last executing test programs: 12m12.94147855s ago: executing program 4 (id=2264): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 12m11.521735485s ago: executing program 4 (id=2265): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) io_setup(0x3ff, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) 12m7.847510627s ago: executing program 4 (id=2278): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x4, 0x8}, 0x12a3de879a8c2a69) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usbip_server_init(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 12m4.806966547s ago: executing program 4 (id=2284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12m3.448263889s ago: executing program 4 (id=2285): syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sync_file_range(0xffffffffffffffff, 0x8a93, 0x4, 0x4) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) 12m1.857524084s ago: executing program 4 (id=2292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mlockall(0x7) 11m46.768629163s ago: executing program 32 (id=2292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mlockall(0x7) 9m26.746853039s ago: executing program 0 (id=2830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x82c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x800, 0x2, [@TCA_U32_SEL={0x7f4, 0x5, {0x4, 0x6, 0x7f, 0x8, 0x9, 0x4, 0x3, 0xe0000000, [{0x8001, 0x9094, 0x180000, 0xa}, {0xfbab, 0x7, 0x10, 0x65d1}, {0x0, 0xf30, 0x5, 0x7f7}, {0x2, 0x6, 0x7ff, 0x5}, {0x3, 0x2, 0xd7, 0x8001}, {0x9a73, 0xfffffff7, 0x0, 0x3}, {0x2, 0x0, 0x5, 0xd8}, {0x800, 0xff0c, 0x200, 0x4}, {0x11d, 0xffffffff, 0x3, 0x3}, {0x7, 0x0, 0x7ea3, 0x44}, {0xf2b9, 0x5, 0x8, 0x9}, {0x0, 0x10, 0x2, 0x1}, {0x4, 0x0, 0x200, 0x40}, {0x0, 0x4, 0xf055, 0x4}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x200, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xfffffffe, 0x8}, {0x7, 0x3, 0x5, 0x9}, {0x10, 0xc6c, 0xd7d4, 0x583}, {0x40, 0xfff, 0x8, 0x1}, {0x0, 0x7fffffff, 0xffffe42a, 0x7fffffff}, {0x9, 0x400000, 0x200, 0x6}, {0x5, 0xd159, 0x3, 0x1}, {0x7, 0xfffffff9, 0x1, 0x6}, {0x8000, 0x3, 0x6, 0x9}, {0x4, 0x9, 0xb, 0x8}, {0x2851, 0xba92, 0x4, 0x8}, {0x0, 0xfffff000, 0x2}, {0x2, 0x43, 0x5, 0x100}, {0xfff, 0xfffffffe, 0x3}, {0x4, 0x1, 0x1, 0x9}, {0x7e, 0x7ff, 0x9, 0x2}, {0x8000000, 0x8, 0x3, 0x7}, {0x1ff, 0xa, 0x2, 0x7fa19284}, {0xfffff4c7, 0x8000, 0xffffffff, 0xed9c}, {0xc, 0x8, 0x81, 0x8}, {0x76, 0xac9, 0xffffffff}, {0xfffffff8, 0x0, 0x400, 0x920b209}, {0x401, 0xfffffc00, 0x8}, {0x4, 0x6, 0x9, 0x2}, {0x5, 0x1, 0x1e, 0x401}, {0x9e0, 0x3000, 0xd, 0x7ff}, {0x6f, 0xfffffffe, 0x401, 0x8}, {0x0, 0x0, 0x400, 0x1000}, {0x101, 0xe, 0xfffffff7}, {0x4, 0xfffffff8, 0x9, 0x9}, {0xffff798d, 0x9, 0x401, 0x1ff}, {0x1, 0x1, 0x123e, 0x2}, {0x6d1b, 0x1, 0x16, 0xf}, {0x7, 0x7, 0x2, 0x6}, {0x6fe, 0x4, 0x6, 0x1}, {0x41, 0x9, 0x8, 0x2}, {0xda, 0x5}, {0x38, 0x1ff, 0x64500, 0x9}, {0x101, 0xffffc514, 0x2, 0x7}, {0x7fffffff, 0x9, 0x7, 0x3}, {0x7, 0x200, 0x6, 0x5}, {0x6, 0xffffffff, 0x6, 0x3f03}, {0x1000, 0x8, 0x9, 0x24e}, {0x6, 0x3, 0x6, 0x6677}, {0x1, 0xffffff87, 0x6, 0x7}, {0xdac, 0x0, 0xffffffd2, 0x3}, {0x4, 0x5, 0x10000, 0x5}, {0x2, 0x4, 0x38, 0x5}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x1, 0x100}, {0x6, 0x1ff, 0xd744, 0x1}, {0x7ff, 0x2, 0x7}, {0xa0000, 0xfffffffd, 0x2, 0x8000}, {0x4, 0x101, 0x3, 0x40}, {0xc, 0x2, 0xffffffff}, {0xa9e1, 0x4, 0x3, 0xffff335c}, {0xb1, 0x3, 0xdd, 0x1000}, {0x7, 0xea6, 0x2000, 0x1}, {0x7, 0xfffffffa, 0x7fff, 0x50000000}, {0x0, 0x1ff, 0x400}, {0x9, 0x200, 0x200008, 0x1}, {0x0, 0x76, 0xfff, 0x5}, {0x8001, 0x9, 0x3, 0x4}, {0x5, 0x4, 0x5a8, 0x9}, {0x2, 0x9, 0xffffffff, 0x6}, {0x9, 0x6, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x8}, {0x8000, 0x5, 0x4}, {0xfffff1a0, 0x80000001, 0x3, 0x7f}, {0x7, 0x4, 0xfff, 0x5}, {0xa, 0x0, 0x3, 0x12000}, {0x1, 0x563, 0x1000, 0x5}, {0x7, 0x8, 0x8001, 0xb}, {0x4, 0x94b4c656, 0x0, 0x1}, {0x401, 0x61d0, 0x7, 0x401}, {0xd, 0x7, 0x2, 0x7fff8}, {0x2, 0xfffffffa, 0xfffffffd, 0x3}, {0x6, 0x1, 0x3, 0x4}, {0x4307, 0x0, 0xec, 0x257b}, {0x9, 0x1, 0x101, 0x3}, {0x5, 0x138, 0x0, 0x401}, {0x5, 0x9, 0x80000000, 0xffffff07}, {0x6, 0x1200000, 0x3ff, 0x2}, {0x81, 0x8106, 0x5, 0x80000000}, {0x10000, 0x4, 0x4, 0x5}, {0x8, 0x200, 0x5, 0x7c0}, {0x1, 0x5, 0x2, 0x5}, {0x7, 0x15949c17, 0x2, 0x80}, {0x8, 0x6, 0x2}, {0xb9, 0x9, 0x4, 0x74f}, {0x4, 0xffff267c, 0x2, 0x8}, {0x3, 0xfffffff8, 0x1, 0x100002}, {0x7, 0x9040, 0x2, 0x8}, {0x8000, 0xff, 0xc7, 0x401}, {0x9, 0xcf84, 0x2, 0x8}, {0x7, 0x80000001, 0xb79, 0xc}, {0xbb55, 0x53dbf73a, 0x9, 0x8}, {0x9, 0xd0, 0x8, 0x4}, {0xb6d, 0x7, 0xea, 0x3}, {0xb7b, 0x7, 0x800, 0x1}, {0x5, 0x7d9, 0xff, 0x5}, {0x3, 0x2, 0xa458, 0x7}, {0x4, 0x2, 0xf9, 0x6}, {0x5, 0xfff, 0x0, 0x9d5}, {0x677, 0x4, 0x9, 0x5}, {0xaa1, 0x8, 0x401}, {0x0, 0x401, 0xfffffffe, 0x2}, {0x4, 0x0, 0x6, 0x1}, {0x5, 0x9, 0x9, 0xd}, {0x8, 0x9a, 0x6, 0x972}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 9m24.1050153s ago: executing program 0 (id=2836): unshare(0x2040400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) vmsplice(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x1, 0x0) 9m22.554786396s ago: executing program 0 (id=2840): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x48a82, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x140, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x54, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0x10000) ioperm(0x2, 0x7, 0x13) 9m22.36177996s ago: executing program 0 (id=2843): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000800000000000000009500000000000000a39c870a305209ae427030237726da488e47c088561816043ca3450e322bf344fff265e15e44b8191c553f043562ba0ba8199048b2277bff59646530737479c36437bb52df03dc5dc1f9a2513e06d800acc4260c"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) 9m21.338259363s ago: executing program 0 (id=2846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x1, 0x40448c0) shutdown(r0, 0x1) 9m20.720473769s ago: executing program 0 (id=2847): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@srh={0x3c, 0x6, 0x4, 0x3, 0x6, 0x30, 0x9, [@empty, @mcast2, @local]}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8884) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x88000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) 9m5.335282954s ago: executing program 33 (id=2847): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@srh={0x3c, 0x6, 0x4, 0x3, 0x6, 0x30, 0x9, [@empty, @mcast2, @local]}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8884) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x88000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) 2m37.181433148s ago: executing program 2 (id=4839): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x1, 0x1, 0x3, 0x6, 0x7, 0x3, 0x7e, {0x5, 0x9, "30ea56ccf61cab1d"}, 0x3, 0x3e, 0x8, 0x4, 0x1, "eb"}}, 0x1a) 2m36.383863081s ago: executing program 2 (id=4842): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 2m36.033802558s ago: executing program 2 (id=4845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ff8a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x2400c090}, 0x840) recvmmsg(r5, &(0x7f0000000680), 0x0, 0x28101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4) 2m35.009966478s ago: executing program 2 (id=4849): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) close(r0) accept4(r2, 0x0, 0x0, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x15) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000280)=0xd, 0x12) 2m33.754662881s ago: executing program 2 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x18, 0x0, 0x8000, 0x1ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 2m31.918989272s ago: executing program 2 (id=4874): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f000006b000/0x4000)=nil) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f00000006c0)={0x0, 0xea60}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m16.742064397s ago: executing program 34 (id=4874): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f000006b000/0x4000)=nil) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f00000006c0)={0x0, 0xea60}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 31.429455603s ago: executing program 5 (id=5953): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f080001"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0000000800030000000000"], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 30.651540546s ago: executing program 5 (id=5962): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000040026e0000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.107359988s ago: executing program 5 (id=5972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r2 = gettid() socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076657468305f766972745f77696669001e7333368770d1073549c825093cdd0993038bfa"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 29.468606168s ago: executing program 5 (id=5978): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e3000000000000000", @ANYRES32=r1], 0x3c}}, 0x0) 28.658557404s ago: executing program 5 (id=5989): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 26.120824163s ago: executing program 5 (id=6016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0xf}, 0x94) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r6 = syz_io_uring_setup(0x39, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffff", 0x3) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/115) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0xc) 11.033935365s ago: executing program 35 (id=6016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0xf}, 0x94) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r6 = syz_io_uring_setup(0x39, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffff", 0x3) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/115) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0xc) 5.583396298s ago: executing program 6 (id=6122): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.672201787s ago: executing program 6 (id=6127): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) 4.352367689s ago: executing program 6 (id=6130): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0001"], 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) 4.087602951s ago: executing program 6 (id=6135): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) io_setup(0x3ff, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setregid(0xffffffffffffffff, r7) 3.487950953s ago: executing program 7 (id=6138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 3.076885488s ago: executing program 8 (id=6140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f00000004000000080900", @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000040026e0000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.040641733s ago: executing program 7 (id=6142): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) 2.914735584s ago: executing program 1 (id=6143): modify_ldt$write2(0x11, &(0x7f0000000080)={0x800, 0x20000800, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r0) r1 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2.863696592s ago: executing program 8 (id=6144): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000002) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x100000006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.729501779s ago: executing program 3 (id=6145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.720937521s ago: executing program 8 (id=6146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x0, 0x1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.582448888s ago: executing program 7 (id=6147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x82c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x800, 0x2, [@TCA_U32_SEL={0x7f4, 0x5, {0x4, 0x6, 0x7f, 0x8, 0x9, 0x4, 0x3, 0xe0000000, [{0xfbab, 0x7, 0x10, 0x65d1}, {0x0, 0xf30, 0x5, 0x7f7}, {0x2, 0x6, 0x7ff, 0x5}, {0x3, 0x2, 0xd7, 0x8001}, {0x9a73, 0xfffffff7, 0x0, 0x3}, {0x2, 0x0, 0x5, 0xd8}, {0x800, 0xff0c, 0x200, 0x4}, {0x11d, 0xffffffff, 0x3, 0x3}, {0x7, 0x0, 0x7ea3, 0x44}, {0xf2b9, 0x5, 0x8, 0x9}, {0x0, 0x10, 0x2, 0x1}, {0x4, 0x0, 0x200, 0x40}, {0x0, 0x4, 0xf055, 0x4}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x200, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xfffffffe, 0x8}, {0x7, 0x3, 0x5, 0x9}, {0x10, 0xc6c, 0xd7d4, 0x583}, {0x40, 0xfff, 0x8, 0x1}, {0x0, 0x7fffffff, 0xffffe42a, 0x7fffffff}, {0x9, 0x400000, 0x200, 0x6}, {0x5, 0xd159, 0x3, 0x1}, {0x7, 0xfffffff9, 0x1, 0x6}, {0x8000, 0x3, 0x6, 0x9}, {0x4, 0x9, 0xb, 0x8}, {0x2851, 0xba92, 0x4, 0x8}, {0x0, 0xfffff000, 0x2}, {0x2, 0x43, 0x5, 0x100}, {0xfff, 0xfffffffe, 0x3}, {0x4, 0x1, 0x1, 0x9}, {0x7e, 0x7ff, 0x9, 0x2}, {0x8000000, 0x8, 0x3, 0x7}, {0x1ff, 0xa, 0x2, 0x7fa19284}, {0xfffff4c7, 0x8000, 0xffffffff, 0xed9c}, {0xc, 0x8, 0x81, 0x8}, {0x76, 0xac9, 0xffffffff}, {0xfffffff8, 0x0, 0x400, 0x920b209}, {0x401, 0xfffffc00, 0x8}, {0x4, 0x6, 0x9, 0x2}, {0x5, 0x1, 0x1e, 0x401}, {0x9e0, 0x3000, 0xd, 0x7ff}, {0x6f, 0xfffffffe, 0x401, 0x8}, {0x0, 0x0, 0x400, 0x1000}, {0x101, 0xe, 0xfffffff7}, {0x4, 0xfffffff8, 0x9, 0x9}, {0xffff798d, 0x9, 0x401, 0x1ff}, {0x1, 0x1, 0x123e, 0x2}, {0x6d1b, 0x1, 0x16, 0xf}, {0x7, 0x7, 0x2, 0x6}, {0x6fe, 0x4, 0x6, 0x1}, {0x41, 0x9, 0x8, 0x2}, {0xda, 0x5}, {0x38, 0x1ff, 0x64500, 0x9}, {0x101, 0xffffc514, 0x2, 0x7}, {0x7fffffff, 0x9, 0x7, 0x3}, {0x7, 0x200, 0x6, 0x5}, {0x6, 0xffffffff, 0x6, 0x3f03}, {0x1000, 0x8, 0x9, 0x24e}, {0x6, 0x3, 0x6, 0x6677}, {0x1, 0xffffff87, 0x6, 0x7}, {0xdac, 0x0, 0xffffffd2, 0x3}, {0x4, 0x5, 0x10000, 0x5}, {0x2, 0x4, 0x38, 0x5}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x1, 0x100}, {0x6, 0x1ff, 0xd744, 0x1}, {0x7ff, 0x2, 0x7}, {0xa0000, 0xfffffffd, 0x2, 0x8000}, {0x4, 0x101, 0x3, 0x40}, {0xc, 0x2, 0xffffffff}, {0x3, 0x3, 0xffffffff, 0x6}, {0xa9e1, 0x4, 0x3, 0xffff335c}, {0xb1, 0x3, 0xdd, 0x1000}, {0x7, 0xea6, 0x2000, 0x1}, {0x7, 0xfffffffa, 0x7fff, 0x50000000}, {0x0, 0x1ff, 0x400}, {0x9, 0x200, 0x200008, 0x1}, {0x0, 0x76, 0xfff, 0x5}, {0x8001, 0x9, 0x3, 0x4}, {0x5, 0x4, 0x5a8, 0x9}, {0x2, 0x9, 0xffffffff, 0x6}, {0x9, 0x6, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x8}, {0x8000, 0x5, 0x4}, {0xfffff1a0, 0x80000001, 0x3, 0x7f}, {0x7, 0x4, 0xfff, 0x5}, {0xa, 0x0, 0x3, 0x12000}, {0x1, 0x563, 0x1000, 0x5}, {0x7, 0x8, 0x8001, 0xb}, {0x4, 0x94b4c656, 0x0, 0x1}, {0x401, 0x61d0, 0x7, 0x401}, {0xd, 0x7, 0x2, 0x7fff8}, {0x2, 0xfffffffa, 0xfffffffd, 0x3}, {0x6, 0x1, 0x3, 0x4}, {0x4307, 0x0, 0xec, 0x257b}, {0x9, 0x1, 0x101, 0x3}, {0x5, 0x138, 0x0, 0x401}, {0x5, 0x9, 0x80000000, 0xffffff07}, {0x6, 0x1200000, 0x3ff, 0x2}, {0x81, 0x8106, 0x5, 0x80000000}, {0x10000, 0x4, 0x4, 0x5}, {0x8, 0x200, 0x5, 0x7c0}, {0x1, 0x5, 0x2, 0x5}, {0x7, 0x15949c17, 0x2, 0x80}, {0x8, 0x6, 0x2}, {0xb9, 0x9, 0x4, 0x74f}, {0x4, 0xffff267c, 0x2, 0x8}, {0x3, 0xfffffff8, 0x1, 0x100002}, {0x7, 0x9040, 0x2, 0x8}, {0x8000, 0xff, 0xc7, 0x401}, {0x9, 0xcf84, 0x2, 0x8}, {0x7, 0x80000001, 0xb79, 0xc}, {0xbb55, 0x53dbf73a, 0x9, 0x8}, {0x9, 