last executing test programs: 7m1.264084949s ago: executing program 2 (id=1043): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) r1 = accept$alg(r0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x400) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m1.161424845s ago: executing program 1 (id=1045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d000180000000000008000000", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x240048c0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 6m50.06848456s ago: executing program 2 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 6m49.978458349s ago: executing program 1 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 6m49.768870049s ago: executing program 2 (id=1055): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x92, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6m49.721840464s ago: executing program 1 (id=1056): socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x26020480) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6m49.410284348s ago: executing program 1 (id=1060): socket(0x10, 0x803, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m48.965233481s ago: executing program 1 (id=1062): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 6m48.808930905s ago: executing program 1 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 6m48.782341486s ago: executing program 2 (id=1064): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 6m48.671316059s ago: executing program 2 (id=1065): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xffff, 0x9}, 0x8) 6m48.537641797s ago: executing program 2 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 6m34.454873363s ago: executing program 32 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 6m33.420507851s ago: executing program 33 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 6m33.387272406s ago: executing program 34 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 4m12.343032963s ago: executing program 6 (id=1631): timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r4 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) 4m10.766586542s ago: executing program 6 (id=1638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x1000}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000002400)="8000", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x3}, 0x14) 4m10.749967621s ago: executing program 3 (id=1639): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r2], 0x14) 4m10.399308149s ago: executing program 3 (id=1643): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x0, r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r3}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010700104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a1c001280110001006272696467655f736c617665000000000400058014000300626f6e645f736c6176655f3100000000"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001b80)="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", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3m59.032781003s ago: executing program 6 (id=1652): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x30, 0xff, 0xfd, 0x5ae9}, {0x20, 0x1, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7ff}]}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020400) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0xffffffff000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000080)=0x2) 3m58.286325486s ago: executing program 6 (id=1657): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40800, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x5, 0x6, @link_local}, 0x14) 3m58.282902562s ago: executing program 3 (id=1658): unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) 3m58.13825224s ago: executing program 6 (id=1659): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3m58.054025527s ago: executing program 3 (id=1661): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r1, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x8002, @ipv4={'\x00', '\xff\xff', @empty}, 0xe3b}}}, 0x108) 3m57.755258416s ago: executing program 6 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000002400)="8000", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0x3}, 0x14) 3m46.313532728s ago: executing program 3 (id=1665): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="5a000300010003", 0x7) 3m45.214554899s ago: executing program 3 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xc, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x4008096) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m42.280263805s ago: executing program 35 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000002400)="8000", 0x2, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0x3}, 0x14) 3m29.774161194s ago: executing program 36 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xc, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x4008096) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m4.102887476s ago: executing program 7 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e4"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m2.288934016s ago: executing program 7 (id=2000): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x1d) 2m1.267110858s ago: executing program 7 (id=2005): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x4000840) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ff", 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000440)=0x9, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r4, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$ax25_int(r6, 0x101, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000f80)="f6fd4b4371b9cee432fc34e3b0cde3c10d835add05a2a055159b2312cff09dcbea4964835e21d0bdce7cec7a3ccf45ade70cdfa3244c6283342b161cf9be8a3390867042297df641f139ed0e0f6ee57129d551ca34c4b59067be7d74b1f483aee866db92965e73ce2299d080ea0d6b2233b2b8f43150ec0758c7f59f9f4fd5b7c42bdd1da564c7cfb0911c14c4d49be7a8329cf2a2dbec7413c1e9c8cdb257bffa23cdd138fc3c334fce61726afb1eedcabc2ca4fd4ebdf48df7080fb262ae4d074b3704981f3f11f8f8f79e56fce93108e89b3d3b", 0xd5}, {&(0x7f00000029c0)="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", 0xee7}, {&(0x7f0000000140)="e0c2e66c396af50c86950b5aa3c4d905f489b118a865ac614747e9f90200854a85fcebd0ff935514", 0x28}], 0x4) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) shutdown(r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_EVENT={0x8, 0x2c, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1m59.985524462s ago: executing program 7 (id=2009): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$isdn_base(0x22, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 1m59.574243112s ago: executing program 7 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x44, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc00400020208", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r3, 0x74, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb83"}, &(0x7f0000000180)=0x7c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x48, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) socket$key(0xf, 0x3, 0x2) 1m58.553727044s ago: executing program 7 (id=2016): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x1d) 1m43.054468145s ago: executing program 37 (id=2016): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x1d) 14.158863966s ago: executing program 5 (id=2386): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket(0x2a, 0x800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(0x0, 0x0, 0x2) close(0xffffffffffffffff) 13.355223294s ago: executing program 5 (id=2388): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="143af00075965ac21ac63eb4a552555a53b9a5abb075d608d5865b82b16d0ce27951bc0c294ba40f5d4c87eaabb48d82f648e8174edd821b3ec0040000009c0c0c892c8f0c6d65168698ab", @ANYRES16, @ANYBLOB="0103000000000000000029"], 0x14}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/245, 0xf5}], 0x1) 11.221093852s ago: executing program 4 (id=2397): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) getdents(0xffffffffffffffff, 0x0, 0x0) 8.074551793s ago: executing program 4 (id=2400): socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82", 0x21}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 8.073809393s ago: executing program 8 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.661528445s ago: executing program 8 (id=2404): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 7.423337677s ago: executing program 4 (id=2405): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ppoll(&(0x7f0000000080)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) close(r0) 6.9846796s ago: executing program 5 (id=2406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000001", @ANYRES16=r3, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db69680450003000000000000", @ANYRES32=r4, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4e"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="000328bd7000fcdbdf250600000008000400070000000400038008000500f0ffffff2c0002800800040006000000080004007fc500000008000700d70e000006000f000500000005000d00010000003800018014000300fc02000000000000000000000000000008000500040000000800080069f4ffff08000b007369700008000b00736970004800018008000b00736970000a0006006c226c6372000000090006006e6f6e6500000000060004004e20000008000900260000000c00e8ca145b5eacf0f8fae5b7070000000000230000000800050003000000080005000800000008000500"], 0xec}, 0x1, 0x0, 0x0, 0x40c4}, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, 0x0, 0x0) 6.553054967s ago: executing program 8 (id=2409): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 6.273108002s ago: executing program 8 (id=2412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000001", @ANYRES16=r3, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) 5.46014044s ago: executing program 9 (id=2413): timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r3 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) 5.263513222s ago: executing program 0 (id=2415): socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82", 0x21}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 5.262197514s ago: executing program 8 (id=2416): creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r2, 0x0) 5.212762182s ago: executing program 5 (id=2417): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4.913473049s ago: executing program 4 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getaffinity(r0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 4.079273506s ago: executing program 5 (id=2419): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000"], 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x7, 0x80000) readv(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.019660693s ago: executing program 9 (id=2420): listen(0xffffffffffffffff, 0x100) r0 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000008400000005"], 0x18}, 0x8054) 3.913390062s ago: executing program 9 (id=2421): socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) r3 = socket(0x23, 0x2, 0x401) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.841047613s ago: executing program 0 (id=2422): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 3.648819432s ago: executing program 9 (id=2423): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, &(0x7f0000000200)}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000002000000a0030000050000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r4}, 0x38) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), 0x0}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000058c0)={0x2020}, 0x2020) write$tun(r6, &(0x7f00000003c0)={@val={0x0, 0xf9}, @void, @ipv6=@icmpv6={0x1, 0x6, "6cb002", 0x204, 0x3a, 0xff, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x2f, 0x6, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x101}]}, @hopopts={0xd0, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @ra={0x5, 0x2, 0xbb63}, @pad1, @jumbo={0xc2, 0x4, 0xffff8001}]}, @fragment={0x33, 0x0, 0xf, 0x0, 0x0, 0x3, 0x67}, @routing={0x36, 0xc, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @mcast1]}, @dstopts={0x21, 0x10, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0xfd, 0xff, [0x5, 0x1, 0x9, 0x3, 0x9, 0x0, 0x8, 0x4, 0xdf]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x7fff, [0x8, 0x6]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}, @fragment={0x2b, 0x0, 0xb, 0x1, 0x0, 0xe, 0x66}, @routing={0x12, 0x4, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}], @mlv2_report={0x8f, 0x0, 0x0, 0x5e4d, 0x1, [{0x8, 0xa, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, [@local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}], [0x261d, 0x2, 0x6, 0x80000001, 0xed46, 0x4950, 0x79a, 0xffffff29, 0x3, 0x5]}]}}}}, 0x230) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) 3.599198919s ago: executing program 8 (id=2424): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) getdents(0xffffffffffffffff, 0x0, 0x0) 3.553964748s ago: executing program 0 (id=2425): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@align=0x9, {0x2, 0x8, 0xd, 0x6}}, 0x3, 0x0, 0x0}, 0x1, &(0x7f0000000e00)=[{0x1, 0x84caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6", 0x50, 0x10}]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000001840)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008001) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000740)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)="b5a0d7a83eebba1ecff800b5a149c5c8bdb6037b5beec8fd2a758ee60dbaed2d8aec447f9528511dca3578585499e23deb0455f851d36e047cd1e9b6d4bb63f619998f9a6434d92c20078bc7b647bb5b2a1d610a9bc811d8", 0x58}, {&(0x7f0000000840)="dcb9e1f6696216a6dcda94b324d08501bacb1b7a0ebc606bf39110e44e78b21bf8fbc6579756fb60ea9745b1dbb9ce6b0f752cb11ed12bd5fb06974ea4604faabe71900310fadb11a98db295c5727736ba1300f35bad08ed8e9221df99f827236bc8e06dc5a26ba935bb39df69146858b6389f5e9595557549a0fb1f1b439ea799d8", 0x82}, {&(0x7f0000000900)="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", 0xae0}], 0x3}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.417627514s ago: executing program 0 (id=2426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x182}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000000240)=0x40) 2.382859951s ago: executing program 9 (id=2427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000001", @ANYRES16=r3, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db69680450003000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="000328bd7000fcdbdf250600000008000400070000000400038008000500f0ffffff2c0002800800040006000000080004007fc500000008000700d70e000006000f000500000005000d00010000003800018014000300fc02000000000000000000000000000008000500040000000800080069f4ffff08000b007369700008000b00736970004800018008000b00736970000a0006006c226c6372000000090006006e6f6e6500000000060004004e20000008000900260000000c00e8ca145b5eacf0f8fae5b7070000000000230000000800050003000000080005000800000008000500"], 0xec}, 0x1, 0x0, 0x0, 0x40c4}, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, 0x0, 0x0) 2.063606067s ago: executing program 0 (id=2428): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) ppoll(&(0x7f0000000080)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) close(r0) 1.638823885s ago: executing program 9 (id=2429): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.629015966s ago: executing program 4 (id=2430): timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r3 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) 172.406917ms ago: executing program 4 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 132.907178ms ago: executing program 5 (id=2432): r0 = syz_open_dev$loop(0x0, 0x6, 0x20000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xe82b) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000300)={r5, &(0x7f00000000c0)='-)!:-{[\\@/\x00', 0x2558a1a925f48522, 0x0, 0xb, &(0x7f0000000180)={@_ha_fsid}, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 0s ago: executing program 0 (id=2433): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x3) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000004980)={0x1, 0xfb, 0x5, &(0x7f0000000040)={0xb, "2e133846d8d2f48292e0a037ded86ac154d9c36cff8bbcfa8c781acfc84c1e7cdf"}}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xf0) lstat(&(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0)) getresgid(&(0x7f0000004d40), &(0x7f0000004d80), &(0x7f0000004dc0)) newfstatat(0xffffffffffffff9c, &(0x7f0000004e00)='./file0\x00', &(0x7f0000004e40), 0x800) sendmmsg$unix(r1, 0x0, 0x0, 0x4000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 323.355400][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.487933][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.512814][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.535375][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.539866][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.540615][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.602903][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.609035][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.611315][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.612314][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.612974][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.407053][ T5117] Bluetooth: hci5: command tx timeout [ 326.607281][ T5117] Bluetooth: hci6: command tx timeout [ 326.687129][ T5117] Bluetooth: hci7: command tx timeout [ 327.197019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.197050][ C1] lec:lec_tx_timeout: lec0 [ 327.197133][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.489585][ T5117] Bluetooth: hci5: command tx timeout [ 328.687046][ T5117] Bluetooth: hci6: command tx timeout [ 328.767207][ T5117] Bluetooth: hci7: command tx timeout [ 329.567126][ T5117] Bluetooth: hci5: command tx timeout [ 330.759246][ T5882] tipc: Node number set to 215719274 [ 330.774220][ T5117] Bluetooth: hci6: command tx timeout [ 330.847008][ T5832] Bluetooth: hci7: command tx timeout [ 331.277198][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1078'. [ 331.647115][ T5832] Bluetooth: hci5: command tx timeout [ 332.208315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.208347][ C1] lec:lec_tx_timeout: lec0 [ 332.208674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.847005][ T5832] Bluetooth: hci6: command tx timeout [ 332.927058][ T5832] Bluetooth: hci7: command tx timeout [ 333.074019][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'. [ 333.539919][ T1468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.539954][ T1468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 333.539979][ T1468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 333.948193][ T1468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.948228][ T1468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 333.948259][ T1468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 334.444408][ T1468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.444454][ T1468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 334.444478][ T1468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 334.461584][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 334.857646][ T9459] netlink: 8208 bytes leftover after parsing attributes in process `syz.3.1092'. [ 334.933837][ T1468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.933859][ T1468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 334.933873][ T1468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 334.998123][ T9376] chnl_net:caif_netlink_parms(): no params data found [ 335.230847][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 335.431827][ T9384] chnl_net:caif_netlink_parms(): no params data found [ 335.446532][ T9472] warning: `syz.3.1095' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 335.710357][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.710479][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.710988][ T9376] bridge_slave_0: entered allmulticast mode [ 335.754591][ T9376] bridge_slave_0: entered promiscuous mode [ 335.806554][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.806661][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.822806][ T9376] bridge_slave_1: entered allmulticast mode [ 335.825689][ T9376] bridge_slave_1: entered promiscuous mode [ 336.008088][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.008303][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.009010][ T9382] bridge_slave_0: entered allmulticast mode [ 336.011683][ T9382] bridge_slave_0: entered promiscuous mode [ 336.022041][ T9376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.089983][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.090228][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.090494][ T9382] bridge_slave_1: entered allmulticast mode [ 336.103363][ T9382] bridge_slave_1: entered promiscuous mode [ 336.116172][ T9376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.121509][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 336.254898][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.255052][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.255179][ T9384] bridge_slave_0: entered allmulticast mode [ 336.278140][ T9384] bridge_slave_0: entered promiscuous mode [ 336.280449][ T1468] bridge_slave_1: left allmulticast mode [ 336.280644][ T1468] bridge_slave_1: left promiscuous mode [ 336.281328][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.389897][ T1468] bridge_slave_0: left allmulticast mode [ 336.389928][ T1468] bridge_slave_0: left promiscuous mode [ 336.390241][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.216957][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.216989][ C1] lec:lec_tx_timeout: lec0 [ 337.217171][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.293898][ T1468] dvmrp1 (unregistering): left allmulticast mode [ 337.349390][ T1468] bond3 (unregistering): (slave geneve3): Releasing active interface [ 337.420239][ T1468] bond1 (unregistering): (slave geneve2): Releasing active interface [ 337.757699][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.821016][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.878986][ T1468] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 337.926448][ T1468] bond0 (unregistering): Released all slaves [ 337.945782][ T1468] bond1 (unregistering): Released all slaves [ 337.992875][ T1468] bond2 (unregistering): (slave veth3): Releasing backup interface [ 338.067867][ T1468] bond2 (unregistering): (slave vlan2): Releasing backup interface [ 338.107989][ T1468] veth0_to_bond: left promiscuous mode [ 338.109937][ T1468] bond2 (unregistering): Released all slaves [ 338.131768][ T1468] bond3 (unregistering): Released all slaves [ 338.301133][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.301315][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.301489][ T9384] bridge_slave_1: entered allmulticast mode [ 338.303299][ T9384] bridge_slave_1: entered promiscuous mode [ 338.330673][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.336006][ T9376] team0: Port device team_slave_0 added [ 338.402701][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.405202][ T9376] team0: Port device team_slave_1 added [ 338.718111][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 339.088313][ T9384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.154932][ T9382] team0: Port device team_slave_0 added [ 339.161682][ T9384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.162782][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.162795][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.162818][ T9376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.172161][ T9382] team0: Port device team_slave_1 added [ 339.201390][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.201407][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.201433][ T9376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.639292][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 339.639309][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 339.817485][ T9384] team0: Port device team_slave_0 added [ 339.839143][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.839164][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.839188][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.883592][ T9384] team0: Port device team_slave_1 added [ 339.958112][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.958129][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.958152][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.227200][ T1468] hsr_slave_0: left promiscuous mode [ 340.261143][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 340.276630][ T1468] hsr_slave_1: left promiscuous mode [ 340.279976][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.280086][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.371878][ T1468] veth1_macvtap: left promiscuous mode [ 340.372052][ T1468] veth0_macvtap: left promiscuous mode [ 340.372210][ T1468] veth1_vlan: left promiscuous mode [ 340.372317][ T1468] veth0_vlan: left promiscuous mode [ 341.129000][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 341.178182][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 341.359768][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.359782][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.359797][ T9384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.368057][ T9376] hsr_slave_0: entered promiscuous mode [ 341.369377][ T9376] hsr_slave_1: entered promiscuous mode [ 341.382532][ T9537] syzkaller0: entered promiscuous mode [ 341.382566][ T9537] syzkaller0: entered allmulticast mode [ 341.877886][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.877898][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.877913][ T9384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.045416][ T9382] hsr_slave_0: entered promiscuous mode [ 342.055354][ T9382] hsr_slave_1: entered promiscuous mode [ 342.055987][ T9382] debugfs: 'hsr0' already exists in 'hsr' [ 342.056010][ T9382] Cannot create hsr debugfs directory [ 342.098773][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 342.098796][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 342.179388][ T9384] hsr_slave_0: entered promiscuous mode [ 342.180179][ T9384] hsr_slave_1: entered promiscuous mode [ 342.181255][ T9384] debugfs: 'hsr0' already exists in 'hsr' [ 342.181270][ T9384] Cannot create hsr debugfs directory [ 342.226852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.226882][ C1] lec:lec_tx_timeout: lec0 [ 342.227008][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.993161][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 343.478892][ T1468] IPVS: stop unused estimator thread 0... [ 343.992818][ T9609] syzkaller0: entered promiscuous mode [ 343.992838][ T9609] syzkaller0: entered allmulticast mode [ 344.322843][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1129'. [ 344.322864][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1129'. [ 344.712085][ T1468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.712109][ T1468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 344.712122][ T1468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 344.760807][ T9376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.794172][ T9376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.923183][ T9376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.126062][ T1468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.126099][ T1468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.126124][ T1468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 345.223751][ T9376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.432328][ T1468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.432356][ T1468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.432370][ T1468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 345.744555][ T1468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.744583][ T1468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 345.744596][ T1468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 345.846705][ T9382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.913679][ T9382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.999170][ T9382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.063087][ T9382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.183474][ T9650] syzkaller0: entered promiscuous mode [ 346.183500][ T9650] syzkaller0: entered allmulticast mode [ 346.777195][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 347.015057][ T9384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.088063][ T9384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.187033][ T9384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.685121][ T1468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.685157][ T1468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.685181][ T1468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 347.783465][ T9384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.043212][ T1468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.043247][ T1468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.043271][ T1468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 348.046946][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 348.046986][ C1] lec:lec_tx_timeout: lec0 [ 348.047547][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.343125][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 348.364554][ T1468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.364582][ T1468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.364596][ T1468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 348.718721][ T1468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.718756][ T1468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.718784][ T1468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 348.813826][ T9376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.985324][ T9376] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.039068][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.222571][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.225581][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.333058][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.333171][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.524663][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.673734][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.675463][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.687092][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.706990][ T1468] bridge_slave_1: left allmulticast mode [ 349.707017][ T1468] bridge_slave_1: left promiscuous mode [ 349.719274][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.778630][ T1468] bridge_slave_0: left allmulticast mode [ 349.778660][ T1468] bridge_slave_0: left promiscuous mode [ 349.778894][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.871537][ T1468] bridge_slave_1: left allmulticast mode [ 349.871568][ T1468] bridge_slave_1: left promiscuous mode [ 349.871809][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.949264][ T1468] bridge_slave_0: left allmulticast mode [ 349.949285][ T1468] bridge_slave_0: left promiscuous mode [ 349.949424][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.971248][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 352.007464][ T1468] bond2 (unregistering): (slave geneve3): Releasing active interface [ 352.069095][ T1468] bond1 (unregistering): (slave geneve2): Releasing active interface [ 352.357526][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.417669][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.478888][ T1468] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 352.519214][ T1468] bond0 (unregistering): Released all slaves [ 352.524900][ T1468] bond1 (unregistering): Released all slaves [ 352.540533][ T1468] bond2 (unregistering): Released all slaves [ 352.557909][ T1468] bond3 (unregistering): Released all slaves [ 352.581187][ T1468] bond4 (unregistering): Released all slaves [ 352.629117][ T1468] bond5 (unregistering): (slave veth3): Releasing backup interface [ 352.728740][ T1468] bond5 (unregistering): (slave vlan3): Releasing backup interface [ 352.747650][ T1468] veth0_to_bond: left promiscuous mode [ 352.748966][ T1468] bond5 (unregistering): Released all slaves [ 352.768553][ T1468] bond6 (unregistering): Released all slaves [ 352.819310][ T1468] bond7 (unregistering): (slave veth5): Releasing backup interface [ 352.878456][ T1468] bond7 (unregistering): Released all slaves [ 352.889194][ T1468] bond8 (unregistering): Released all slaves [ 352.906342][ T1468] bond9 (unregistering): Released all slaves [ 352.921988][ T1468] bond10 (unregistering): Released all slaves [ 352.939508][ T1468] bond11 (unregistering): Released all slaves [ 352.956747][ T1468] bond12 (unregistering): Released all slaves [ 353.056917][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.056948][ C1] lec:lec_tx_timeout: lec0 [ 353.057050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 353.255464][ T1468] dvmrp1 (unregistering): left allmulticast mode [ 353.299776][ T1468] bond2 (unregistering): (slave geneve3): Releasing active interface [ 353.379450][ T1468] bond1 (unregistering): (slave geneve2): Releasing active interface [ 353.687542][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.752129][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.790160][ T1468] bond0 (unregistering): Released all slaves [ 353.795624][ T1468] bond1 (unregistering): Released all slaves [ 353.814724][ T1468] bond2 (unregistering): Released all slaves [ 353.830951][ T1468] bond3 (unregistering): Released all slaves [ 353.845682][ T1468] bond4 (unregistering): Released all slaves [ 353.887991][ T1468] bond5 (unregistering): (slave veth3): Releasing backup interface [ 353.968934][ T1468] bond5 (unregistering): (slave vlan3): Releasing backup interface [ 354.008191][ T1468] veth0_to_bond: left promiscuous mode [ 354.010487][ T1468] bond5 (unregistering): Released all slaves [ 354.057624][ T1468] bond6 (unregistering): (slave veth5): Releasing backup interface [ 354.121978][ T1468] bond6 (unregistering): Released all slaves [ 354.138029][ T1468] bond7 (unregistering): Released all slaves [ 354.151949][ T1468] bond8 (unregistering): Released all slaves [ 354.214149][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.214274][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.539080][ T9765] syzkaller0: entered promiscuous mode [ 354.539109][ T9765] syzkaller0: entered allmulticast mode [ 354.542718][ T9384] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.546500][ T1468] tipc: Left network mode [ 358.071519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.071541][ C1] lec:lec_tx_timeout: lec0 [ 358.071734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 363.076934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 363.076970][ C1] lec:lec_tx_timeout: lec0 [ 363.077254][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.961711][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.961834][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.729081][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.729220][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.763069][ T9384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.086880][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.086912][ C1] lec:lec_tx_timeout: lec0 [ 368.087325][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.847231][ T1468] hsr_slave_0: left promiscuous mode [ 368.887124][ T9870] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 368.890028][ T1468] hsr_slave_1: left promiscuous mode [ 368.890710][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.890726][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.950366][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.950393][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.156967][ T1468] hsr_slave_0: left promiscuous mode [ 369.164596][ T9878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'. [ 369.207024][ T1468] hsr_slave_1: left promiscuous mode [ 369.208234][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.208254][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.267938][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.267964][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.361144][ T1468] veth1_macvtap: left promiscuous mode [ 369.361208][ T1468] veth0_macvtap: left promiscuous mode [ 369.361382][ T1468] veth1_vlan: left promiscuous mode [ 369.361477][ T1468] veth0_vlan: left promiscuous mode [ 369.497137][ T1468] veth1_macvtap: left promiscuous mode [ 369.497199][ T1468] veth0_macvtap: left promiscuous mode [ 369.499644][ T1468] veth1_vlan: left promiscuous mode [ 369.499767][ T1468] veth0_vlan: left promiscuous mode [ 370.462597][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 370.517605][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 371.067539][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 371.107765][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 371.296859][ T9870] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 371.589049][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.596300][ T9376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.843332][ T9384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.911647][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 372.981634][ T9376] veth0_vlan: entered promiscuous mode [ 373.096855][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 373.096885][ C1] lec:lec_tx_timeout: lec0 [ 373.096974][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.226509][ T9376] veth1_vlan: entered promiscuous mode [ 373.241723][ T9382] veth0_vlan: entered promiscuous mode [ 373.323198][ T9382] veth1_vlan: entered promiscuous mode [ 373.577976][ T9376] veth0_macvtap: entered promiscuous mode [ 373.598214][ T9384] veth0_vlan: entered promiscuous mode [ 373.599275][ T9376] veth1_macvtap: entered promiscuous mode [ 373.731874][ T9382] veth0_macvtap: entered promiscuous mode [ 373.733983][ T9384] veth1_vlan: entered promiscuous mode [ 373.767335][ T9382] veth1_macvtap: entered promiscuous mode [ 373.785494][ T9376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.836011][ T9376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.876167][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.881192][ T9849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.905832][ T9849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.913033][ T9849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.919284][ T9849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.935617][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.054178][ T9384] veth0_macvtap: entered promiscuous mode [ 374.118284][ T139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.180721][ T139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.202074][ T139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.227967][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1188'. [ 374.246733][ T9384] veth1_macvtap: entered promiscuous mode [ 374.255840][ T139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.563121][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.816939][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.816959][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.855900][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.965055][ T9844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.993525][ T9844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.009480][ T1451] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.009565][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.009579][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.036986][ T9849] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.160963][ T9844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.160985][ T9844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.476377][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'. [ 375.590946][ T1468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.590967][ T1468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.819486][ T1468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.819510][ T1468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.005384][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.005403][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.032261][T10002] netlink: 'syz.6.1076': attribute type 1 has an invalid length. [ 376.160669][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1076'. [ 377.386021][T10043] tipc: Started in network mode [ 377.386055][T10043] tipc: Node identity 6a41b6accd6f, cluster identity 4711 [ 377.386432][T10043] tipc: Enabled bearer , priority 0 [ 377.783132][T10047] syzkaller0: entered promiscuous mode [ 377.783161][T10047] syzkaller0: entered allmulticast mode [ 377.787667][T10047] tipc: Resetting bearer [ 377.871617][T10073] netlink: 'syz.5.1214': attribute type 1 has an invalid length. [ 377.898656][T10035] tipc: Resetting bearer [ 377.984537][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1214'. [ 378.106821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.106854][ C1] lec:lec_tx_timeout: lec0 [ 378.107488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.773753][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.116917][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.116949][ C1] lec:lec_tx_timeout: lec0 [ 383.117048][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.126978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 388.127012][ C1] lec:lec_tx_timeout: lec0 [ 389.095636][T10035] tipc: Disabling bearer [ 389.413701][ T36] tipc: Node number set to 2804856492 [ 389.691567][T10128] netlink: 'syz.7.1231': attribute type 1 has an invalid length. [ 389.701100][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1231'. [ 389.718560][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1231'. [ 389.749601][T10128] bridge_slave_1: left allmulticast mode [ 389.749629][T10128] bridge_slave_1: left promiscuous mode [ 389.789228][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.898507][T10128] bridge_slave_0: left allmulticast mode [ 389.898537][T10128] bridge_slave_0: left promiscuous mode [ 389.898777][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.136519][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1235'. [ 390.136540][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1235'. [ 390.373075][T10154] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 390.408454][T10154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 390.843772][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1242'. [ 390.843797][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1242'. [ 391.344725][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1249'. [ 391.344748][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1249'. [ 391.783659][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1253'. [ 394.707700][T10340] __nla_validate_parse: 15 callbacks suppressed [ 394.707721][T10340] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1286'. [ 394.794685][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1285'. [ 395.453604][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 395.453627][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 395.787469][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 396.166040][T10396] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1299'. [ 396.210849][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1301'. [ 396.210875][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1301'. [ 396.297572][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 396.641294][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1305'. [ 396.984275][T10430] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 397.196701][T10437] 8021q: adding VLAN 0 to HW filter on device bond12 [ 398.749372][T10509] netlink: 'syz.5.1326': attribute type 1 has an invalid length. [ 398.887900][T10513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.866513][T10565] __nla_validate_parse: 16 callbacks suppressed [ 399.866534][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 399.968178][T10570] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1342'. [ 400.377066][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1345'. [ 400.377092][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1345'. [ 400.687581][T10590] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 400.770534][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 400.838358][T10600] 8021q: adding VLAN 0 to HW filter on device bond13 [ 400.844006][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1347'. [ 400.844030][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1347'. [ 401.211756][T10619] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1354'. [ 401.704304][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1356'. [ 402.308468][T10659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'. [ 402.580719][T10673] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 404.477868][T10750] netlink: 'syz.7.1379': attribute type 1 has an invalid length. [ 412.125067][T10750] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 412.739193][T10794] __nla_validate_parse: 9 callbacks suppressed [ 412.739215][T10794] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1384'. [ 413.362480][T10824] netlink: 'syz.6.1394': attribute type 1 has an invalid length. [ 413.517460][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 413.517483][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 413.521908][T10827] bond1: (slave geneve2): making interface the new active one [ 413.522768][T10827] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 413.545054][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1395'. [ 413.545078][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1395'. [ 413.845719][ T1577] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.124556][ T5462] veth0_vlan: left promiscuous mode [ 414.213115][ T5462] veth0_vlan: entered promiscuous mode [ 414.217997][ T1577] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.321024][ T1577] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.369101][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1399'. [ 414.499791][ T1577] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.539057][T10863] geneve4: entered promiscuous mode [ 414.829461][T10879] netlink: 'syz.5.1405': attribute type 1 has an invalid length. [ 415.294466][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1409'. [ 