.708188][ T23] ? __pfx_kthread+0x10/0x10 [ 937.708220][ T23] ret_from_fork_asm+0x1a/0x30 [ 937.708254][ T23] [ 937.708262][ T23] [ 937.708268][ T23] The buggy address belongs to a vmalloc virtual mapping [ 937.708296][ T23] Memory state around the buggy address: [ 937.708308][ T23] ffffc90005dc0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 937.708324][ T23] ffffc90005dc1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 937.708339][ T23] >ffffc90005dc1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 937.708354][ T23] ^ [ 937.708366][ T23] ffffc90005dc1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 937.708381][ T23] ffffc90005dc1180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 937.708392][ T23] ================================================================== [ 937.708421][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 937.708436][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 937.708460][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.708473][ T23] Call Trace: [ 937.708480][ T23] [ 937.708488][ T23] dump_stack_lvl+0x99/0x250 [ 937.708521][ T23] ? __asan_memcpy+0x40/0x70 [ 937.708545][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.708578][ T23] ? __pfx__printk+0x10/0x10 [ 937.708612][ T23] vpanic+0x237/0x6d0 [ 937.708632][ T23] ? __pfx_vpanic+0x10/0x10 [ 937.708659][ T23] panic+0xb9/0xc0 [ 937.708678][ T23] ? __pfx_panic+0x10/0x10 [ 937.708697][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 937.708728][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 937.708762][ T23] ? run_irq_workd+0x116/0x190 [ 937.708791][ T23] check_panic_on_warn+0x89/0xb0 [ 937.708811][ T23] ? run_irq_workd+0x116/0x190 [ 937.708840][ T23] end_report+0x78/0x160 [ 937.708869][ T23] kasan_report+0x129/0x150 [ 937.708900][ T23] ? run_irq_workd+0x116/0x190 [ 937.708935][ T23] run_irq_workd+0x116/0x190 [ 937.708966][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 937.708994][ T23] ? schedule+0x91/0x360 [ 937.709021][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.709050][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.709075][ T23] smpboot_thread_fn+0x542/0xa60 [ 937.709103][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 937.709136][ T23] kthread+0x711/0x8a0 [ 937.709169][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 937.709196][ T23] ? __pfx_kthread+0x10/0x10 [ 937.709226][ T23] ? rt_spin_unlock+0x150/0x200 [ 937.709250][ T23] ? rt_spin_unlock+0x161/0x200 [ 937.709271][ T23] ? __pfx_kthread+0x10/0x10 [ 937.709303][ T23] ret_from_fork+0x4bc/0x870 [ 937.709329][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 937.709359][ T23] ? __switch_to_asm+0x39/0x70 [ 937.709380][ T23] ? __switch_to_asm+0x33/0x70 [ 937.709409][ T23] ? __pfx_kthread+0x10/0x10 [ 937.709441][ T23] ret_from_fork_asm+0x1a/0x30 [ 937.709481][ T23] [ 937.709812][ T23] Kernel Offset: disabled