0xd0, 0x8, 0x4}, {0xb6d, 0x7, 0xea, 0x3}, {0xb7b, 0x7, 0x800, 0x1}, {0x5, 0x7d9, 0xff, 0x5}, {0x3, 0x2, 0xa458, 0x7}, {0x4, 0x2, 0xf9, 0x6}, {0x5, 0xfff, 0x0, 0x9d5}, {0x677, 0x4, 0x9, 0x5}, {0xaa1, 0x8, 0x401}, {0x0, 0x401, 0xfffffffe, 0x2}, {0x4, 0x0, 0x6, 0x1}, {0x5, 0x9, 0x9, 0xd}, {0x8, 0x9a, 0x6, 0x972}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.545584122s ago: executing program 6 (id=6148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xc, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.461405265s ago: executing program 3 (id=6149): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @exit, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x48980000, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r0, 0x0, &(0x7f00000009c0), 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) 1.854268232s ago: executing program 1 (id=6150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f080001"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c"], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 1.596905231s ago: executing program 1 (id=6151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 1.525008931s ago: executing program 7 (id=6152): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.344900577s ago: executing program 7 (id=6153): syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa9001800300000008c1ee"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.332711929s ago: executing program 3 (id=6154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.332278312s ago: executing program 8 (id=6155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) 1.281616063s ago: executing program 6 (id=6156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000007f000001000000000000000000000000090000000000000000000000000000000000000000000000fdffffffffffffff7009000000000000080000000000"], 0x150}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.182952768s ago: executing program 1 (id=6157): socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0x7}, 0x14) 1.149856955s ago: executing program 3 (id=6158): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, 0x0}, 0x9cdc2384056b48b8) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.013403289s ago: executing program 3 (id=6159): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) io_setup(0x3ff, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setregid(0xffffffffffffffff, r7) 980.844357ms ago: executing program 1 (id=6160): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) 671.567887ms ago: executing program 1 (id=6161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a0102000000000000000001000000090001007379"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x5, 0x38, 0x66, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}, {[@noop]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x2, 0x0, 0x1, 0x5, 0x3, 0x3, 0x0, 0x347b, 0x2, 0x4e20, 0x4e22}, 0x0, 0x2}}}}}}}}, 0x52) 173.683877ms ago: executing program 8 (id=6162): socket$inet(0x2, 0x2, 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac40, 0x10001, 0x47}, 0x2c) 140.868694ms ago: executing program 7 (id=6163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x82c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x800, 0x2, [@TCA_U32_SEL={0x7f4, 0x5, {0x4, 0x6, 0x7f, 0x8, 0x9, 0x4, 0x3, 0xe0000000, [{0xfbab, 0x7, 0x10, 0x65d1}, {0x0, 0xf30, 0x5, 0x7f7}, {0x2, 0x6, 0x7ff, 0x5}, {0x3, 0x2, 0xd7, 0x8001}, {0x9a73, 0xfffffff7, 0x0, 0x3}, {0x2, 0x0, 0x5, 0xd8}, {0x800, 0xff0c, 0x200, 0x4}, {0x11d, 0xffffffff, 0x3, 0x3}, {0x7, 0x0, 0x7ea3, 0x44}, {0xf2b9, 0x5, 0x8, 0x9}, {0x0, 0x10, 0x2, 0x1}, {0x4, 0x0, 0x200, 0x40}, {0x0, 0x4, 0xf055, 0x4}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x200, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xfffffffe, 0x8}, {0x7, 0x3, 0x5, 0x9}, {0x10, 0xc6c, 0xd7d4, 0x583}, {0x40, 0xfff, 0x8, 0x1}, {0x0, 0x7fffffff, 0xffffe42a, 0x7fffffff}, {0x9, 0x400000, 0x200, 0x6}, {0x5, 0xd159, 0x3, 0x1}, {0x7, 0xfffffff9, 0x1, 0x6}, {0x8000, 0x3, 0x6, 0x9}, {0x4, 0x9, 0xb, 0x8}, {0x2851, 0xba92, 0x4, 0x8}, {0x0, 0xfffff000, 0x2}, {0x2, 0x43, 0x5, 0x100}, {0xfff, 0xfffffffe, 0x3}, {0x4, 0x1, 0x1, 0x9}, {0x7e, 0x7ff, 0x9, 0x2}, {0x8000000, 0x8, 0x3, 0x7}, {0x1ff, 0xa, 0x2, 0x7fa19284}, {0xfffff4c7, 0x8000, 0xffffffff, 0xed9c}, {0xc, 0x8, 0x81, 0x8}, {0x76, 0xac9, 0xffffffff}, {0xfffffff8, 0x0, 0x400, 0x920b209}, {0x401, 0xfffffc00, 0x8}, {0x4, 0x6, 0x9, 0x2}, {0x5, 0x1, 0x1e, 0x401}, {0x9e0, 0x3000, 0xd, 0x7ff}, {0x6f, 0xfffffffe, 0x401, 0x8}, {0x0, 0x0, 0x400, 0x1000}, {0x101, 0xe, 0xfffffff7}, {0x4, 0xfffffff8, 0x9, 0x9}, {0xffff798d, 0x9, 0x401, 0x1ff}, {0x1, 0x1, 0x123e, 0x2}, {0x6d1b, 0x1, 0x16, 0xf}, {0x7, 0x7, 0x2, 0x6}, {0x6fe, 0x4, 0x6, 0x1}, {0x41, 0x9, 0x8, 0x2}, {0xda, 0x5}, {0x38, 0x1ff, 0x64500, 0x9}, {0x101, 0xffffc514, 0x2, 0x7}, {0x7fffffff, 0x9, 0x7, 0x3}, {0x7, 0x200, 0x6, 0x5}, {0x6, 0xffffffff, 0x6, 0x3f03}, {0x1000, 0x8, 0x9, 0x24e}, {0x6, 0x3, 0x6, 0x6677}, {0x1, 0xffffff87, 0x6, 0x7}, {0xdac, 0x0, 0xffffffd2, 0x3}, {0x4, 0x5, 0x10000, 0x5}, {0x2, 0x4, 0x38, 0x5}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x1, 0x100}, {0x6, 0x1ff, 0xd744, 0x1}, {0x7ff, 0x2, 0x7}, {0xa0000, 0xfffffffd, 0x2, 0x8000}, {0x4, 0x101, 0x3, 0x40}, {0xc, 0x2, 0xffffffff}, {0x3, 0x3, 0xffffffff, 0x6}, {0xa9e1, 0x4, 0x3, 0xffff335c}, {0xb1, 0x3, 0xdd, 0x1000}, {0x7, 0xea6, 0x2000, 0x1}, {0x7, 0xfffffffa, 0x7fff, 0x50000000}, {0x0, 0x1ff, 0x400}, {0x9, 0x200, 0x200008, 0x1}, {0x0, 0x76, 0xfff, 0x5}, {0x8001, 0x9, 0x3, 0x4}, {0x5, 0x4, 0x5a8, 0x9}, {0x2, 0x9, 0xffffffff, 0x6}, {0x9, 0x6, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x8}, {0x8000, 0x5, 0x4}, {0xfffff1a0, 0x80000001, 0x3, 0x7f}, {0x7, 0x4, 0xfff, 0x5}, {0xa, 0x0, 0x3, 0x12000}, {0x1, 0x563, 0x1000, 0x5}, {0x7, 0x8, 0x8001, 0xb}, {0x4, 0x94b4c656, 0x0, 0x1}, {0x401, 0x61d0, 0x7, 0x401}, {0xd, 0x7, 0x2, 0x7fff8}, {0x2, 0xfffffffa, 0xfffffffd, 0x3}, {0x6, 0x1, 0x3, 0x4}, {0x4307, 0x0, 0xec, 0x257b}, {0x9, 0x1, 0x101, 0x3}, {0x5, 0x138, 0x0, 0x401}, {0x5, 0x9, 0x80000000, 0xffffff07}, {0x6, 0x1200000, 0x3ff, 0x2}, {0x81, 0x8106, 0x5, 0x80000000}, {0x10000, 0x4, 0x4, 0x5}, {0x8, 0x200, 0x5, 0x7c0}, {0x1, 0x5, 0x2, 0x5}, {0x7, 0x15949c17, 0x2, 0x80}, {0x8, 0x6, 0x2}, {0xb9, 0x9, 0x4, 0x74f}, {0x4, 0xffff267c, 0x2, 0x8}, {0x3, 0xfffffff8, 0x1, 0x100002}, {0x7, 0x9040, 0x2, 0x8}, {0x8000, 0xff, 0xc7, 0x401}, {0x9, 0xcf84, 0x2, 0x8}, {0x7, 0x80000001, 0xb79, 0xc}, {0xbb55, 0x53dbf73a, 0x9, 0x8}, {0x9, 0xd0, 0x8, 0x4}, {0xb6d, 0x7, 0xea, 0x3}, {0xb7b, 0x7, 0x800, 0x1}, {0x5, 0x7d9, 0xff, 0x5}, {0x3, 0x2, 0xa458, 0x7}, {0x4, 0x2, 0xf9, 0x6}, {0x5, 0xfff, 0x0, 0x9d5}, {0x677, 0x4, 0x9, 0x5}, {0xaa1, 0x8, 0x401}, {0x0, 0x401, 0xfffffffe, 0x2}, {0x4, 0x0, 0x6, 0x1}, {0x5, 0x9, 0x9, 0xd}, {0x8, 0x9a, 0x6, 0x972}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 76.125896ms ago: executing program 8 (id=6164): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 3 (id=6165): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @exit, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x48980000, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r0, 0x0, &(0x7f00000009c0), 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 7][T15216] IPVS: stop unused estimator thread 0... [ 1195.850246][T18148] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1195.856834][T18148] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.881220][T18148] vhci_hcd vhci_hcd.0: Device attached [ 1196.151291][ T5866] usb 43-1: new high-speed USB device number 12 using vhci_hcd [ 1196.441777][ T5949] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1196.580277][T18147] syz.2.3569: attempt to access beyond end of device [ 1196.580277][T18147] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1196.687963][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.751070][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1196.799283][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1196.841912][ T973] vhci_hcd: vhci_device speed not set [ 1196.848294][ T5949] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1196.866710][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.021859][ T5949] usb 6-1: Product: syz [ 1197.026250][ T5949] usb 6-1: Manufacturer: syz [ 1197.031009][ T5949] usb 6-1: SerialNumber: syz [ 1197.048948][ T5949] usb 6-1: config 0 descriptor?? [ 1197.083038][ T5949] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1197.252232][ T5949] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1197.260124][ T5949] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1198.687715][T18149] vhci_hcd: connection reset by peer [ 1198.693585][ T973] usb 6-1: USB disconnect, device number 31 [ 1198.700386][ T973] garmin_gps 6-1:0.0: device disconnected [ 1198.726526][T15211] vhci_hcd: stop threads [ 1198.730845][T15211] vhci_hcd: release socket [ 1198.778236][T15211] vhci_hcd: disconnect device [ 1198.860185][T17939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1199.014099][T17939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1199.159565][T17939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1199.210232][T17939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1199.600695][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.695777][T17939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.758046][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.765135][ T7764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.810904][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.818045][ T8375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.935453][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1201.668061][ T5866] vhci_hcd: vhci_device speed not set [ 1201.761954][T18246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1201.768498][T18246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1201.776132][T18246] vhci_hcd vhci_hcd.0: Device attached [ 1202.051432][T13796] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 1202.116081][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3597'. [ 1203.053184][T18264] pimreg: entered allmulticast mode [ 1203.070239][T18250] vhci_hcd: connection reset by peer [ 1203.098330][ T13] vhci_hcd: stop threads [ 1203.135575][ T13] vhci_hcd: release socket [ 1203.177958][ T13] vhci_hcd: disconnect device [ 1203.459244][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.620093][T17939] veth0_vlan: entered promiscuous mode [ 1203.693086][T17939] veth1_vlan: entered promiscuous mode [ 1203.847934][T17939] veth0_macvtap: entered promiscuous mode [ 1203.914999][T17939] veth1_macvtap: entered promiscuous mode [ 1204.265400][T17939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.903655][T17939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.968898][T15211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.045224][T15211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.143272][T15211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.196511][T15211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.460070][T15216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.509668][T15216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.651596][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.679576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.159550][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1207.213161][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1208.192177][T13796] vhci_hcd: vhci_device speed not set [ 1208.269257][T15211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.352983][T15211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.447427][ T5949] IPVS: starting estimator thread 0... [ 1208.533546][T15211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1208.553003][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.560428][T15211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.560447][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.578764][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.579080][T18398] IPVS: using max 31 ests per chain, 74400 per kthread [ 1208.605375][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.625004][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.685327][T18381] team_slave_0: entered promiscuous mode [ 1208.691069][T18381] team_slave_1: entered promiscuous mode [ 1208.718527][T18381] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1208.727082][T18381] team0: Device macvtap1 is already an upper device of the team interface [ 1208.746117][T18381] team_slave_0: left promiscuous mode [ 1208.751728][T18381] team_slave_1: left promiscuous mode [ 1208.927752][T18393] lo speed is unknown, defaulting to 1000 [ 1209.047662][T18396] netlink: 'syz.5.3632': attribute type 5 has an invalid length. [ 1209.307605][T15211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.328047][T15211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.612593][T15211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.654553][T15211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.957326][T18393] wg1 speed is unknown, defaulting to 1000 [ 1210.029756][T18402] lo speed is unknown, defaulting to 1000 [ 1210.043117][T18393] lo speed is unknown, defaulting to 1000 [ 1210.718244][ T5871] Bluetooth: hci2: command tx timeout [ 1211.044299][T18402] wg1 speed is unknown, defaulting to 1000 [ 1211.063617][T15211] bridge_slave_1: left allmulticast mode [ 1211.230238][T15211] bridge_slave_1: left promiscuous mode [ 1211.256859][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.294555][T15211] : left allmulticast mode [ 1211.566616][T15211] bridge0: port 1() entered disabled state [ 1211.710482][T15211] vlan2: left promiscuous mode [ 1211.728675][T15211] veth0_to_hsr: left promiscuous mode [ 1211.757576][T15211] bridge9: port 2(vlan2) entered disabled state [ 1212.509730][T15211] veth3: left allmulticast mode [ 1212.536095][T15211] veth3: left promiscuous mode [ 1212.591571][T15211] bridge9: port 1(veth3) entered disabled state [ 1212.752472][ T5871] Bluetooth: hci2: command tx timeout [ 1213.881047][T18455] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3644'. [ 1214.449200][T15211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.463836][T15211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.479022][T15211] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1214.488928][T15211] bond0 (unregistering): Released all slaves [ 1214.516512][T15211] bond1 (unregistering): Released all slaves [ 1214.545368][T15211] bond2 (unregistering): Released all slaves [ 1214.563289][T15211] bond3 (unregistering): Released all slaves [ 1214.583581][T15211] bond4 (unregistering): Released all slaves [ 1214.597371][T15211] bond5 (unregistering): Released all slaves [ 1214.610655][T18402] lo speed is unknown, defaulting to 1000 [ 1214.745425][T18460] 8021q: VLANs not supported on vxcan1 [ 1214.768945][T18465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 1214.831431][ T5871] Bluetooth: hci2: command tx timeout [ 1215.103599][T15211] tipc: Left network mode [ 1215.188305][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3653'. [ 1215.199033][T18476] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3652'. [ 1215.227373][T18476] openvswitch: netlink: Flow actions attr not present in new flow. [ 1215.350755][T18402] chnl_net:caif_netlink_parms(): no params data found [ 1217.147511][ T5871] Bluetooth: hci2: command tx timeout [ 1217.500888][T18522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3661'. [ 1217.636312][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 1217.803487][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.810670][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.840600][T18402] bridge_slave_0: entered allmulticast mode [ 1217.867871][T18532] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1217.874437][T18532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1217.906507][T18532] vhci_hcd vhci_hcd.0: Device attached [ 1217.916949][T18402] bridge_slave_0: entered promiscuous mode [ 1218.141186][T12677] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 1218.521597][T15211] hsr_slave_0: left promiscuous mode [ 1218.537775][T15211] hsr_slave_1: left promiscuous mode [ 1218.710881][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.731208][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.887408][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.899266][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.930080][T15211] veth1_macvtap: left promiscuous mode [ 1218.949889][T15211] veth0_macvtap: left promiscuous mode [ 1218.955685][T15211] veth1_vlan: left promiscuous mode [ 1218.965057][T15211] veth0_vlan: left promiscuous mode [ 1220.299090][T15211] team0 (unregistering): Port device team_slave_1 removed [ 1220.351763][T15211] team0 (unregistering): Port device team_slave_0 removed [ 1220.389130][T18560] netlink: 'syz.5.3668': attribute type 4 has an invalid length. [ 1220.478891][T18561] netlink: 'syz.5.3668': attribute type 4 has an invalid length. [ 1220.504187][T18533] vhci_hcd: connection reset by peer [ 1220.522047][T15216] vhci_hcd: stop threads [ 1220.538885][T15216] vhci_hcd: release socket [ 1220.555580][T15216] vhci_hcd: disconnect device [ 1220.596120][T18522] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1220.597234][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.614561][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.622690][T18402] bridge_slave_1: entered allmulticast mode [ 1220.629710][T18402] bridge_slave_1: entered promiscuous mode [ 1220.840653][ T5934] lo speed is unknown, defaulting to 1000 [ 1220.843881][T18402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.858760][ T9] lo speed is unknown, defaulting to 1000 [ 1220.858792][T18534] lo speed is unknown, defaulting to 1000 [ 1220.875261][T18402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.098875][T18402] team0: Port device team_slave_0 added [ 1221.679085][T18402] team0: Port device team_slave_1 added [ 1221.921777][T18587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1221.954066][T18587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1222.059862][T18582] "syz.3.3671" (18582) uses obsolete ecb(arc4) skcipher [ 1222.517475][T18402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.641233][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.042671][T18402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.432515][T18402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.572521][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.002749][T18402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.312770][T12677] vhci_hcd: vhci_device speed not set [ 1224.326492][T18601] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1224.363427][T18534] wg1 speed is unknown, defaulting to 1000 [ 1224.370228][T18534] lo speed is unknown, defaulting to 1000 [ 1224.558626][T18402] hsr_slave_0: entered promiscuous mode [ 1224.583827][T18402] hsr_slave_1: entered promiscuous mode [ 1224.622955][T18402] debugfs: 'hsr0' already exists in 'hsr' [ 1224.634717][T18402] Cannot create hsr debugfs directory [ 1224.880490][T18626] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1224.887237][T18626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1224.963461][T18626] vhci_hcd vhci_hcd.0: Device attached [ 1225.084248][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3682'. [ 1225.165635][ T5956] usb 47-1: new high-speed USB device number 4 using vhci_hcd [ 1225.310058][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.392118][T18633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.474651][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.484307][T18633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.541368][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1225.555693][T18639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1225.853945][T18639] tipc: Failed to remove unknown binding: 66,1,1/0:517916582/517916584 [ 1225.864955][ T5866] IPVS: starting estimator thread 0... [ 1225.872813][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.892909][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1226.012757][T18643] IPVS: using max 30 ests per chain, 72000 per kthread [ 1226.690912][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1226.836052][ T9] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1226.850518][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.867688][ T9] usb 8-1: Product: syz [ 1226.874293][ T9] usb 8-1: Manufacturer: syz [ 1226.878903][ T9] usb 8-1: SerialNumber: syz [ 1227.009950][T18638] tipc: Failed to remove unknown binding: 66,1,1/0:517916582/517916584 [ 1227.048629][T18638] tipc: Failed to remove unknown binding: 66,1,1/0:517916582/517916584 [ 1227.059461][ T9] usb 8-1: config 0 descriptor?? [ 1227.082561][ T9] garmin_gps 8-1:0.0: Garmin GPS usb/tty converter detected [ 1227.094976][ T9] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1227.104017][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1227.217391][T18638] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1227.508846][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1228.642197][T18402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1228.691258][T18402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1228.704074][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1228.936653][T18402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1228.936783][ T9] usb 8-1: USB disconnect, device number 4 [ 1228.978507][T18627] vhci_hcd: connection reset by peer [ 1228.984765][ T9] garmin_gps 8-1:0.0: device disconnected [ 1229.008614][ T8379] vhci_hcd: stop threads [ 1229.016864][ T8379] vhci_hcd: release socket [ 1229.038714][T18402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1229.043617][ T8379] vhci_hcd: disconnect device [ 1229.107776][T18679] syzkaller0: entered promiscuous mode [ 1229.120623][T18679] syzkaller0: entered allmulticast mode [ 1229.674356][T18402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.380079][T18402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.468572][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.475720][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.582872][ T5956] vhci_hcd: vhci_device speed not set [ 1230.590727][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.597863][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.424165][T18738] overlayfs: missing 'lowerdir' [ 1231.924154][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1232.680410][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1232.772639][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1232.903368][T18402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.008931][T18402] veth0_vlan: entered promiscuous mode [ 1233.069846][T18402] veth1_vlan: entered promiscuous mode [ 1233.319628][T18402] veth0_macvtap: entered promiscuous mode [ 1233.368744][T18402] veth1_macvtap: entered promiscuous mode [ 1233.443150][T18402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.509671][T18402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.559956][T15211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.623990][T15211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.694237][T15211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.752512][T15211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.213803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.243277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.317811][ T7764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.335205][ T7764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.346973][T18799] tipc: Started in network mode [ 1234.360176][T18799] tipc: Node identity 2a840703ccfc, cluster identity 4711 [ 1234.389078][T18799] tipc: Enabled bearer , priority 0 [ 1234.438901][T18799] syzkaller0: entered promiscuous mode [ 1234.498295][T18799] syzkaller0: entered allmulticast mode [ 1234.608688][T18799] tipc: Resetting bearer [ 1234.667841][T18798] tipc: Resetting bearer [ 1234.778591][T18798] tipc: Disabling bearer [ 1235.305293][T16592] bridge0: port 3(syz_tun) entered disabled state [ 1235.335566][T16592] syz_tun (unregistering): left allmulticast mode [ 1235.342192][T16592] syz_tun (unregistering): left promiscuous mode [ 1235.348566][T16592] bridge0: port 3(syz_tun) entered disabled state [ 1235.753305][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1235.845126][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.041012][ T9] wg1 speed is unknown, defaulting to 1000 [ 1236.052133][ T9] syz0: Port: 1 Link DOWN [ 1236.193289][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.217207][T11840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1236.227847][T11840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1236.239350][T11840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1236.243524][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.272960][T11840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1236.280702][T11840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1236.600098][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.791277][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.102702][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.171199][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.258678][T18835] lo speed is unknown, defaulting to 1000 [ 1237.625178][ T59] bridge_slave_1: left allmulticast mode [ 1237.630854][ T59] bridge_slave_1: left promiscuous mode [ 1237.709113][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.790434][ T59] : left allmulticast mode [ 1237.827082][ T59] : left promiscuous mode [ 1237.851900][ T59] bridge0: port 1() entered disabled state [ 1238.371166][T11840] Bluetooth: hci4: command tx timeout [ 1238.678745][ T59] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1239.057655][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.074777][ T59] bond_slave_0: left promiscuous mode [ 1239.100381][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.554501][ T59] bond_slave_1: left promiscuous mode [ 1239.793801][ T59] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1239.817813][ T59] batadv0: left promiscuous mode [ 1239.824073][ T59] bond0 (unregistering): Released all slaves [ 1239.846455][ T59] bond1 (unregistering): Released all slaves [ 1239.887472][ T59] bond2 (unregistering): Released all slaves [ 1239.927405][ T59] bond3 (unregistering): Released all slaves [ 1239.967643][ T59] bond4 (unregistering): Released all slaves [ 1239.993607][T18835] wg1 speed is unknown, defaulting to 1000 [ 1240.042241][T18835] lo speed is unknown, defaulting to 1000 [ 1240.181397][ T59] : left promiscuous mode [ 1240.431712][T11840] Bluetooth: hci4: command tx timeout [ 1241.175430][T18835] chnl_net:caif_netlink_parms(): no params data found [ 1241.580902][ T59] hsr_slave_0: left promiscuous mode [ 1241.631464][ T59] hsr_slave_1: left promiscuous mode [ 1241.647859][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.678661][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.693846][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.719545][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.783445][T18964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3765'. [ 1241.800856][ T59] veth1_macvtap: left promiscuous mode [ 1241.807342][ T59] veth0_macvtap: left promiscuous mode [ 1241.824526][ T59] veth1_vlan: left promiscuous mode [ 1241.835497][ T59] veth0_vlan: left promiscuous mode [ 1241.917348][ T59] pimreg (unregistering): left allmulticast mode [ 1242.008426][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1242.029377][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1242.243681][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.263519][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.277151][T18835] bridge_slave_0: entered allmulticast mode [ 1242.293069][T18835] bridge_slave_0: entered promiscuous mode [ 1242.303671][T18976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1242.315612][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.327058][T18835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.347930][T18835] bridge_slave_1: entered allmulticast mode [ 1242.372348][T18835] bridge_slave_1: entered promiscuous mode [ 1242.437199][T18976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1242.512592][T11840] Bluetooth: hci4: command tx timeout [ 1242.683390][T18835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.699124][T18976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1242.715038][T18835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.183299][T18835] team0: Port device team_slave_0 added [ 1243.230730][ T59] IPVS: stop unused estimator thread 0... [ 1243.237181][T18835] team0: Port device team_slave_1 added [ 1243.680766][T18835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.761038][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.884312][T18835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.943456][T18835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.983682][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.050971][T18835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.073953][T18879] mpoa:mpoad_close: () going down [ 1244.284922][T18835] hsr_slave_0: entered promiscuous mode [ 1244.315908][T18835] hsr_slave_1: entered promiscuous mode [ 1244.338267][T18835] debugfs: 'hsr0' already exists in 'hsr' [ 1244.354423][T18835] Cannot create hsr debugfs directory [ 1244.617559][T11840] Bluetooth: hci4: command tx timeout [ 1246.423147][T19084] overlayfs: missing 'lowerdir' [ 1247.047859][T18835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1247.145577][T18835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1247.243715][T18835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1247.305317][T18835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1247.355478][T19109] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3803'. [ 