415.294490][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1409'. [ 415.627529][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 416.060298][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1416'. [ 416.096251][T10928] geneve3: entered promiscuous mode [ 416.320875][T10940] netlink: 'syz.5.1419': attribute type 1 has an invalid length. [ 416.632006][T10957] netlink: 'syz.5.1424': attribute type 1 has an invalid length. [ 416.632031][T10957] netlink: 'syz.5.1424': attribute type 2 has an invalid length. [ 417.626484][T10996] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 417.735286][T10996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.876373][T10996] bond10 (unregistering): Released all slaves [ 418.143499][T11023] __nla_validate_parse: 5 callbacks suppressed [ 418.143521][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'. [ 418.519117][T11013] lec:lec_atm_close: lec0: Shut down! [ 419.067287][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 419.431528][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1452'. [ 419.562194][T11074] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 419.578112][T11076] netlink: 'syz.7.1455': attribute type 10 has an invalid length. [ 419.610263][T11076] team0: Port device dummy0 added [ 419.626525][T11076] netlink: 'syz.7.1455': attribute type 10 has an invalid length. [ 419.677961][T11076] team0: Port device dummy0 removed [ 419.683465][T11076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 420.820916][T11082] lec:lec_atm_close: lec0: Shut down! [ 421.389938][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1463'. [ 421.546960][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1466'. [ 423.582589][T11224] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 423.637945][T11224] 8021q: adding VLAN 0 to HW filter on device bond10 [ 426.046985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 426.047016][ C1] lec:lec_tx_timeout: lec0 [ 432.061553][T11226] bond10: (slave veth3): Enslaving as an active interface with a down link [ 432.145211][T11233] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 432.145252][T11233] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 432.145271][T11233] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 432.272369][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1513'. [ 432.483825][T11282] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1517'. [ 432.683057][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1520'. [ 433.153467][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1524'. [ 433.454005][T11323] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1529'. [ 434.968046][T11391] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1542'. [ 435.213761][T11403] netlink: 'syz.7.1546': attribute type 1 has an invalid length. [ 435.281078][T11403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.298629][T11411] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 435.300799][T11411] bond1: (slave batadv1): making interface the new active one [ 435.302000][T11411] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 436.763631][T11472] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1554'. [ 436.788639][T11344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.054127][T11483] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 437.203650][T11483] 8021q: adding VLAN 0 to HW filter on device bond11 [ 437.439209][T11487] bond11: (slave veth5): Enslaving as an active interface with a down link [ 437.515110][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 437.515140][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 437.544029][T11492] vlan3: entered allmulticast mode [ 437.683844][T11515] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1565'. [ 437.791185][T11506] syzkaller0: entered promiscuous mode [ 437.791212][T11506] syzkaller0: entered allmulticast mode [ 437.904614][ T6212] lec:lec_start_xmit: lec0:No lecd attached [ 439.054729][T11537] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 439.473166][T11548] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 440.122421][T11554] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1576'. [ 440.204882][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 440.204900][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 440.228990][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.006926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 443.006958][ C1] lec:lec_tx_timeout: lec0 [ 443.007252][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.411317][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 447.423232][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 448.046945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 448.046977][ C1] lec:lec_tx_timeout: lec0 [ 449.889507][T11524] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 449.889551][T11524] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 449.889643][T11524] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 449.924499][T11548] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 450.025359][T11563] netlink: 'syz.5.1577': attribute type 1 has an invalid length. [ 450.250251][T11563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.484541][T11606] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 452.248541][T11615] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1590'. [ 452.272511][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'. [ 452.272534][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'. [ 452.606746][T11618] syzkaller0: entered promiscuous mode [ 452.615714][T11618] syzkaller0: entered allmulticast mode [ 453.882710][T11675] netlink: 'syz.5.1609': attribute type 10 has an invalid length. [ 453.883065][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1604'. [ 453.883075][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1604'. [ 453.931816][T11679] netlink: 'syz.5.1609': attribute type 10 has an invalid length. [ 454.494830][T11692] loop7: detected capacity change from 0 to 7 [ 454.751099][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 454.751263][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 454.755966][T11559] Dev loop7: unable to read RDB block 7 [ 454.756011][T11559] loop7: unable to read partition table [ 454.756245][T11559] loop7: partition table beyond EOD, truncated [ 454.940344][T11692] Dev loop7: unable to read RDB block 7 [ 454.940387][T11692] loop7: unable to read partition table [ 454.940522][T11692] loop7: partition table beyond EOD, truncated [ 454.940561][T11692] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 457.085018][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1626'. [ 457.212719][T11726] nbd: socks must be embedded in a SOCK_ITEM attr [ 457.268280][T11730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1626'. [ 457.289505][T11730] nbd: nbd64 already in use [ 457.470916][T11559] udevd[11559]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 465.042899][T11675] team0: Port device dummy0 added [ 465.106522][T11679] team0: Port device dummy0 removed [ 465.111948][T11679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 467.156648][T11781] syzkaller0: entered promiscuous mode [ 467.156678][T11781] syzkaller0: entered allmulticast mode [ 467.377890][T11797] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 467.429662][T11799] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 478.587822][T11797] team0: Port device dummy0 added [ 478.642692][T11799] team0: Port device dummy0 removed [ 478.650475][T11799] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 479.469299][T11841] syzkaller0: entered promiscuous mode [ 479.469331][T11841] syzkaller0: entered allmulticast mode [ 491.304691][T11875] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 491.304718][T11875] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 491.304728][T11875] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 491.601062][T11896] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 491.628561][T11876] syzkaller0: entered promiscuous mode [ 491.629812][T11876] syzkaller0: entered allmulticast mode [ 491.660030][T11898] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 495.504809][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.531471][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.533049][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.553362][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.554307][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.647019][ T5832] Bluetooth: hci0: command tx timeout [ 499.727138][ T5832] Bluetooth: hci0: command tx timeout [ 501.653055][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.656311][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 501.817130][ T5832] Bluetooth: hci0: command tx timeout [ 503.887279][ T5832] Bluetooth: hci0: command tx timeout [ 503.910705][T11896] bond0: (slave dummy0): Releasing backup interface [ 503.932450][T11896] team0: Port device dummy0 added [ 503.968510][T11898] team0: Port device dummy0 removed [ 503.971969][T11898] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.007201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 507.007234][ C1] lec:lec_tx_timeout: lec0 [ 507.996619][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.021223][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.022288][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.023618][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.024368][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.127069][ T5832] Bluetooth: hci2: command tx timeout [ 512.207028][ T5832] Bluetooth: hci2: command tx timeout [ 512.417151][T11926] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.424711][T11926] syzkaller0: entered promiscuous mode [ 512.424732][T11926] syzkaller0: entered allmulticast mode [ 513.064788][T11999] netlink: 'syz.4.1694': attribute type 10 has an invalid length. [ 513.117285][T12001] netlink: 'syz.4.1694': attribute type 10 has an invalid length. [ 513.636416][T11999] bond0: (slave dummy0): Releasing backup interface [ 513.705583][ T6212] lec:lec_start_xmit: lec0:No lecd attached [ 513.739715][T11999] team0: Port device dummy0 added [ 513.768612][T12001] team0: Port device dummy0 removed [ 513.772734][T12001] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.041932][ T9851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.041967][ T9851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.286898][ T5832] Bluetooth: hci2: command tx timeout [ 514.393304][ T9851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.393341][ T9851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 514.724086][ T9851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.724113][ T9851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 515.159089][ T9851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.159118][ T9851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 515.582181][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'. [ 515.723689][T12074] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 515.776527][T12075] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 515.885085][T12074] bond0: (slave dummy0): Releasing backup interface [ 515.922773][T12074] team0: Port device dummy0 added [ 516.033609][T12075] team0: Port device dummy0 removed [ 516.055850][T12075] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 516.071682][T11937] chnl_net:caif_netlink_parms(): no params data found [ 516.189041][T11985] chnl_net:caif_netlink_parms(): no params data found [ 516.367100][ T5832] Bluetooth: hci2: command tx timeout [ 516.483965][ T9851] bridge_slave_1: left allmulticast mode [ 516.483994][ T9851] bridge_slave_1: left promiscuous mode [ 516.484211][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.570492][ T9851] bridge_slave_0: left allmulticast mode [ 516.570524][ T9851] bridge_slave_0: left promiscuous mode [ 516.570762][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.418636][ T9851] bond1 (unregistering): (slave geneve2): Releasing active interface [ 517.627792][ T9851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.708482][ T9851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.729802][ T9851] bond0 (unregistering): Released all slaves [ 517.735603][ T9851] bond1 (unregistering): Released all slaves [ 517.835694][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.835826][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.836044][T11937] bridge_slave_0: entered allmulticast mode [ 517.842913][T11937] bridge_slave_0: entered promiscuous mode [ 517.924851][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.924969][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.925146][T11937] bridge_slave_1: entered allmulticast mode [ 517.956484][T11937] bridge_slave_1: entered promiscuous mode [ 517.997362][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.997431][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.997612][T11985] bridge_slave_0: entered allmulticast mode [ 517.999718][T11985] bridge_slave_0: entered promiscuous mode [ 518.077629][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.077750][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.077988][T11985] bridge_slave_1: entered allmulticast mode [ 518.113690][T11985] bridge_slave_1: entered promiscuous mode [ 518.134775][T12115] netlink: 'syz.7.1719': attribute type 10 has an invalid length. [ 518.200123][T12118] netlink: 'syz.7.1719': attribute type 10 has an invalid length. [ 518.257810][T12115] bond0: (slave dummy0): Releasing backup interface [ 518.358040][T12115] team0: Port device dummy0 added [ 518.363152][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.797675][T12118] team0: Port device dummy0 removed [ 518.800843][T12118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 518.856342][T12117] tipc: New replicast peer: 255.255.255.255 [ 518.883308][T12117] tipc: Enabled bearer , priority 10 [ 518.895163][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.007048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 519.007084][ C1] lec:lec_tx_timeout: lec0 [ 519.146476][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.505001][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.635729][T11937] team0: Port device team_slave_0 added [ 519.669227][T11937] team0: Port device team_slave_1 added [ 519.672187][T11985] team0: Port device team_slave_0 added [ 519.857130][ T9851] hsr_slave_0: left promiscuous mode [ 519.891658][ T9851] hsr_slave_1: left promiscuous mode [ 519.892367][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.892383][ T9851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.940044][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.940067][ T9851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.998269][ T9851] veth1_macvtap: left promiscuous mode [ 519.998334][ T9851] veth0_macvtap: left promiscuous mode [ 519.998469][ T9851] veth1_vlan: left promiscuous mode [ 519.998567][ T9851] veth0_vlan: left promiscuous mode [ 521.877584][ T9851] team0 (unregistering): Port device team_slave_1 removed [ 521.942886][ T9851] team0 (unregistering): Port device team_slave_0 removed [ 522.114253][T11985] team0: Port device team_slave_1 added [ 522.264025][T12148] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 522.264067][T12148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 522.264088][T12148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 