1247.404953][T19104] bpq0: entered promiscuous mode [ 1248.459816][T18835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.533319][T19100] lo speed is unknown, defaulting to 1000 [ 1248.556306][T18835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.666451][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.673643][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.857444][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.864600][T15216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.069960][T19140] overlayfs: missing 'lowerdir' [ 1249.698885][T19100] lo speed is unknown, defaulting to 1000 [ 1250.868536][T18835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.033504][T18835] veth0_vlan: entered promiscuous mode [ 1251.079826][T18835] veth1_vlan: entered promiscuous mode [ 1251.184409][T18835] veth0_macvtap: entered promiscuous mode [ 1251.282164][T18835] veth1_macvtap: entered promiscuous mode [ 1251.345512][T18835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.369330][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3823'. [ 1251.408441][T18835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.440287][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1251.597530][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.842870][ T8379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.317065][ T8379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.361426][ T8379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.640798][T15212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.683047][T15212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.011812][T19213] overlayfs: missing 'lowerdir' [ 1253.487091][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.631976][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.802476][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3728'. [ 1253.852363][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3728'. [ 1256.069027][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.078507][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.096063][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.104301][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.113315][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.260650][T19250] lo speed is unknown, defaulting to 1000 [ 1256.305510][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3840'. [ 1256.474898][T19250] lo speed is unknown, defaulting to 1000 [ 1257.293487][T19280] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 1257.334597][ T5949] IPVS: starting estimator thread 0... [ 1257.393482][T19281] netlink: 'syz.2.3845': attribute type 5 has an invalid length. [ 1257.465209][T19285] IPVS: using max 31 ests per chain, 74400 per kthread [ 1257.480889][T19278] lo speed is unknown, defaulting to 1000 [ 1257.545320][T19250] chnl_net:caif_netlink_parms(): no params data found [ 1257.647658][T19298] netlink: 'syz.3.3849': attribute type 4 has an invalid length. [ 1258.167214][T19296] netlink: 'syz.3.3849': attribute type 4 has an invalid length. [ 1258.206925][T11840] Bluetooth: hci1: command tx timeout [ 1258.269080][T19297] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1258.275652][T19297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1258.284606][T19297] vhci_hcd vhci_hcd.0: Device attached [ 1258.360136][T19307] vhci_hcd: connection closed [ 1258.360459][ T59] vhci_hcd: stop threads [ 1258.383026][ T59] vhci_hcd: release socket [ 1258.387452][ T59] vhci_hcd: disconnect device [ 1258.444371][T19250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.458377][T19250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.508159][T19250] bridge_slave_0: entered allmulticast mode [ 1258.559907][T19250] bridge_slave_0: entered promiscuous mode [ 1259.002217][T19250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.167304][T19250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.202884][T19250] bridge_slave_1: entered allmulticast mode [ 1259.210041][T19250] bridge_slave_1: entered promiscuous mode [ 1259.283027][T19278] lo speed is unknown, defaulting to 1000 [ 1259.306895][T19250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.894660][T19250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.271942][T11840] Bluetooth: hci1: command tx timeout [ 1260.324749][T19250] team0: Port device team_slave_0 added [ 1260.341652][T19250] team0: Port device team_slave_1 added [ 1260.762921][T19341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 1261.530626][T19250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.560896][T19250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.586847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.922792][T19250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.154272][T19250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.200034][T19250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.370624][T11840] Bluetooth: hci1: command tx timeout [ 1262.464904][T19361] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1262.471440][T19361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1262.479612][T19361] vhci_hcd vhci_hcd.0: Device attached [ 1262.531780][T19363] vhci_hcd: connection closed [ 1262.548462][ T8379] vhci_hcd: stop threads [ 1262.610917][T19250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.675164][ T8379] vhci_hcd: release socket [ 1262.754036][ T8379] vhci_hcd: disconnect device [ 1262.811318][ T9] usb 47-1: new high-speed USB device number 5 using vhci_hcd [ 1263.195267][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1263.355368][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1263.868526][T19250] hsr_slave_0: entered promiscuous mode [ 1263.884333][T19250] hsr_slave_1: entered promiscuous mode [ 1263.890475][T19250] debugfs: 'hsr0' already exists in 'hsr' [ 1263.897061][T19250] Cannot create hsr debugfs directory [ 1264.431250][T11840] Bluetooth: hci1: command tx timeout [ 1264.502992][T19389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 1265.500823][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1265.582994][T19250] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.625945][T19250] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.671542][T19412] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1265.678091][T19412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1265.687591][T19412] vhci_hcd vhci_hcd.0: Device attached [ 1265.821699][T19413] vhci_hcd: connection closed [ 1265.935749][ T8373] vhci_hcd: stop threads [ 1265.985239][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3884'. [ 1265.998792][ T5956] usb 39-1: new high-speed USB device number 10 using vhci_hcd [ 1266.078337][ T8373] vhci_hcd: release socket [ 1266.133194][ T8373] vhci_hcd: disconnect device [ 1266.138170][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3884'. [ 1267.172297][T19250] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.225376][T19250] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.638289][T19250] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.673808][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1268.011878][ T9] vhci_hcd: vhci_device speed not set [ 1268.203376][T19250] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.437311][T19250] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.470595][T19250] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.487053][T19460] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1269.493634][T19460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1269.501744][T19460] vhci_hcd vhci_hcd.0: Device attached [ 1269.604835][T19464] vhci_hcd: connection closed [ 1269.612999][ T8373] vhci_hcd: stop threads [ 1269.767746][ T8373] vhci_hcd: release socket [ 1269.811240][ T9] usb 47-1: new high-speed USB device number 6 using vhci_hcd [ 1269.849468][ T8373] vhci_hcd: disconnect device [ 1270.422375][T19250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1270.487879][T19250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1270.556861][T19250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1270.624120][T19250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1270.961336][T19478] overlayfs: missing 'lowerdir' [ 1271.518030][ T5956] vhci_hcd: vhci_device speed not set [ 1271.815499][T19490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 1271.844792][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3909'. [ 1272.790262][T19250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.839436][T19250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.869730][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.876880][ T7764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.905493][T19510] bpq0: left promiscuous mode [ 1272.913612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.920792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.228586][T19524] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1273.235175][T19524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1273.243065][T19524] vhci_hcd vhci_hcd.0: Device attached [ 1273.364859][T19525] vhci_hcd: connection closed [ 1273.374070][T15216] vhci_hcd: stop threads [ 1273.511551][T12677] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 1273.574336][T15216] vhci_hcd: release socket [ 1273.677748][T15216] vhci_hcd: disconnect device [ 1274.951359][ T9] vhci_hcd: vhci_device speed not set [ 1275.016985][T19250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.096491][T19544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 1275.952606][T19556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1276.362103][T19250] veth0_vlan: entered promiscuous mode [ 1276.391418][T19250] veth1_vlan: entered promiscuous mode [ 1277.193279][T19580] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1277.199855][T19580] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1277.207931][T19580] vhci_hcd vhci_hcd.0: Device attached [ 1277.247486][T19586] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1277.270317][T19584] vhci_hcd: connection closed [ 1277.340178][ T13] vhci_hcd: stop threads [ 1277.432891][ T13] vhci_hcd: release socket [ 1277.515564][ T13] vhci_hcd: disconnect device [ 1277.949037][T19250] veth0_macvtap: entered promiscuous mode [ 1277.962322][T19250] veth1_macvtap: entered promiscuous mode [ 1277.983621][T19250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.996910][T19250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.101218][ T8373] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.134678][ T8373] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.173373][ T8373] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.194152][ T8373] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.742533][T12677] vhci_hcd: vhci_device speed not set [ 1279.873333][ T8373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.909479][ T8373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.014915][ T6621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.043531][ T6621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.694554][T19636] netlink: zone id is out of range [ 1282.784498][T19636] netlink: zone id is out of range [ 1283.305892][T19648] netlink: del zone limit has 4 unknown bytes [ 1283.335167][T19636] netlink: set zone limit has 4 unknown bytes [ 1286.434545][T19686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1286.441156][T19686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1286.449045][T19686] vhci_hcd vhci_hcd.0: Device attached [ 1286.752230][T12677] usb 39-1: new high-speed USB device number 11 using vhci_hcd [ 1286.786000][T19687] vhci_hcd: connection closed [ 1286.789578][ T8373] vhci_hcd: stop threads [ 1286.930660][ T8373] vhci_hcd: release socket [ 1287.040546][ T8373] vhci_hcd: disconnect device [ 1289.039471][T19716] binder: 19709:19716 ioctl 4018620d 0 returned -22 [ 1290.006846][T19728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3989'. [ 1290.833714][T19758] binder: 19750:19758 ioctl 4018620d 0 returned -22 [ 1291.873120][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 1291.913986][T19777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1291.941833][T12677] vhci_hcd: vhci_device speed not set [ 1292.707085][T19805] binder: 19793:19805 ioctl 4018620d 0 returned -22 [ 1293.429484][T19799] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4017'. [ 1293.446798][T19811] tipc: Started in network mode [ 1293.466297][T19811] tipc: Node identity 8eccace0fe28, cluster identity 4711 [ 1293.496292][T19811] tipc: Enabled bearer , priority 0 [ 1293.512253][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1293.620680][T19827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1293.666018][T19811] tipc: Resetting bearer [ 1293.846273][T19810] tipc: Resetting bearer [ 1294.070465][T19810] tipc: Disabling bearer [ 1295.384759][T19868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1295.388837][T19866] bpq0: entered promiscuous mode [ 1296.060940][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4053'. [ 1297.152599][T19924] netlink: 'syz.2.4061': attribute type 4 has an invalid length. [ 1297.186426][T19924] netlink: 'syz.2.4061': attribute type 4 has an invalid length. [ 1297.413004][T19926] netlink: zone id is out of range [ 1297.459226][T19926] netlink: zone id is out of range [ 1297.530105][T19927] netlink: del zone limit has 4 unknown bytes [ 1297.724408][T19926] netlink: set zone limit has 4 unknown bytes [ 1298.435981][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4072'. [ 1300.087883][T19979] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4085'. [ 1302.695242][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4094'. [ 1302.934776][T20009] lo speed is unknown, defaulting to 1000 [ 1303.312617][T20009] lo speed is unknown, defaulting to 1000 [ 1304.414601][T20034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4103'. [ 1304.690032][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1305.362755][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1308.864196][T20124] netlink: 'syz.5.4136': attribute type 4 has an invalid length. [ 1309.443929][T20124] netlink: 'syz.5.4136': attribute type 4 has an invalid length. [ 1310.971371][T20144] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4143'. [ 1311.486639][T20152] bpq0: left promiscuous mode [ 1313.247278][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1315.009346][T20207] tipc: Started in network mode [ 1315.036932][T20207] tipc: Node identity de89ca54e4c9, cluster identity 4711 [ 1315.075928][T20207] tipc: Enabled bearer , priority 0 [ 1315.111975][T20211] syzkaller0: entered promiscuous mode [ 1315.168801][T20211] syzkaller0: entered allmulticast mode [ 1315.282159][T20207] tipc: Resetting bearer [ 1315.384824][T20206] tipc: Resetting bearer [ 1315.449517][T20206] tipc: Disabling bearer [ 1315.530091][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4174'. [ 1316.023840][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4178'. [ 1316.589036][T20252] bpq0: entered promiscuous mode [ 1316.958145][T20265] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4191'. [ 1317.290150][T20278] bpq0: left promiscuous mode [ 1317.505487][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1317.927611][T20300] bpq0: entered promiscuous mode [ 1318.798930][T20309] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4209'. [ 1319.666384][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4219'. [ 1319.941829][T20342] binder: 20336:20342 ioctl c0306201 0 returned -14 [ 1321.031340][T20354] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4225'. [ 1321.521901][T20373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1324.720453][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1324.923272][T20426] Bluetooth: MGMT ver 1.23 [ 1325.433193][T20437] netlink: 'syz.7.4257': attribute type 10 has an invalid length. [ 1325.460050][T20437] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4257'. [ 1325.562112][T20437] team0: Port device geneve0 added [ 1325.698211][T20444] tipc: Enabled bearer , priority 0 [ 1325.712309][T20444] syzkaller0: entered promiscuous mode [ 1325.725160][T20444] syzkaller0: entered allmulticast mode [ 1325.757487][T20444] tipc: Resetting bearer [ 1325.761567][T20449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4259'. [ 1325.811616][T20441] tipc: Resetting bearer [ 1325.832873][T20441] tipc: Disabling bearer [ 1325.845383][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4263'. [ 1326.052243][T20453] binder: 20442:20453 ioctl c0306201 0 returned -14 [ 1327.246438][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4269'. [ 1330.209600][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1331.319114][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1332.290740][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4299'. [ 1332.961418][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1333.233018][ T5870] Bluetooth: hci3: command 0x0405 tx timeout [ 1333.446282][T20585] bpq0: left promiscuous mode [ 1334.588240][T20615] bpq0: entered promiscuous mode [ 1335.394974][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1335.426026][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4325'. [ 1335.564803][T20636] bpq0: left promiscuous mode [ 1336.262011][T20655] bpq0: entered promiscuous mode [ 1336.366993][T20660] bpq0: left promiscuous mode [ 1336.551709][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1337.001560][T20666] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1337.697884][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1337.715715][T20690] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 1337.755550][T20690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4352'. [ 1337.785493][T20690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1339.245777][T20742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4369'. [ 1341.258683][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4382'. [ 1341.633455][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4388'. [ 1342.591566][T20799] bpq0: entered promiscuous mode [ 1345.185973][T20852] netlink: 'syz.3.4415': attribute type 9 has an invalid length. [ 1347.859890][T20897] lo speed is unknown, defaulting to 1000 [ 1348.048366][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1348.744771][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.870718][T20897] lo speed is unknown, defaulting to 1000 [ 1349.362517][T20928] tipc: Started in network mode [ 1349.450863][T20928] tipc: Node identity 2a9b5dc6e3dd, cluster identity 4711 [ 1349.686849][T20928] tipc: Enabled bearer , priority 0 [ 1349.811861][T20933] syzkaller0: entered promiscuous mode [ 1349.823549][T20933] syzkaller0: entered allmulticast mode [ 1349.843366][T20928] tipc: Resetting bearer [ 1349.882094][T20927] tipc: Resetting bearer [ 1349.936740][T20927] tipc: Disabling bearer [ 1351.067310][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4443'. [ 1351.326750][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1352.589260][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4453'. [ 1354.469561][T21000] mpoa:mpoad_close: () going down [ 1355.840530][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1355.852543][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1355.939425][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4474'. [ 1359.712289][T11840] Bluetooth: hci4: command 0x0406 tx timeout [ 1360.196312][T21114] binder: 21107:21114 ioctl c0306201 0 returned -14 [ 1360.715057][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1360.727307][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1363.532079][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1365.281921][T21185] bpq0: left promiscuous mode [ 1365.836819][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1367.456355][T21232] bpq0: entered promiscuous mode [ 1368.139020][T21243] bpq0: left promiscuous mode [ 1368.622168][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4553'. [ 1370.820148][T21294] bpq0: entered promiscuous mode [ 1370.828084][T21295] bpq0: left promiscuous mode [ 1371.004607][T21306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4566'. [ 1373.236279][T21376] netlink: 'syz.2.4593': attribute type 4 has an invalid length. [ 1373.269175][T21385] netlink: 'syz.7.4597': attribute type 12 has an invalid length. [ 1373.279865][T21385] netlink: 'syz.7.4597': attribute type 29 has an invalid length. [ 1373.349899][T21385] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4597'. [ 1373.393488][T21385] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4597'. [ 1376.983887][T21443] bpq0: entered promiscuous mode [ 1377.230455][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1377.495592][T21462] tipc: Enabled bearer , priority 0 [ 1377.726146][T21468] syzkaller0: entered promiscuous mode [ 1377.736719][T21468] syzkaller0: entered allmulticast mode [ 1377.773058][T21462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1377.977141][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1378.069979][T21474] tipc: Resetting bearer [ 1378.119552][T21461] tipc: Resetting bearer [ 1378.221398][T21461] tipc: Disabling bearer [ 1379.251606][T21492] bpq0: left promiscuous mode [ 1381.239539][T21527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1381.848058][T21537] bpq0: entered promiscuous mode [ 1382.012263][T21539] bpq0: left promiscuous mode [ 1383.016078][T21550] tipc: Started in network mode [ 1383.032399][T21550] tipc: Node identity 9e60466fce07, cluster identity 4711 [ 1383.049857][T21550] tipc: Enabled bearer , priority 0 [ 1383.102788][T21550] syzkaller0: entered promiscuous mode [ 1383.110807][T21550] syzkaller0: entered allmulticast mode [ 1383.262985][T21569] netlink: 'syz.5.4649': attribute type 8 has an invalid length. [ 1383.286484][T21549] tipc: Resetting bearer [ 1383.355432][T21549] tipc: Disabling bearer [ 1383.429382][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 1386.409436][T21633] tipc: Enabled bearer , priority 0 [ 1386.513863][T21633] syzkaller0: entered promiscuous mode [ 1386.519343][T21633] syzkaller0: entered allmulticast mode [ 1386.654465][T21632] tipc: Resetting bearer [ 1386.696031][T21632] tipc: Disabling bearer [ 1387.250650][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4686'. [ 1388.428934][T21685] tipc: Started in network mode [ 1388.460047][T21685] tipc: Node identity 080211000001, cluster identity 4711 [ 1388.468563][T21685] tipc: Enabled bearer , priority 0 [ 1388.483443][T21685] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 1388.497733][T21685] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 1388.955790][T21707] "syz.5.4701" (21707) uses obsolete ecb(arc4) skcipher [ 1389.032425][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1389.145737][T21718] tipc: Enabled bearer , priority 0 [ 1389.153546][T21718] syzkaller0: entered promiscuous mode [ 1389.159235][T21718] syzkaller0: entered allmulticast mode [ 1389.176841][T21717] tipc: Resetting bearer [ 1389.200413][T21717] tipc: Disabling bearer [ 1389.583500][ T9] tipc: Node number set to 134418688 [ 1389.585524][T21730] syz_tun: entered allmulticast mode [ 1389.608110][T21729] syz_tun: left allmulticast mode [ 1391.554913][T21757] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4727'. [ 1391.725338][T21755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.871391][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1392.033887][T21777] bridge_slave_0: left allmulticast mode [ 1392.040123][T21777] bridge_slave_0: left promiscuous mode [ 1392.080319][T21777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.566996][T21780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1392.602779][T21777] bridge_slave_1: left allmulticast mode [ 1392.622194][T21777] bridge_slave_1: left promiscuous mode [ 1392.654653][T21777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.787568][T21777] bond0: (slave bond_slave_0): Releasing backup interface [ 1392.809061][T21777] bond0: (slave bond_slave_1): Releasing backup interface [ 1392.826673][T21777] team0: Port device team_slave_0 removed [ 1392.840374][T21777] team0: Port device team_slave_1 removed [ 1392.849545][T21777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.861337][T21777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.879905][T21777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.892354][T21777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.963398][T21780] team0: Mode changed to "broadcast" [ 1392.977688][T21788] tipc: Enabled bearer , priority 0 [ 1393.014775][ T59] tipc: Resetting bearer [ 1393.025981][T21782] vlan0: entered promiscuous mode [ 1393.126557][T21782] team0: Port device vlan0 added [ 1393.694878][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1393.897104][T21821] lo speed is unknown, defaulting to 1000 [ 1394.159386][T21821] lo speed is unknown, defaulting to 1000 [ 1394.374147][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1395.957754][T21863] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4753'. [ 1395.982245][T21862] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4753'. [ 1397.978841][T21892] syzkaller0: entered promiscuous mode [ 1398.537616][T21892] syzkaller0: entered allmulticast mode [ 1400.266000][T21930] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4771'. [ 1400.946269][T21941] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1401.012027][T21941] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1401.275097][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4776'. [ 1402.725248][T21967] netlink: 'syz.6.4783': attribute type 16 has an invalid length. [ 1402.762509][T21967] netlink: 'syz.6.4783': attribute type 17 has an invalid length. [ 1403.529219][T21967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.815125][T21989] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1403.824256][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1405.142893][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'. [ 1405.435140][T15216] tipc: Resetting bearer [ 1406.200890][T22069] "syz.2.4809" (22069) uses obsolete ecb(arc4) skcipher [ 1407.764675][T22092] vlan0: entered promiscuous mode [ 1407.816421][T22092] team0: Port device vlan0 added [ 1407.848140][T22090] syzkaller0: entered promiscuous mode [ 1407.868756][T22090] syzkaller0: entered allmulticast mode [ 1408.239292][T22117] "syz.7.4824" (22117) uses obsolete ecb(arc4) skcipher [ 1410.798485][T22167] tipc: Resetting bearer [ 1414.000615][T22238] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4852'. [ 1415.501323][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 1416.642006][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1416.825606][T22300] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4875'. [ 1416.854660][T22300] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 1417.152764][T22308] tipc: Resetting bearer [ 1418.442040][T22347] netlink: 'syz.3.4891': attribute type 4 has an invalid length. [ 1418.455677][T22347] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4891'. [ 1419.220451][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4900'. [ 1419.255477][T22376] team0: No ports can be present during mode change [ 1420.163105][T22411] bond0: (slave dummy0): Releasing backup interface [ 1420.194293][T22416] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4909'. [ 1420.209904][T22411] bridge_slave_0: left allmulticast mode [ 1420.227048][T22411] bridge_slave_0: left promiscuous mode [ 1420.234731][T22411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.249877][T22411] bridge_slave_1: left allmulticast mode [ 1420.256273][T22411] bridge_slave_1: left promiscuous mode [ 1420.262124][T22411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.359149][T22411] bond0: (slave bond_slave_0): Releasing backup interface [ 1420.373014][T22411] bond0: (slave bond_slave_1): Releasing backup interface [ 1420.401340][T22411] team0: Port device team_slave_0 removed [ 1420.410869][T22411] team0: Port device team_slave_1 removed [ 1420.420341][T22411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.436115][T22411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.445873][T22411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.456302][T22411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.474462][T22411] team0: Port device vlan0 removed [ 1420.489368][T22411] team0: Port device geneve0 removed [ 1420.504625][T22413] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1420.516179][T22416] team0: Mode changed to "broadcast" [ 1420.798647][T22431] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4917'. [ 1421.748363][T22463] netlink: 'syz.1.4927': attribute type 4 has an invalid length. [ 1422.198585][T22473] bridge_slave_0: left allmulticast mode [ 1422.208589][T22473] bridge_slave_0: left promiscuous mode [ 1422.218428][T22473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.253631][T22477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4933'. [ 1422.556654][T22473] bridge_slave_1: left allmulticast mode [ 1422.567365][T22473] bridge_slave_1: left promiscuous mode [ 1422.573460][T22473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.588390][T22473] bond0: (slave bond_slave_0): Releasing backup interface [ 1422.605843][T22473] bond0: (slave bond_slave_1): Releasing backup interface [ 1422.724574][T22473] team0: Port device team_slave_0 removed [ 1422.739062][T22473] team0: Port device team_slave_1 removed [ 1422.754779][T22473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.831247][T22473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.453323][T22473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.608590][T22473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.665236][T22477] team0: Mode changed