522.402429][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.402441][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.402455][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.615866][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.615886][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.615914][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.680327][T12156] netlink: 'syz.4.1730': attribute type 10 has an invalid length. [ 522.688062][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.688077][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.688104][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.469098][T12158] netlink: 'syz.4.1730': attribute type 10 has an invalid length. [ 523.821370][T12156] bond0: (slave dummy0): Releasing backup interface [ 523.893546][T12156] team0: Port device dummy0 added [ 523.947103][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.947121][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.947149][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.085696][T12158] team0: Port device dummy0 removed [ 524.120754][T12158] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 524.123650][T12164] tipc: New replicast peer: 255.255.255.255 [ 524.124347][T12164] tipc: Enabled bearer , priority 10 [ 524.236146][T11937] hsr_slave_0: entered promiscuous mode [ 524.247700][T11937] hsr_slave_1: entered promiscuous mode [ 524.248768][T11937] debugfs: 'hsr0' already exists in 'hsr' [ 524.248793][T11937] Cannot create hsr debugfs directory [ 524.303403][T11985] hsr_slave_0: entered promiscuous mode [ 524.304970][T11985] hsr_slave_1: entered promiscuous mode [ 524.305905][T11985] debugfs: 'hsr0' already exists in 'hsr' [ 524.305927][T11985] Cannot create hsr debugfs directory [ 525.047458][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 525.724418][T11937] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.440016][T11937] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.688697][T11937] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.797906][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1736'. [ 526.886057][T11937] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 527.034678][T12202] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.125861][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1736'. [ 527.125892][T12210] nbd: nbd64 already in use [ 527.830359][ T9851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.830383][ T9851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 527.830397][ T9851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 528.450582][ T9851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.450617][ T9851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.450650][ T9851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 528.519649][T11985] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.614770][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 528.641363][T11985] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 528.793267][T11985] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 529.078004][ T9851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.078040][ T9851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 529.078065][ T9851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 529.187225][T11985] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 529.586243][ T9851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.586279][ T9851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 529.586304][ T9851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 530.414494][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.623746][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.732695][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1752'. [ 530.852015][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.866259][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.877516][ T9844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.894720][ T9851] bridge_slave_1: left allmulticast mode [ 530.894746][ T9851] bridge_slave_1: left promiscuous mode [ 530.894942][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.077367][ T9851] bridge_slave_0: left allmulticast mode [ 531.077393][ T9851] bridge_slave_0: left promiscuous mode [ 531.077647][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.939612][ T9851] dvmrp1 (unregistering): left allmulticast mode [ 532.978331][ T9851] bond8 (unregistering): (slave geneve3): Releasing active interface [ 533.047491][ T9851] bond1 (unregistering): (slave geneve2): Releasing active interface [ 533.367914][ T9851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.442177][ T9851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.498975][ T9851] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 533.542638][ T9851] bond0 (unregistering): Released all slaves [ 533.552338][ T9851] bond1 (unregistering): Released all slaves [ 533.569202][ T9851] bond2 (unregistering): Released all slaves [ 533.585554][ T9851] bond3 (unregistering): Released all slaves [ 533.606015][ T9851] bond4 (unregistering): Released all slaves [ 533.628457][ T9851] bond5 (unregistering): Released all slaves [ 533.650989][ T9851] bond6 (unregistering): Released all slaves [ 533.683519][ T9851] bond7 (unregistering): (slave batadv1): Releasing backup interface [ 533.763599][ T9851] bond7 (unregistering): Released all slaves [ 533.779884][ T9851] bond8 (unregistering): Released all slaves [ 533.796232][ T9851] bond9 (unregistering): Released all slaves [ 533.837741][ T9851] bond10 (unregistering): (slave veth3): Releasing active interface [ 533.899660][ T9851] bond10 (unregistering): Released all slaves [ 533.951440][ T9851] bond11 (unregistering): (slave veth5): Releasing active interface [ 534.009735][ T9851] bond11 (unregistering): Released all slaves [ 534.210309][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.210440][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.393659][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.517275][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.517405][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.600368][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.600599][ T9844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.631818][ T9851] tipc: Left network mode [ 537.459883][T12370] uprobe: syz.4.1768:12370 failed to unregister, leaking uprobe [ 537.772422][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.697730][T12399] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 539.330516][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.557070][ T9851] hsr_slave_0: left promiscuous mode [ 540.558064][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.558088][ T9851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.617902][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.617930][ T9851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.724905][ T9851] veth1_macvtap: left promiscuous mode [ 540.725137][ T9851] veth1_vlan: left allmulticast mode [ 540.725385][ T9851] veth1_vlan: left promiscuous mode [ 540.725556][ T9851] veth0_vlan: left promiscuous mode [ 541.209532][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1780'. [ 541.889618][ T9851] team0 (unregistering): Port device team_slave_1 removed [ 541.971307][ T9851] team0 (unregistering): Port device team_slave_0 removed [ 542.496315][T11937] veth0_vlan: entered promiscuous mode [ 542.554813][T11937] veth1_vlan: entered promiscuous mode [ 542.743818][T11985] veth0_vlan: entered promiscuous mode [ 542.853900][T11985] veth1_vlan: entered promiscuous mode [ 543.427238][T12483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.536721][T11937] veth0_macvtap: entered promiscuous mode [ 543.657403][T12305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 543.734673][T11937] veth1_macvtap: entered promiscuous mode [ 543.878434][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.933786][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.994011][T11985] veth0_macvtap: entered promiscuous mode [ 543.996702][ T1451] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.038752][ T1451] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.043410][ T1451] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.044003][T11985] veth1_macvtap: entered promiscuous mode [ 544.046264][ T1451] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.049141][T12305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.049173][T12305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.049277][T12305] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 544.049302][T12305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.134594][T12305] usb 5-1: config 0 descriptor?? [ 544.352908][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.723809][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.913006][ T147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.966318][ T147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.981054][ T147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.981143][ T147] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.042839][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.042860][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.133335][T12305] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 545.349055][T12305] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 545.419832][T12512] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1789'. [ 545.480644][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.480665][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.545301][T12305] usb 5-1: USB disconnect, device number 2 [ 545.703165][T12510] fido_id[12510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:27B8:01ED.0001/report_descriptor': No such device [ 546.159853][ T1468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.159874][ T1468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.137631][ T9851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.137652][ T9851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.206833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 547.216861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 547.226827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 547.236821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 547.246845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 547.256828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 548.554462][T12553] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1798'. [ 552.179079][T12587] tipc: Enabling of bearer rejected, already enabled [ 553.456440][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 553.628786][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 553.691251][ T9848] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.691811][ T9848] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.691852][ T9848] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.691886][ T9848] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.693798][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 553.847151][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 553.847616][T12615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 555.383223][T12658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1824'. [ 558.536794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 559.138232][T12686] loop6: detected capacity change from 0 to 7 [ 559.277082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.277117][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.352950][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.352979][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.360926][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.360961][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.631834][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1832'. [ 559.708926][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'. [ 559.794583][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'. [ 559.886740][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.886844][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.924985][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'. [ 559.956477][ T147] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.965194][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 559.965219][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 559.966115][ T147] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.966222][ T147] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.966321][ T147] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.037501][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.037538][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.045256][T12686] ldm_validate_partition_table(): Disk read failed. [ 560.045605][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.045633][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.049613][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.049645][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.054972][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.055004][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.055289][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 560.055312][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.055749][T12686] Dev loop6: unable to read RDB block 0 [ 560.097387][T12686] loop6: unable to read partition table [ 560.097520][T12686] loop6: partition table beyond EOD, truncated [ 560.097543][T12686] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 560.687997][ T5117] Bluetooth: hci7: command 0x0406 tx timeout [ 562.228935][T12745] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 562.260695][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1848'. [ 562.281324][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1847'. [ 562.371573][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1848'. [ 562.398358][T12755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1847'. [ 562.415405][T12745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.529816][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1848'. [ 562.557148][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1848'. [ 563.001708][T12755] bond5 (unregistering): Released all slaves [ 563.097492][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.100390][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 563.205940][ T147] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.219284][ T147] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.219348][ T147] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.219619][ T147] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.166686][T12786] 9pnet_fd: p9_fd_create_tcp (12786): problem connecting socket to 127.0.0.1 [ 564.597038][ T5922] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 564.624521][T12800] loop7: detected capacity change from 0 to 7 [ 564.788506][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.788538][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.788573][ T5922] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 564.788595][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.857377][ T5922] usb 9-1: config 0 descriptor?? [ 565.031757][T12076] Dev loop7: unable to read RDB block 7 [ 565.031796][T12076] loop7: unable to read partition table [ 565.067549][ C0] blk_print_req_error: 10 callbacks suppressed [ 565.067572][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 565.067596][ C0] buffer_io_error: 10 callbacks suppressed [ 565.067604][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 565.081146][T12076] loop7: partition table beyond EOD, truncated [ 565.323519][ T5922] usbhid 9-1:0.0: can't add hid device: -71 [ 565.323636][ T5922] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 565.369962][ T5922] usb 9-1: USB disconnect, device number 2 [ 565.465476][T12800] Dev loop7: unable to read RDB block 7 [ 565.465530][T12800] loop7: unable to read partition table [ 565.465724][T12800] loop7: partition table beyond EOD, truncated [ 565.465760][T12800] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 565.695087][T12818] netlink: 'syz.7.1867': attribute type 1 has an invalid length. [ 565.764699][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1867'. [ 565.816024][T12825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1867'. [ 565.997142][T12818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.251360][T12825] bond2 (unregistering): Released all slaves [ 568.106927][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.106958][ C1] lec:lec_tx_timeout: lec0 [ 568.214966][T12867] tipc: Started in network mode [ 568.214998][T12867] tipc: Node identity ac14140f, cluster identity 4711 [ 568.215306][T12867] tipc: New replicast peer: 255.255.255.255 [ 568.220472][T12867] tipc: Enabled bearer , priority 10 [ 569.216729][ T993] tipc: Node number set to 2886997007 [ 569.933313][T12879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.499544][T12883] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1886'. [ 570.502794][T12883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1886'. [ 575.065836][T12964] 9pnet_fd: p9_fd_create_tcp (12964): problem connecting socket to 127.0.0.1 [ 578.737962][ T6212] lec:lec_start_xmit: lec0:No lecd attached [ 580.399088][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1926'. [ 580.399112][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1926'. [ 580.825726][T13053] netlink: 'syz.8.1928': attribute type 1 has an invalid length. [ 580.844321][T13053] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1928'. [ 581.192802][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1933'. [ 581.913012][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1940'. [ 581.913038][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1940'. [ 582.469759][T13101] netlink: 'syz.5.1942': attribute type 1 has an invalid length. [ 582.527367][T13105] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1942'. [ 583.235551][T13133] tipc: Enabling of bearer rejected, already enabled [ 583.308875][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1947'. [ 583.649041][T13145] 9p: Bad value for 'wfdno' [ 583.731451][T13147] netlink: 'syz.8.1954': attribute type 1 has an invalid length. [ 583.777650][T13147] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1954'. [ 584.206835][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 584.206871][ C1] lec:lec_tx_timeout: lec0 [ 585.755355][T13170] uprobe: syz.8.1960:13170 failed to unregister, leaking uprobe [ 586.250300][T13186] Malformed UNC in devname [ 586.250300][T13186] [ 586.250575][T13186] CIFS: VFS: Malformed UNC in devname [ 586.935214][T13191] 9p: Bad value for 'wfdno' [ 588.777534][T13218] tipc: Enabling of bearer rejected, already enabled [ 588.921128][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 589.030918][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1971'. [ 589.162375][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1971'. [ 591.560226][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1982'. [ 591.561280][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1982'. [ 592.868866][T13305] netlink: 'syz.7.1992': attribute type 1 has an invalid length. [ 592.949214][T13309] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1992'. [ 593.096378][T13305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.811719][T13371] loop6: detected capacity change from 0 to 7 [ 596.846680][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.846711][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 596.990998][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.991038][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.067563][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.067611][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.185010][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.185075][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.210296][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.210414][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.240435][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.242237][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.316638][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.316671][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.389580][T13371] ldm_validate_partition_table(): Disk read failed. [ 597.418446][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.418531][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.420393][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.420453][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.504756][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 597.504802][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 597.566427][T13371] Dev loop6: unable to read RDB block 0 [ 597.673828][T13371] loop6: unable to read partition table [ 597.674005][T13371] loop6: partition table beyond EOD, truncated [ 597.674029][T13371] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 598.047634][ T5830] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 598.199182][ T5830] usb 9-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 598.199238][ T5830] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.225199][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2012'. [ 598.225224][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2012'. [ 598.225820][ T5830] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 598.225846][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.225866][ T5830] usb 9-1: Product: syz [ 598.225879][ T5830] usb 9-1: Manufacturer: syz [ 598.225892][ T5830] usb 9-1: SerialNumber: syz [ 598.298880][ T5830] usb 9-1: config 0 descriptor?? [ 598.315530][ T5830] dm9601 9-1:0.0: probe with driver dm9601 failed with error -22 [ 598.586529][ T5902] usb 9-1: USB disconnect, device number 3 [ 600.608810][T13425] 9p: Bad value for 'rfdno' [ 601.245704][T13446] tipc: Enabling of bearer rejected, already enabled [ 603.998501][T13474] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 604.026204][T13456] bridge0: port 3(erspan0) entered blocking state [ 604.026300][T13456] bridge0: port 3(erspan0) entered disabled state [ 604.027150][T13456] erspan0: entered allmulticast mode [ 604.035802][T13456] erspan0: entered promiscuous mode [ 604.036684][T13456] bridge0: port 3(erspan0) entered blocking state [ 604.037670][T13456] bridge0: port 3(erspan0) entered forwarding state [ 604.205641][T13480] 9p: Bad value for 'rfdno' [ 606.869918][T13507] tipc: Enabling of bearer rejected, already enabled [ 607.530625][T13526] 9p: Bad value for 'rfdno' [ 609.394715][T13546] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 609.968520][T13545] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2050'. [ 609.968547][T13545] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2050'. [ 610.394288][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2053'. [ 610.531311][T13558] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2054'. [ 610.918107][T12076] block nbd64: NBD_DISCONNECT [ 610.924060][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2054'. [ 610.924093][T13568] nbd: device at index 64 is going down [ 611.154162][T13575] 9pnet_fd: Insufficient options for proto=fd [ 611.435579][T12076] udevd[12076]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 611.691300][T13591] tipc: Failed to remove unknown binding: 66,0,0/0:2222942589/2222942590 [ 611.691919][T13591] tipc: Failed to remove unknown binding: 66,0,0/0:2222942589/2222942590 [ 613.316922][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 613.330609][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'. [ 613.699410][ T9] usb 10-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 613.699466][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 613.699491][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.747288][ T9] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 613.747319][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.747340][ T9] usb 10-1: Product: syz [ 613.747354][ T9] usb 10-1: Manufacturer: syz [ 613.747368][ T9] usb 10-1: SerialNumber: syz [ 613.795370][ T9] usb 10-1: config 0 descriptor?? [ 613.796450][T13608] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 613.829529][ T9] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 614.009050][ T9] usb 10-1: USB disconnect, device number 2 [ 614.187603][T13627] tipc: Enabling of bearer rejected, already enabled [ 615.341440][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.360994][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.368759][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.389489][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.417241][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.575419][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 616.951395][T13670] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 617.584365][ T5832] Bluetooth: hci3: command tx timeout [ 618.853779][T13684] 9p: Bad value for 'wfdno' [ 619.682172][ T5832] Bluetooth: hci3: command tx timeout [ 621.513018][T13706] syz.5.2091 (13706) used greatest stack depth: 15432 bytes left [ 621.727546][ T5832] Bluetooth: hci3: command tx timeout [ 621.823280][ T9849] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.823317][ T9849] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.877208][ T5832] Bluetooth: hci3: command tx timeout [ 624.759043][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.762062][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 626.085425][ T9849] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.085461][ T9849] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.241239][T13640] chnl_net:caif_netlink_parms(): no params data found [ 627.302445][ T9849] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.302486][ T9849] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.624725][T13776] ======================================================= [ 627.624725][T13776] WARNING: The mand mount option has been deprecated and [ 627.624725][T13776] and is ignored by this kernel. Remove the mand [ 627.624725][T13776] option from the mount to silence this warning. [ 627.624725][T13776] ======================================================= [ 627.631721][T13776] FAT-fs (nullb0): bogus number of reserved sectors [ 627.631751][T13776] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 629.809884][T13787] loop6: detected capacity change from 0 to 7 [ 629.836120][ C0] blk_print_req_error: 10 callbacks suppressed [ 629.836156][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.836377][ C0] buffer_io_error: 10 callbacks suppressed [ 629.836436][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.883845][T13789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2114'. [ 629.972331][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.972367][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.972758][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.972781][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.051366][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.051414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.173105][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.173202][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.174852][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.174907][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.247593][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.247689][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.249921][T13787] ldm_validate_partition_table(): Disk read failed. [ 630.286886][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 630.286916][ C1] lec:lec_tx_timeout: lec0 [ 630.298311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.298350][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.452997][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.453094][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.454466][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.454531][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.578228][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2116'. [ 630.578253][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2116'. [ 630.582830][ T9849] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.582864][ T9849] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.617240][T13787] Dev loop6: unable to read RDB block 0 [ 630.623578][T13787] loop6: unable to read partition table [ 630.623721][T13787] loop6: partition table beyond EOD, truncated [ 630.623745][T13787] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 631.176128][T13640] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.176294][T13640] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.176535][T13640] bridge_slave_0: entered allmulticast mode [ 631.206332][T13640] bridge_slave_0: entered promiscuous mode [ 631.265813][T13640] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.265945][T13640] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.266162][T13640] bridge_slave_1: entered allmulticast mode [ 631.289345][T13640] bridge_slave_1: entered promiscuous mode [ 631.421149][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.479802][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.727667][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 632.051801][T13640] team0: Port device team_slave_0 added [ 632.067828][ T5462] veth0_vlan: left promiscuous mode [ 632.155170][ T5462] veth0_vlan: entered promiscuous mode [ 632.213320][T13640] team0: Port device team_slave_1 added [ 632.443645][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2127'. [ 632.522666][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.522689][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.522712][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.731367][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2127'. [ 633.327620][T13833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.665245][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.665262][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.665287][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.252677][T13866] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2135'. [ 634.252728][T13866] block nbd0: not configured, cannot reconfigure [ 634.868785][ T809] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 635.027061][ T809] usb 9-1: Using ep0 maxpacket: 8 [ 635.037385][ T809] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.037411][ T809] usb 9-1: config 0 has no interfaces? [ 635.048350][ T809] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 635.048379][ T809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.048397][ T809] usb 9-1: Product: syz [ 635.048410][ T809] usb 9-1: Manufacturer: syz [ 635.048423][ T809] usb 9-1: SerialNumber: syz [ 635.068906][ T809] usb 9-1: config 0 descriptor?? [ 636.054148][ T809] usb 9-1: USB disconnect, device number 4 [ 636.517457][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.598487][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.670031][ T9849] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 636.710813][T13913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 