to "broadcast" [ 1423.686195][T22482] netlink: 'syz.6.4934': attribute type 4 has an invalid length. [ 1423.720995][T22482] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4934'. [ 1424.013147][T22498] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4939'. [ 1424.024608][T22498] team0: No ports can be present during mode change [ 1426.895333][T22546] netlink: 'syz.7.4955': attribute type 4 has an invalid length. [ 1429.122586][T22569] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4961'. [ 1429.567218][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4963'. [ 1430.327432][T22592] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4967'. [ 1430.354315][T22592] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1432.046581][T22624] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4976'. [ 1432.620622][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4981'. [ 1433.318577][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1433.345843][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1433.354867][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1433.364982][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1433.373169][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1433.598555][T22641] lo speed is unknown, defaulting to 1000 [ 1433.814884][T22658] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4986'. [ 1433.853442][T22641] lo speed is unknown, defaulting to 1000 [ 1434.956725][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4993'. [ 1434.976136][T22673] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1435.121026][T15211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.220212][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4996'. [ 1435.515668][ T5870] Bluetooth: hci5: command tx timeout [ 1435.762955][T15211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.038143][T22701] "syz.3.5000" (22701) uses obsolete ecb(arc4) skcipher [ 1436.301073][T22641] chnl_net:caif_netlink_parms(): no params data found [ 1436.434677][T22707] tipc: Enabled bearer , priority 0 [ 1436.463599][T15211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.633552][T22707] syzkaller0: entered promiscuous mode [ 1436.639028][T22707] syzkaller0: entered allmulticast mode [ 1437.224481][T22706] tipc: Resetting bearer [ 1437.252442][T22706] tipc: Disabling bearer [ 1437.263245][T22707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5002'. [ 1437.286006][T15211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.411182][T22641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.425512][T22641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.453521][T22641] bridge_slave_0: entered allmulticast mode [ 1437.483710][T22641] bridge_slave_0: entered promiscuous mode [ 1437.522678][T22641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.529760][T22641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.551742][T11840] Bluetooth: hci5: command tx timeout [ 1437.571224][T22641] bridge_slave_1: entered allmulticast mode [ 1437.578145][T22641] bridge_slave_1: entered promiscuous mode [ 1437.771653][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5010'. [ 1438.003291][T22721] bridge_slave_0: left allmulticast mode [ 1438.067731][T22721] bridge_slave_0: left promiscuous mode [ 1438.144798][T22721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.187440][T22721] bridge_slave_1: left allmulticast mode [ 1438.197698][T22721] bridge_slave_1: left promiscuous mode [ 1438.220322][T22721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.752802][T22721] bond0: (slave bond_slave_0): Releasing backup interface [ 1438.799604][T22721] bond0: (slave bond_slave_1): Releasing backup interface [ 1438.819868][T22721] team0: Port device team_slave_0 removed [ 1438.835700][T22721] team0: Port device team_slave_1 removed [ 1438.845222][T22721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.854958][T22721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.866187][T22721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.876330][T22721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.900452][T22726] vlan0: entered promiscuous mode [ 1438.913511][T22726] team0: Port device vlan0 added [ 1438.958212][T22641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.253811][T22641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.267529][T22780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5022'. [ 1439.323184][T22777] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5017'. [ 1439.475544][T22641] team0: Port device team_slave_0 added [ 1439.514370][T22781] tipc: Enabled bearer , priority 0 [ 1439.541721][T22789] syzkaller0: entered promiscuous mode [ 1439.548499][T22789] syzkaller0: entered allmulticast mode [ 1439.586976][T22641] team0: Port device team_slave_1 added [ 1439.631409][T11840] Bluetooth: hci5: command tx timeout [ 1439.753193][T22781] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5021'. [ 1439.809712][T22789] tipc: Resetting bearer [ 1439.901268][T22805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1440.044363][T22641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.096478][T22641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.242737][T22641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.273566][T15211] bridge_slave_1: left allmulticast mode [ 1440.279252][T15211] bridge_slave_1: left promiscuous mode [ 1440.302862][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.321627][T15211] bridge_slave_0: left allmulticast mode [ 1440.327343][T15211] bridge_slave_0: left promiscuous mode [ 1440.351408][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.542763][ T9] tipc: Node number set to 1348945519 [ 1440.842961][T15211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.937544][T15211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.983997][T15211] bond0 (unregistering): Released all slaves [ 1441.054316][T22778] tipc: Resetting bearer [ 1441.116102][T22778] tipc: Disabling bearer [ 1441.230602][T22641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.290367][T22641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.567538][T22641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.711062][T11840] Bluetooth: hci5: command tx timeout [ 1441.822279][T15211] tipc: Left network mode [ 1441.987335][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1442.555222][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1442.570301][T22641] hsr_slave_0: entered promiscuous mode [ 1442.603389][T22641] hsr_slave_1: entered promiscuous mode [ 1442.609451][T22641] debugfs: 'hsr0' already exists in 'hsr' [ 1442.651158][T22641] Cannot create hsr debugfs directory [ 1442.874761][T22872] netlink: 'syz.1.5041': attribute type 11 has an invalid length. [ 1443.571152][T15211] hsr_slave_0: left promiscuous mode [ 1443.611106][T15211] hsr_slave_1: left promiscuous mode [ 1443.630922][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.671869][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.698169][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.710911][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.753106][T15211] veth1_macvtap: left promiscuous mode [ 1443.781206][T15211] veth0_macvtap: left promiscuous mode [ 1443.786913][T15211] veth1_vlan: left promiscuous mode [ 1443.818234][T15211] veth0_vlan: left promiscuous mode [ 1444.540442][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5048'. [ 1444.578818][T15211] team0 (unregistering): Port device team_slave_1 removed [ 1444.601186][T15211] team0 (unregistering): Port device team_slave_0 removed [ 1444.751628][T22892] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5046'. [ 1444.859588][T22641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1444.908259][T22641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1444.950675][T22641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1444.988161][T22641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1445.130595][T22935] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1445.191308][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5049'. [ 1446.079706][T22960] tipc: Enabled bearer , priority 0 [ 1446.097323][T22960] syzkaller0: entered promiscuous mode [ 1446.126877][T22960] syzkaller0: entered allmulticast mode [ 1446.184998][T22641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.231446][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5058'. [ 1446.275982][T22960] tipc: Resetting bearer [ 1446.304992][T22641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.326574][T15211] IPVS: stop unused estimator thread 0... [ 1446.356947][T22957] tipc: Resetting bearer [ 1446.434669][T22957] tipc: Disabling bearer [ 1446.521866][T15213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.528984][T15213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.580659][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.595344][T15213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.602476][T15213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.617996][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.782472][T22641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1446.862170][T22999] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5067'. [ 1448.522858][T22641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.557655][T23030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5075'. [ 1448.841490][T23042] bpq0: entered promiscuous mode [ 1449.071482][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.118164][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.179911][T23059] bpq0: left promiscuous mode [ 1449.300142][T22641] veth0_vlan: entered promiscuous mode [ 1449.345352][T22641] veth1_vlan: entered promiscuous mode [ 1449.426317][T22641] veth0_macvtap: entered promiscuous mode [ 1449.478329][T22641] veth1_macvtap: entered promiscuous mode [ 1450.000711][T22641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.110458][T22641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.236667][T15213] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.327698][ T8373] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.332735][T23085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1450.339281][ T8373] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.390109][ T8373] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.605576][T15213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.628245][T15213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.682878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.711887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.813897][T23127] syzkaller0: entered promiscuous mode [ 1451.819459][T23127] syzkaller0: entered allmulticast mode [ 1452.074100][ T59] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1453.655627][T23141] tipc: Enabled bearer , priority 0 [ 1453.714751][T23144] syzkaller0: entered promiscuous mode [ 1453.720244][T23144] syzkaller0: entered allmulticast mode [ 1453.778540][T23152] tipc: Resetting bearer [ 1453.817774][T23140] tipc: Resetting bearer [ 1453.865023][T23140] tipc: Disabling bearer [ 1456.186694][T23214] tipc: Enabling of bearer rejected, already enabled [ 1456.210818][T23216] bpq0: entered promiscuous mode [ 1456.553829][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1457.423439][T23256] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5142'. [ 1457.779999][T23270] "syz.3.5149" (23270) uses obsolete ecb(arc4) skcipher [ 1457.836609][T23274] bpq0: left promiscuous mode [ 1460.005020][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5156'. [ 1460.311879][T23328] bpq0: entered promiscuous mode [ 1460.544151][T23337] bridge_slave_0: left allmulticast mode [ 1460.549903][T23337] bridge_slave_0: left promiscuous mode [ 1460.618695][T23337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.689298][T23337] bridge_slave_1: left allmulticast mode [ 1460.731145][T23337] bridge_slave_1: left promiscuous mode [ 1460.764344][T23337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.909846][T23337] bond0: (slave bond_slave_0): Releasing backup interface [ 1461.031080][T23337] bond0: (slave bond_slave_1): Releasing backup interface [ 1461.079453][T23337] team0: Port device team_slave_0 removed [ 1461.123655][T23337] team0: Port device team_slave_1 removed [ 1461.139272][T23337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.184866][T23337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.264255][T23337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.301730][T23337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.349673][T23338] vlan0: entered promiscuous mode [ 1461.401200][T23338] team0: Port device vlan0 added [ 1461.408207][T23340] tipc: Enabled bearer , priority 0 [ 1461.432650][T23342] syzkaller0: entered promiscuous mode [ 1461.438140][T23342] syzkaller0: entered allmulticast mode [ 1461.467641][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1461.589355][T23357] tipc: Resetting bearer [ 1461.619921][T23368] "syz.1.5175" (23368) uses obsolete ecb(arc4) skcipher [ 1461.680582][T23333] tipc: Resetting bearer [ 1461.798916][T23333] tipc: Disabling bearer [ 1462.611192][T23395] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1462.691442][T23395] veth1_macvtap: left promiscuous mode [ 1462.960624][T23406] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1462.986967][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5183'. [ 1463.046996][T23413] tipc: Resetting bearer [ 1463.119175][T23413] team0: Port device vlan0 removed [ 1463.170573][T23418] team0: Port device vlan0 added [ 1463.277725][T23428] "syz.6.5189" (23428) uses obsolete ecb(arc4) skcipher [ 1463.824402][T23445] tipc: Enabled bearer , priority 0 [ 1463.941301][T23448] syzkaller0: entered promiscuous mode [ 1463.952663][T23448] syzkaller0: entered allmulticast mode [ 1464.184544][T23445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1464.288075][T23448] tipc: Resetting bearer [ 1464.356057][T23464] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5197'. [ 1464.423570][T23468] netlink: 124 bytes leftover after parsing attributes in process `syz.8.5199'. [ 1464.477125][T23444] tipc: Resetting bearer [ 1464.508208][T23444] tipc: Disabling bearer [ 1464.594569][T23458] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5197'. [ 1464.614744][T23468] veth1_macvtap: left promiscuous mode [ 1465.402942][T23497] bpq0: left promiscuous mode [ 1465.667750][T23509] vlan0: entered promiscuous mode [ 1465.708322][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5214'. [ 1465.728512][T23509] team0: Port device vlan0 added [ 1465.795411][T23517] "syz.1.5215" (23517) uses obsolete ecb(arc4) skcipher [ 1466.830469][T23550] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1469.929645][T23616] tipc: Enabled bearer , priority 0 [ 1469.940056][T23616] syzkaller0: entered promiscuous mode [ 1469.953368][T23616] syzkaller0: entered allmulticast mode [ 