636.732799][ T9849] bond0 (unregistering): Released all slaves [ 636.771464][ T9849] bond1 (unregistering): (slave batadv1): Releasing active interface [ 636.799353][ T9849] bond1 (unregistering): Released all slaves [ 636.816037][ T9849] bond2 (unregistering): Released all slaves [ 636.947092][ T5902] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 636.955020][T13640] hsr_slave_0: entered promiscuous mode [ 636.967164][T13640] hsr_slave_1: entered promiscuous mode [ 636.968748][T13640] debugfs: 'hsr0' already exists in 'hsr' [ 636.968774][T13640] Cannot create hsr debugfs directory [ 637.099737][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 637.101962][ T5902] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 637.104425][ T5902] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 637.104453][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 637.104473][ T5902] usb 10-1: Product: syz [ 637.104487][ T5902] usb 10-1: Manufacturer: syz [ 637.104500][ T5902] usb 10-1: SerialNumber: syz [ 637.200538][ T5902] usb 10-1: config 0 descriptor?? [ 637.224823][T13913] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 637.321101][ T9849] tipc: Disabling bearer [ 637.325924][ T9849] tipc: Left network mode [ 637.436358][T13913] fuse: Unknown parameter 'group_id00000000000000000000' [ 637.578174][ T36] usb 10-1: USB disconnect, device number 3 [ 639.225142][T13957] tipc: Failed to remove unknown binding: 66,0,0/215719274:104675247/104675249 [ 639.225191][T13957] tipc: Failed to remove unknown binding: 66,0,0/215719274:104675247/104675248 [ 639.263887][T13957] tipc: Failed to remove unknown binding: 66,0,0/215719274:104675247/104675249 [ 639.263932][T13957] tipc: Failed to remove unknown binding: 66,0,0/215719274:104675247/104675248 [ 639.607899][T13967] Malformed UNC in devname [ 639.607899][T13967] [ 639.607944][T13967] CIFS: VFS: Malformed UNC in devname [ 641.865953][T14003] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 641.946220][T14006] Malformed UNC in devname [ 641.946220][T14006] [ 641.946293][T14006] CIFS: VFS: Malformed UNC in devname [ 642.937411][T14018] loop6: detected capacity change from 0 to 7 [ 642.944305][ C0] blk_print_req_error: 10 callbacks suppressed [ 642.944323][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.944350][ C0] buffer_io_error: 10 callbacks suppressed [ 642.944361][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.944632][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.944658][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.944868][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.944892][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.945103][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.945127][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.945346][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.945370][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.946110][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.946147][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.946564][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 642.946591][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.946678][T14018] ldm_validate_partition_table(): Disk read failed. [ 643.089739][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.089777][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.135399][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.135438][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.156913][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 643.156949][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.157315][T14018] Dev loop6: unable to read RDB block 0 [ 643.158114][T14018] loop6: unable to read partition table [ 643.158336][T14018] loop6: partition table beyond EOD, truncated [ 643.164006][T14018] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 644.301145][T14037] Malformed UNC in devname [ 644.301145][T14037] [ 644.301166][T14037] CIFS: VFS: Malformed UNC in devname [ 644.349839][T14039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.261827][ T9849] hsr_slave_0: left promiscuous mode [ 645.297048][ T9849] hsr_slave_1: left promiscuous mode [ 645.298149][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.298175][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.374000][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.374028][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.416351][T14053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 645.552409][ T9849] veth1_macvtap: left promiscuous mode [ 645.552513][ T9849] veth0_macvtap: left promiscuous mode [ 645.555741][ T9849] veth1_vlan: left promiscuous mode [ 645.555960][ T9849] veth0_vlan: left promiscuous mode [ 646.697988][T14068] loop6: detected capacity change from 0 to 7 [ 647.025360][T14053] nbd: socks must be embedded in a SOCK_ITEM attr [ 647.104105][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 647.104138][T14058] nbd: nbd64 already in use [ 647.105663][T14068] ldm_validate_partition_table(): Disk read failed. [ 647.143357][T14068] Dev loop6: unable to read RDB block 0 [ 647.144194][T14068] loop6: unable to read partition table [ 647.144328][T14068] loop6: partition table beyond EOD, truncated [ 647.144352][T14068] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 648.158200][T14083] Malformed UNC in devname [ 648.158200][T14083] [ 648.158222][T14083] CIFS: VFS: Malformed UNC in devname [ 649.700455][T14086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.817697][ T9849] team0 (unregistering): Port device team_slave_1 removed [ 649.857459][ T9849] team0 (unregistering): Port device team_slave_0 removed [ 652.932646][T14121] loop6: detected capacity change from 0 to 7 [ 653.245218][ C0] blk_print_req_error: 30 callbacks suppressed [ 653.245240][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.245268][ C0] buffer_io_error: 30 callbacks suppressed [ 653.245278][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.301083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.301597][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.307959][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.307992][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.309850][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.309882][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.310116][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.310141][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.310428][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.310453][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.327231][T14121] ldm_validate_partition_table(): Disk read failed. [ 653.329337][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.329370][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.331814][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.331846][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.333496][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.333522][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.333802][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.333826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 653.333979][T14121] Dev loop6: unable to read RDB block 0 [ 653.351171][T14121] loop6: unable to read partition table [ 653.351329][T14121] loop6: partition table beyond EOD, truncated [ 653.351354][T14121] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 653.948362][T14139] Malformed UNC in devname [ 653.948362][T14139] [ 653.948382][T14139] CIFS: VFS: Malformed UNC in devname [ 655.161987][T13640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 655.226034][T13640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 655.493816][T13640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 656.347452][ T6212] lec:lec_start_xmit: lec0:No lecd attached [ 656.480406][T13640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 657.461075][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2226'. [ 657.798832][T14191] 9p: Could not find request transport: fd0x0000000000000003 [ 657.934218][T14193] Malformed UNC in devname [ 657.934218][T14193] [ 657.934238][T14193] CIFS: VFS: Malformed UNC in devname [ 658.166319][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.223347][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.280120][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.287372][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.370195][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.387322][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.908093][T14226] 9pnet_fd: Insufficient options for proto=fd [ 661.527926][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.741258][T13640] veth0_vlan: entered promiscuous mode [ 661.792074][T13640] veth1_vlan: entered promiscuous mode [ 661.851533][T14263] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 661.851701][T14263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 661.912961][T13640] veth0_macvtap: entered promiscuous mode [ 661.930611][T13640] veth1_macvtap: entered promiscuous mode [ 662.001831][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.014843][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.047301][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms [ 662.047328][ C1] lec:lec_tx_timeout: lec0 [ 662.092360][ T9849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.110609][ T1577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.111043][ T1577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.111647][ T1577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.658495][ T4876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.658518][ T4876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.998666][ T4876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.998687][ T4876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.617082][ T809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 663.790497][ T809] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 663.799101][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.799157][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.799183][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 663.840104][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.840176][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.840202][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.145610][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.145666][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.145693][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.174690][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.174746][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.174783][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.210790][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.210857][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.210884][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.230492][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.230551][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.230580][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.253134][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.253191][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.253219][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.306560][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 664.306618][ T809] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 664.306645][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.417842][ T809] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 664.417873][ T809] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 664.417894][ T809] usb 1-1: Product: syz [ 664.417907][ T809] usb 1-1: Manufacturer: syz [ 664.417920][ T809] usb 1-1: SerialNumber: syz [ 664.512728][ T809] usb 1-1: config 0 descriptor?? [ 664.619557][ T809] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 667.153236][ T5830] usb 1-1: USB disconnect, device number 2 [ 667.179920][ T5830] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 670.368044][T14404] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 677.256203][T14485] Malformed UNC in devname [ 677.256203][T14485] [ 677.256224][T14485] CIFS: VFS: Malformed UNC in devname [ 677.394373][T14489] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 679.394176][T14524] bridge0: port 3(erspan0) entered blocking state [ 679.394372][T14524] bridge0: port 3(erspan0) entered disabled state [ 679.397399][T14524] erspan0: entered allmulticast mode [ 679.404699][T14524] erspan0: entered promiscuous mode [ 679.413011][T14524] bridge0: port 3(erspan0) entered blocking state [ 679.413279][T14524] bridge0: port 3(erspan0) entered forwarding state [ 679.640457][T14466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.658015][T14533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.811438][T14546] Malformed UNC in devname [ 681.811438][T14546] [ 681.811459][T14546] CIFS: VFS: Malformed UNC in devname [ 682.229759][T14548] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 683.054028][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 683.157420][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 683.325554][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 683.325757][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.348015][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 683.362015][ T9851] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.362512][ T9851] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.362548][ T9851] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.719161][T14593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.410578][T14595] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2324'. [ 686.671951][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.674832][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 688.376898][ T5829] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 688.546311][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 688.546343][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.546381][ T5829] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 688.546410][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.721213][ T5829] usb 10-1: config 0 descriptor?? [ 688.746384][ T5829] hub 10-1:0.0: USB hub found [ 688.746983][ T993] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 688.897861][ T993] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 688.901145][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.901317][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.901346][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 688.904868][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.904981][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.905010][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 689.177691][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 689.177751][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 689.177779][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 689.178145][ T5829] hub 10-1:0.0: 1 port detected [ 689.224288][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.003829][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.003866][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 690.011468][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.011525][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.011606][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 690.220348][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.220400][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.220424][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 690.225951][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.226004][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.226078][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 690.297212][ T993] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.297383][ T993] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.297410][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 690.347855][ T993] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 690.347887][ T993] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 690.347908][ T993] usb 9-1: Product: syz [ 690.347922][ T993] usb 9-1: Manufacturer: syz [ 690.347936][ T993] usb 9-1: SerialNumber: syz [ 690.353825][ T993] usb 9-1: config 0 descriptor?? [ 690.484820][ T993] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 690.885627][T14639] netlink: 'syz.9.2335': attribute type 6 has an invalid length. [ 691.723294][ T5829] usb 10-1: USB disconnect, device number 4 [ 691.744501][ T993] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 692.046854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 692.046885][ C1] lec:lec_tx_timeout: lec0 [ 693.077518][ T5882] usb 9-1: USB disconnect, device number 5 [ 693.091059][ T5882] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 694.634516][T14725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2355'. [ 695.107223][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 695.257977][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 695.259690][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.259742][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.259768][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.260964][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.261016][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.261043][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.262167][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.262216][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.262242][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.263328][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.263377][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.263404][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.266023][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.266076][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.266170][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.269925][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.269975][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.270001][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.273201][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.273251][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.273277][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.276281][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.276330][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.276356][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 695.296172][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 695.296202][ T9] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 695.296222][ T9] usb 10-1: Product: syz [ 695.296235][ T9] usb 10-1: Manufacturer: syz [ 695.296249][ T9] usb 10-1: SerialNumber: syz [ 695.348439][ T9] usb 10-1: config 0 descriptor?? [ 695.919551][ T9] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 698.399897][ T5922] usb 10-1: USB disconnect, device number 5 [ 698.450738][ T5922] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 698.727712][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2371'. [ 698.978276][T14792] bridge0: port 3(erspan0) entered blocking state [ 698.978599][T14792] bridge0: port 3(erspan0) entered disabled state [ 698.979056][T14792] erspan0: entered allmulticast mode [ 699.529839][T14792] erspan0: entered promiscuous mode [ 699.693430][T14800] Malformed UNC in devname [ 699.693430][T14800] [ 699.693450][T14800] CIFS: VFS: Malformed UNC in devname [ 699.782486][T14792] bridge0: port 3(erspan0) entered blocking state [ 699.783049][T14792] bridge0: port 3(erspan0) entered forwarding state [ 703.398444][ T5902] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 703.629841][T14836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2384'. [ 703.647724][ T5902] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 703.650891][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.650944][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.650973][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.652340][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.652391][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.652418][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.726074][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.726132][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.726159][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.776001][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.776058][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.776086][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.801343][T14845] Malformed UNC in devname [ 703.801343][T14845] [ 703.801364][T14845] CIFS: VFS: Malformed UNC in devname [ 703.833185][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.833243][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.833270][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.870708][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.870767][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.870794][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.910793][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.910853][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.910880][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 703.954086][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.954147][ T5902] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.954174][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 704.008136][ T5902] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 704.008167][ T5902] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 704.008189][ T5902] usb 10-1: Product: syz [ 704.008203][ T5902] usb 10-1: Manufacturer: syz [ 704.008218][ T5902] usb 10-1: SerialNumber: syz [ 704.076505][ T5902] usb 10-1: config 0 descriptor?? [ 704.155501][ T5902] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 704.878923][T14859] input: syz0 as /devices/virtual/input/input6 [ 706.056415][ T5830] usb 10-1: USB disconnect, device number 6 [ 706.131625][ T5830] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 708.715218][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 708.796904][T12699] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 708.796931][T12699] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 708.984031][T14897] Malformed UNC in devname [ 708.984031][T14897] [ 708.984052][T14897] CIFS: VFS: Malformed UNC in devname [ 709.336710][T14896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2399'. [ 710.210843][T14917] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2403'. [ 710.309631][T14913] bridge_slave_0: left allmulticast mode [ 710.309660][T14913] bridge_slave_0: left promiscuous mode [ 710.314102][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.410845][T14913] bridge_slave_1: left allmulticast mode [ 710.410875][T14913] bridge_slave_1: left promiscuous mode [ 710.411128][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.562279][T14913] bond0: (slave bond_slave_0): Releasing backup interface [ 710.726295][T14913] bond0: (slave bond_slave_1): Releasing backup interface [ 710.791889][T14913] team0: Port device team_slave_0 removed [ 710.834091][T14913] team0: Port device team_slave_1 removed [ 710.835316][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.835342][T14913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.864315][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.864346][T14913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.970488][T14913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 711.894881][T14949] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2412'. [ 712.214265][T14930] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 712.214307][T14930] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 712.214339][T14930] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 712.225494][T14946] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 712.225535][T14946] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 712.225554][T14946] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 713.949781][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 714.114358][ T5830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.114386][ T5830] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 714.114421][ T5830] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 714.114444][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.194316][ T5830] usb 6-1: config 0 descriptor?? [ 714.207061][T12699] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 714.207087][T12699] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 714.387757][ T5117] Bluetooth: hci5: command 0x0406 tx timeout [ 717.494324][ T9] usb 6-1: USB disconnect, device number 2 [ 717.967101][T12699] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 717.967127][T12699] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 717.967250][ C0] ------------[ cut here ]------------ [ 717.967257][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 717.967305][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd16/0xff0, CPU#0: ktimers/0/16 [ 717.967337][ C0] Modules linked in: [ 717.967365][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 717.967382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.967406][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 717.967432][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 40 3c 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 717.967446][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 717.967460][ C0] RAX: 1ffff1100d529153 RBX: ffff88806a948a98 RCX: ffff88801c6e8000 [ 717.967472][ C0] RDX: ffff8880119b8968 RSI: ffffffff8a14b6f0 RDI: ffffffff8f6d2600 [ 717.967483][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 717.967490][ C0] R10: dffffc0000000000 R11: ffffffff818d6850 R12: 0000000000000100 [ 717.967496][ C0] R13: dffffc0000000000 R14: ffffffff8f6d2600 R15: ffff8880119b8968 [ 717.967503][ C0] FS: 0000000000000000(0000) GS:ffff888126338000(0000) knlGS:0000000000000000 [ 717.967512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.967518][ C0] CR2: 000000110c3c1b48 CR3: 000000002ac60000 CR4: 00000000003526f0 [ 717.967531][ C0] Call Trace: [ 717.967540][ C0] [ 717.967553][ C0] call_timer_fn+0x192/0x640 [ 717.967565][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 717.967579][ C0] ? call_timer_fn+0xd4/0x640 [ 717.967588][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 717.967602][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 717.967616][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 717.967630][ C0] __run_timer_base+0x764/0x9f0 [ 717.967652][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 717.967674][ C0] run_timer_softirq+0xb7/0x170 [ 717.967688][ C0] handle_softirqs+0x1de/0x6f0 [ 717.967715][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 717.967729][ C0] run_ktimerd+0x69/0x100 [ 717.967739][ C0] smpboot_thread_fn+0x541/0xa50 [ 717.967753][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 717.967771][ C0] kthread+0x388/0x470 [ 717.967782][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 717.967796][ C0] ? __pfx_kthread+0x10/0x10 [ 717.967806][ C0] ret_from_fork+0x51e/0xb90 [ 717.967828][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.967840][ C0] ? __switch_to+0xc7d/0x1450 [ 717.967855][ C0] ? __pfx_kthread+0x10/0x10 [ 717.967865][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.967884][ C0] [ 717.967896][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 717.967904][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 717.967915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.967921][ C0] Call Trace: [ 717.967924][ C0] [ 717.967928][ C0] vpanic+0x56c/0xa60 [ 717.967943][ C0] ? __pfx__printk+0x10/0x10 [ 717.967953][ C0] ? __pfx_vpanic+0x10/0x10 [ 717.967965][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 717.967980][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 717.967997][ C0] panic+0xc5/0xd0 [ 717.968010][ C0] ? __pfx_panic+0x10/0x10 [ 717.968028][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 717.968040][ C0] __warn+0x315/0x4f0 [ 717.968053][ C0] ? __queue_work+0xd16/0xff0 [ 717.968067][ C0] ? __queue_work+0xd16/0xff0 [ 717.968080][ C0] __report_bug+0x29a/0x540 [ 717.968094][ C0] ? __queue_work+0xd16/0xff0 [ 717.968107][ C0] ? __pfx___report_bug+0x10/0x10 [ 717.968116][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 717.968135][ C0] ? look_up_lock_class+0x57/0x110 [ 717.968146][ C0] ? register_lock_class+0x31/0x2e0 [ 717.968155][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 717.968167][ C0] report_bug_entry+0x19a/0x290 [ 717.968184][ C0] ? __queue_work+0xd40/0xff0 [ 717.968196][ C0] ? __queue_work+0xd45/0xff0 [ 717.968208][ C0] handle_bug+0xce/0x200 [ 717.968220][ C0] exc_invalid_op+0x1a/0x50 [ 717.968231][ C0] asm_exc_invalid_op+0x1a/0x20 [ 717.968242][ C0] RIP: 0010:__queue_work+0xd40/0xff0 [ 717.968258][ C0] Code: 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 40 3c 9d 00 48 8b 33 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 68 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 717.968266][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010082 [ 717.968275][ C0] RAX: 1ffff1100d529153 RBX: ffff88806a948a98 RCX: ffff88801c6e8000 [ 717.968282][ C0] RDX: ffff8880119b8968 RSI: ffffffff8a14b6f0 RDI: ffffffff8f6d2600 [ 717.968294][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 717.968300][ C0] R10: dffffc0000000000 R11: ffffffff818d6850 R12: 0000000000000100 [ 717.968307][ C0] R13: dffffc0000000000 R14: ffffffff8f6d2600 R15: ffff8880119b8968 [ 717.968316][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 717.968332][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 717.968355][ C0] call_timer_fn+0x192/0x640 [ 717.968365][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 717.968378][ C0] ? call_timer_fn+0xd4/0x640 [ 717.968387][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 717.968401][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 717.968414][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 717.968429][ C0] __run_timer_base+0x764/0x9f0 [ 717.968450][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 717.968472][ C0] run_timer_softirq+0xb7/0x170 [ 717.968486][ C0] handle_softirqs+0x1de/0x6f0 [ 717.968503][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 717.968517][ C0] run_ktimerd+0x69/0x100 [ 717.968526][ C0] smpboot_thread_fn+0x541/0xa50 [ 717.968540][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 717.968559][ C0] kthread+0x388/0x470 [ 717.968569][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 717.968583][ C0] ? __pfx_kthread+0x10/0x10 [ 717.968593][ C0] ret_from_fork+0x51e/0xb90 [ 717.968608][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.968620][ C0] ? __switch_to+0xc7d/0x1450 [ 717.968634][ C0] ? __pfx_kthread+0x10/0x10 [ 717.968644][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.968662][ C0] [ 717.969077][ C0] Kernel Offset: disabled