1470.009926][T23616] tipc: Resetting bearer [ 1470.024081][T23614] tipc: Resetting bearer [ 1470.077044][T23614] tipc: Disabling bearer [ 1470.372827][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5266'. [ 1470.552586][T23644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5258'. [ 1471.453434][T23630] team0: Port device vlan0 removed [ 1471.541798][T23644] team0: Mode changed to "broadcast" [ 1471.640445][T23663] lo speed is unknown, defaulting to 1000 [ 1472.579774][T23663] lo speed is unknown, defaulting to 1000 [ 1474.703776][T23723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1474.729968][T23725] netlink: 116 bytes leftover after parsing attributes in process `syz.8.5293'. [ 1474.872434][T23720] team0: Port device vlan0 removed [ 1474.906827][T23723] team0: Unable to change to the same mode the team is in [ 1474.988706][ T13] tipc: Resetting bearer [ 1475.016084][T23731] netlink: 'syz.7.5294': attribute type 4 has an invalid length. [ 1475.278403][T23738] netlink: 'syz.1.5299': attribute type 7 has an invalid length. [ 1475.297619][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1476.307463][T23754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1477.036208][T23766] "syz.3.5307" (23766) uses obsolete ecb(arc4) skcipher [ 1477.194040][T23771] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5309'. [ 1477.456718][T23775] bpq0: entered promiscuous mode [ 1477.683276][T23782] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5313'. [ 1477.717512][T23779] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5313'. [ 1477.950262][T23793] bpq0: left promiscuous mode [ 1477.967035][T23795] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5318'. [ 1477.986774][T23791] syzkaller0: entered promiscuous mode [ 1477.994637][T23791] syzkaller0: entered allmulticast mode [ 1478.006556][T23795] team0: Unable to change to the same mode the team is in [ 1478.158093][T23805] "syz.3.5323" (23805) uses obsolete ecb(arc4) skcipher [ 1478.424639][T23817] bpq0: entered promiscuous mode [ 1478.497672][T23825] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1478.575853][T23822] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1478.926758][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1479.124026][T23842] vlan2: entered allmulticast mode [ 1479.137706][T23845] "syz.6.5339" (23845) uses obsolete ecb(arc4) skcipher [ 1479.153006][T23842] bond3: entered allmulticast mode [ 1479.442467][T23850] syzkaller0: entered promiscuous mode [ 1479.447998][T23850] syzkaller0: entered allmulticast mode [ 1480.278056][T23859] bpq0: left promiscuous mode [ 1480.594328][T23881] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5348'. [ 1480.594352][T23881] NCSI netlink: No device for ifindex 0 [ 1481.445819][T23906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5354'. [ 1481.709382][T11840] Bluetooth: hci5: link tx timeout [ 1481.714920][T11840] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1481.715087][T23920] "syz.3.5361" (23920) uses obsolete ecb(arc4) skcipher [ 1481.890417][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1482.804872][T23938] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1483.678905][T23937] vlan2: entered allmulticast mode [ 1483.678940][T23937] bond2: entered allmulticast mode [ 1483.801529][T11840] Bluetooth: hci5: command 0x0406 tx timeout [ 1484.164653][T23982] bpq0: entered promiscuous mode [ 1484.269395][T23995] bpq0: left promiscuous mode [ 1484.541440][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5384'. [ 1484.762399][T24016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1484.901844][T24016] vlan2: entered allmulticast mode [ 1484.907552][T24016] bond1: entered allmulticast mode [ 1485.731654][T24029] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.818414][T24037] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5396'. [ 1485.855850][T24035] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5396'. [ 1485.944158][T24029] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.064371][T24029] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.169661][T24046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1486.202341][T24029] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.469203][T24053] "syz.1.5403" (24053) uses obsolete ecb(arc4) skcipher [ 1486.645582][T15216] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.655992][T15216] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.741426][T15216] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.776691][T15216] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.858004][T24068] team0: Port device vlan0 added [ 1487.431911][T24075] syzkaller0: entered promiscuous mode [ 1487.437437][T24075] syzkaller0: entered allmulticast mode [ 1488.145261][T24055] lo speed is unknown, defaulting to 1000 [ 1488.504678][T24092] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1488.513215][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5413'. [ 1488.514607][T24098] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5415'. [ 1488.653116][T24099] tipc: Enabling of bearer rejected, already enabled [ 1488.711709][T24103] bpq0: entered promiscuous mode [ 1488.760715][T24055] lo speed is unknown, defaulting to 1000 [ 1488.893122][T24095] tipc: Resetting bearer [ 1488.902357][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5422'. [ 1489.097681][T24122] tipc: Enabling of bearer rejected, already enabled [ 1489.116079][T24122] tipc: Resetting bearer [ 1489.405557][ T13] tipc: Resetting bearer [ 1489.635929][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5438'. [ 1489.760335][T24151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1489.877404][ T7764] bridge_slave_1: left allmulticast mode [ 1489.891194][ T7764] bridge_slave_1: left promiscuous mode [ 1489.931680][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.972080][ T7764] : left allmulticast mode [ 1489.988124][ T7764] : left promiscuous mode [ 1490.017401][ T7764] bridge0: port 1() entered disabled state [ 1490.034886][T24158] netlink: 'syz.3.5444': attribute type 1 has an invalid length. [ 1490.195152][T24170] netlink: 'syz.1.5448': attribute type 4 has an invalid length. [ 1490.204860][T24170] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5448'. [ 1490.295303][ T7764] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1490.546762][ T7764] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 1490.555930][ T7764] bridge5 (unregistering): left promiscuous mode [ 1490.616734][ T7764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.628474][ T7764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.639545][ T7764] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1490.648731][ T7764] bond0 (unregistering): Released all slaves [ 1490.666201][ T7764] bond1 (unregistering): Released all slaves [ 1490.678209][ T7764] bond2 (unregistering): Released all slaves [ 1490.692076][ T7764] bond3 (unregistering): Released all slaves [ 1490.806601][T24164] bond1: entered promiscuous mode [ 1490.823803][T24164] bond1: entered allmulticast mode [ 1490.830110][T24164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1490.851039][T24167] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1490.894830][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5453'. [ 1491.047012][ T7764] : left promiscuous mode [ 1491.527009][T24195] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5457'. [ 1491.532205][T24189] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5457'. [ 1491.798732][T24208] "syz.7.5460" (24208) uses obsolete ecb(arc4) skcipher [ 1492.056597][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5467'. [ 1492.255141][T24229] openvswitch: netlink: Flow actions attr not present in new flow. [ 1492.297366][ T7764] hsr_slave_0: left promiscuous mode [ 1492.308401][ T7764] hsr_slave_1: left promiscuous mode [ 1492.314252][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.323608][ T7764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.338029][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.347166][ T7764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.375587][ T7764] veth1_macvtap: left promiscuous mode [ 1492.385409][ T7764] veth0_macvtap: left promiscuous mode [ 1492.402582][ T7764] veth1_vlan: left promiscuous mode [ 1492.408187][ T7764] veth0_vlan: left promiscuous mode [ 1493.157559][ T7764] team0 (unregistering): Port device team_slave_1 removed [ 1493.177870][ T7764] team0 (unregistering): Port device team_slave_0 removed [ 1493.272734][ T5866] lo speed is unknown, defaulting to 1000 [ 1493.316523][ T5866] infiniband syz1: ib_query_port failed (-19) [ 1494.029743][T24255] sctp: [Deprecated]: syz.7.5478 (pid 24255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1494.029743][T24255] Use struct sctp_sack_info instead [ 1494.062804][T24258] __nla_validate_parse: 3 callbacks suppressed [ 1494.062833][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1494.062872][T24258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1494.192346][T24266] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1494.239096][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5484'. [ 1494.514701][T24277] syzkaller0: entered promiscuous mode [ 1494.535667][T24277] syzkaller0: entered allmulticast mode [ 1494.663778][T24281] bpq0: left promiscuous mode [ 1494.681300][ T7764] IPVS: stop unused estimator thread 0... [ 1494.832010][T24288] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1494.904407][T24293] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5491'. [ 1495.148575][T24285] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1495.272961][T24302] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1495.306442][T24302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.436870][T24321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1497.239840][T24354] !: renamed from dummy0 [ 1497.763725][T24374] tipc: Enabling of bearer rejected, already enabled [ 1497.798334][T24366] lo speed is unknown, defaulting to 1000 [ 1498.080088][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1499.679794][T24467] lo speed is unknown, defaulting to 1000 [ 1499.870578][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5534'. [ 1500.201252][T11840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1500.208706][T11840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1500.218228][T11840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1500.227306][T11840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1500.237916][T11840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1500.334855][T24475] lo speed is unknown, defaulting to 1000 [ 1500.567172][T24486] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5538'. [ 1500.623934][T15212] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.648786][T24486] team0: Unable to change to the same mode the team is in [ 1500.695240][T15212] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.748817][T15212] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.859209][T15212] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.954851][T24475] chnl_net:caif_netlink_parms(): no params data found [ 1501.091743][T24507] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5544'. [ 1501.105268][T24503] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5544'. [ 1501.148513][T24475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.177316][T24475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.201395][T24475] bridge_slave_0: entered allmulticast mode [ 1501.212721][T24475] bridge_slave_0: entered promiscuous mode [ 1501.224586][T24512] syzkaller0: entered promiscuous mode [ 1501.247638][T24512] syzkaller0: entered allmulticast mode [ 1501.261798][T24475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.269141][T24475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.279294][T24475] bridge_slave_1: entered allmulticast mode [ 1501.286625][T24475] bridge_slave_1: entered promiscuous mode [ 1501.297948][T15212] bridge_slave_1: left allmulticast mode [ 1501.303891][T15212] bridge_slave_1: left promiscuous mode [ 1501.309682][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.321249][T15212] bridge_slave_0: left allmulticast mode [ 1501.327344][T15212] bridge_slave_0: left promiscuous mode [ 1501.333474][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.427480][T15212] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1501.577098][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.587741][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.597975][T15212] bond0 (unregistering): Released all slaves [ 1501.614005][T15212] bond1 (unregistering): Released all slaves [ 1501.626457][T15212] bond2 (unregistering): Released all slaves [ 1501.642783][T15212] bond3 (unregistering): Released all slaves [ 1501.786101][T15212] tipc: Left network mode [ 1501.799795][T24475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.843899][T24475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.989842][T24540] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5552'. [ 1502.148532][T24540] team0: Unable to change to the same mode the team is in [ 1502.161987][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5555'. [ 1502.163923][T24475] team0: Port device team_slave_0 added [ 1502.205545][T24549] bpq0: entered promiscuous mode [ 1502.236636][T24475] team0: Port device team_slave_1 added [ 1502.281059][T11840] Bluetooth: hci2: command tx timeout [ 1502.519278][T24475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.535464][T24475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.596392][T24475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.634017][T24475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.642064][T24475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.669805][T24475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.781465][T24562] infiniband syz1: set down [ 1502.786083][T24562] infiniband syz1: added ipvlan0 [ 1502.948563][T24562] RDS/IB: syz1: added [ 1502.954403][T24578] "syz.1.5561" (24578) uses obsolete ecb(arc4) skcipher [ 1502.984976][T24562] smc: adding ib device syz1 with port count 1 [ 1502.993714][T24562] smc: ib device syz1 port 1 has pnetid [ 1503.265179][T24585] bpq0: left promiscuous mode [ 1503.276441][T24475] hsr_slave_0: entered promiscuous mode [ 1503.289453][T24475] hsr_slave_1: entered promiscuous mode [ 1503.301575][T24475] debugfs: 'hsr0' already exists in 'hsr' [ 1503.309594][T24475] Cannot create hsr debugfs directory [ 1503.361142][T24586] syzkaller0: entered promiscuous mode [ 1503.367816][T24586] syzkaller0: entered allmulticast mode [ 1503.673119][T15212] hsr_slave_0: left promiscuous mode [ 1503.702301][T15212] hsr_slave_1: left promiscuous mode [ 1503.722414][T15212] veth1_macvtap: left promiscuous mode [ 1503.754700][T15212] veth0_macvtap: left promiscuous mode [ 1503.760301][T15212] veth1_vlan: left promiscuous mode [ 1504.351000][T11840] Bluetooth: hci2: command tx timeout [ 1504.476637][T15212] team0 (unregistering): Port device vlan0 removed [ 1504.547064][T15212] team0 (unregistering): Port device team_slave_1 removed [ 1504.565690][T15212] team0 (unregistering): Port device team_slave_0 removed [ 1504.797126][T24631] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5578'. [ 1505.417070][T24638] tipc: Resetting bearer [ 1505.432441][T24636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1505.511683][T24638] team0: Port device vlan0 removed [ 1505.558665][T24636] team0: Unable to change to the same mode the team is in [ 1505.621154][T24643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1505.881489][T24645] tipc: Enabling of bearer rejected, already enabled [ 1506.038474][T24475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1506.063726][T24475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1506.079364][T24475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1506.168415][T24657] team0: Port device vlan0 added [ 1506.177358][T24475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1506.255255][T24652] tipc: Started in network mode [ 1506.261375][T24652] tipc: Node identity 0633886166fc, cluster identity 4711 [ 1506.269494][T24652] tipc: Enabled bearer , priority 0 [ 1506.289143][T24668] tipc: Enabling of bearer rejected, already enabled [ 1506.312663][T24652] tipc: Resetting bearer [ 1506.400135][T24651] tipc: Disabling bearer [ 1506.431109][T11840] Bluetooth: hci2: command tx timeout [ 1506.581147][T24475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.634930][T24475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.667863][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.675049][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.719099][T24682] bpq0: entered promiscuous mode [ 1506.748579][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.755793][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.925472][T24475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1506.977678][T24475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1508.167618][T24726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1508.221090][T24718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1508.426570][T24475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.511069][T11840] Bluetooth: hci2: command tx timeout [ 1508.924239][T24475] veth0_vlan: entered promiscuous mode [ 1508.938803][T24475] veth1_vlan: entered promiscuous mode [ 1509.155823][T24475] veth0_macvtap: entered promiscuous mode [ 1509.256408][T24475] veth1_macvtap: entered promiscuous mode [ 1509.532677][T24475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.576083][T24475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.614021][ T7764] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.677770][ T7764] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.709079][ T7764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.744313][ T8379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.962048][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.969885][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.978160][T15215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.998249][T15215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.043898][T15215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.053449][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.071823][T15215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.079399][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.788718][T24807] lo speed is unknown, defaulting to 1000 [ 1511.570250][T24818] tipc: Enabled bearer , priority 0 [ 1511.600686][T24818] syzkaller0: entered promiscuous mode [ 1511.600700][T24820] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1511.646325][T24818] syzkaller0: entered allmulticast mode [ 1511.718647][T24818] tipc: Resetting bearer [ 1511.730361][T24817] tipc: Resetting bearer [ 1511.738645][T24817] tipc: Disabling bearer [ 1511.914206][T15215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.935001][T15215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.472393][T24849] tipc: Enabling of bearer rejected, failed to enable media [ 1512.696750][T24859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5643'. [ 1512.956565][T24869] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5647'. [ 1513.073688][T24873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5648'. [ 1513.577408][T24899] syzkaller0: entered promiscuous mode [ 1513.588727][T24899] syzkaller0: entered allmulticast mode [ 1513.736316][T24907] lo speed is unknown, defaulting to 1000 [ 1514.091971][T24909] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5662'. [ 1514.225452][T24915] tipc: Enabling of bearer rejected, failed to enable media [ 1514.340122][T24924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1515.392819][T24422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.415348][T24422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.554696][T24944] syzkaller0: entered promiscuous mode [ 1515.570819][T24944] syzkaller0: entered allmulticast mode [ 1516.048503][T24970] syzkaller0: entered promiscuous mode [ 1516.065004][T24970] syzkaller0: entered allmulticast mode [ 1516.088576][T24962] tipc: Enabled bearer , priority 0 [ 1516.245613][T24941] tipc: Resetting bearer [ 1516.438247][T24941] tipc: Disabling bearer [ 1516.482235][T25000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5689'. [ 1516.610740][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1516.662037][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1516.723480][T24999] syzkaller0: entered promiscuous mode [ 1516.751926][T24999] syzkaller0: entered allmulticast mode [ 1516.760085][T25009] tipc: Enabled bearer , priority 0 [ 1516.818540][T25016] syzkaller0: entered promiscuous mode [ 1516.830986][T25016] syzkaller0: entered allmulticast mode [ 1516.857529][T24999] tipc: Resetting bearer [ 1516.885053][T24998] tipc: Resetting bearer [ 1516.969074][T24998] tipc: Disabling bearer [ 1516.978227][T25027] netlink: 'syz.6.5698': attribute type 10 has an invalid length. [ 1517.000211][T25022] bpq0: left promiscuous mode [ 1517.015770][T25027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.023273][T25027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.042670][T25027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.049788][T25027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.057282][T25027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.064418][T25027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.146879][T25027] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1517.463259][T25050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1518.189253][T25094] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5723'. [ 1519.720851][T25139] tipc: Enabling of bearer rejected, already enabled [ 1520.007692][T25148] tipc: Enabled bearer , priority 0 [ 1520.059276][T25149] syzkaller0: entered promiscuous mode [ 1520.107042][T25149] syzkaller0: entered allmulticast mode [ 1520.154003][T25154] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5752'. [ 1520.235590][T25148] tipc: Resetting bearer [ 1520.251921][T25147] tipc: Resetting bearer [ 1520.288776][T25147] tipc: Disabling bearer [ 1520.453579][T25165] tipc: Started in network mode [ 1520.458465][T25165] tipc: Node identity ce02318711f1, cluster identity 4711 [ 1520.487993][T25165] tipc: Enabled bearer , priority 0 [ 1520.511973][T25165] syzkaller0: entered promiscuous mode [ 1520.517440][T25165] syzkaller0: entered allmulticast mode [ 1520.565973][T25165] tipc: Resetting bearer [ 1520.581516][T25164] tipc: Resetting bearer [ 1520.627779][T25178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1520.650788][T25164] tipc: Disabling bearer [ 1520.740410][T25182] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1521.297002][T25192] tipc: Enabling of bearer rejected, failed to enable media [ 1521.457442][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5769'. [ 1521.515740][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5773'. [ 1522.015997][T25227] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1522.026431][ T5957] IPVS: starting estimator thread 0... [ 1522.131399][T25231] IPVS: using max 33 ests per chain, 79200 per kthread [ 1522.374077][T25246] netlink: 'syz.1.5788': attribute type 4 has an invalid length. [ 1522.376489][T25250] tipc: Enabled bearer , priority 0 [ 1522.416426][T25250] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1522.511921][T25250] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5790'. [ 1522.576895][T25263] tipc: Resetting bearer [ 1522.600440][T25249] tipc: Disabling bearer [ 1522.715076][T25269] syzkaller0: entered promiscuous mode [ 1522.720618][T25269] syzkaller0: entered allmulticast mode [ 1522.816346][T25271] tipc: Enabled bearer , priority 0 [ 1522.866641][T25271] syzkaller0: entered promiscuous mode [ 1522.880961][T25271] syzkaller0: entered allmulticast mode [ 1522.905665][T25271] tipc: Resetting bearer [ 1522.949728][T25270] tipc: Resetting bearer [ 1522.975571][T25270] tipc: Disabling bearer [ 1523.014089][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5800'. [ 1523.030796][T25290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5804'. [ 1523.088354][T25285] tipc: Enabled bearer , priority 0 [ 1523.127858][T25285] syzkaller0: entered promiscuous mode [ 1523.135499][T25285] syzkaller0: entered allmulticast mode [ 1523.204958][T25285] tipc: Resetting bearer [ 1523.216532][T25284] tipc: Resetting bearer [ 1523.238427][T25284] tipc: Disabling bearer [ 1523.249201][T25294] netlink: 'syz.1.5806': attribute type 12 has an invalid length. [ 1523.305567][T25292] tipc: Enabled bearer , priority 0 [ 1523.313825][T25292] syzkaller0: entered promiscuous mode [ 1523.348698][T25292] syzkaller0: entered allmulticast mode [ 1523.365301][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1523.541759][T25292] tipc: Resetting bearer [ 1523.712381][T25291] tipc: Resetting bearer [ 1523.727977][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5810'. [ 1523.751622][T25291] tipc: Disabling bearer [ 1524.654759][T15212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.664435][T15212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.672339][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5819'. [ 1524.688824][T25333] tipc: Enabled bearer , priority 0 [ 1524.712741][T25333] syzkaller0: entered promiscuous mode [ 1524.718219][T25333] syzkaller0: entered allmulticast mode [ 1524.756720][T25332] tipc: Resetting bearer [ 1524.813911][T25332] tipc: Disabling bearer [ 1525.001743][T25354] sctp: [Deprecated]: syz.8.5826 (pid 25354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1525.001743][T25354] Use struct sctp_sack_info instead [ 1525.052194][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5827'. [ 1525.136197][T25359] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1525.158319][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5828'. [ 1525.298688][T25365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1525.305378][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5828'. [ 1525.342030][T25365] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1525.903145][T25362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1526.532302][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5834'. [ 1527.095133][T25419] team0: No ports can be present during mode change [ 1527.130853][T25421] netlink: 'syz.6.5843': attribute type 1 has an invalid length. [ 1527.166365][T25421] block nbd1: not configured, cannot reconfigure [ 1529.279864][T25504] lo speed is unknown, defaulting to 1000 [ 1529.643022][ T59] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1530.327289][T25534] __nla_validate_parse: 2 callbacks suppressed [ 1530.327323][T25534] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5872'. [ 1530.597180][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5876'. [ 1531.256927][ T8379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.288010][ T8379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.929675][T25606] syzkaller0: entered promiscuous mode [ 1531.949604][T25606] syzkaller0: entered allmulticast mode [ 1532.260558][T25629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5903'. [ 1533.006566][T25644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5910'. [ 1533.782878][T15215] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1533.983398][T25673] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5917'. [ 1534.034658][T25669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.095291][T25669] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1534.476378][T25700] tipc: Enabling of bearer rejected, already enabled [ 1534.491318][T25700] netlink: 39 bytes leftover after parsing attributes in process `syz.1.5926'. [ 1535.268789][T25718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5932'. [ 1535.625708][T25732] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5936'. [ 1535.850490][T25744] syzkaller0: entered promiscuous mode [ 1535.889837][T25744] syzkaller0: entered allmulticast mode [ 1535.999475][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5942'. [ 1536.075173][T25751] tipc: Enabled bearer , priority 0 [ 1536.115610][T25751] syzkaller0: entered promiscuous mode [ 1536.145148][T25751] syzkaller0: entered allmulticast mode [ 1536.306542][T25762] netlink: 39 bytes leftover after parsing attributes in process `syz.7.5943'. [ 1536.341257][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5948'. [ 1536.350698][T25751] tipc: Resetting bearer [ 1536.406468][T25772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1536.492547][T25748] tipc: Resetting bearer [ 1536.580638][T25748] tipc: Disabling bearer [ 1536.748850][T25772] team0: Unable to change to the same mode the team is in [ 1537.563164][ T7764] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1537.632982][T25808] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5953'. [ 1538.178901][ T59] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1538.216533][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5965'. [ 1538.311346][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1538.781744][T25859] tipc: Enabled bearer , priority 0 [ 1538.895032][T25859] syzkaller0: entered promiscuous mode [ 1538.922665][T25859] syzkaller0: entered allmulticast mode [ 1538.929954][T25859] tipc: Resetting bearer [ 1539.007359][T25868] lo speed is unknown, defaulting to 1000 [ 1539.063143][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5975'. [ 1539.135504][T25876] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5977'. [ 1539.269355][T25878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1539.309759][T25878] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1539.390072][T25857] tipc: Resetting bearer [ 1539.504956][ T9] IPVS: starting estimator thread 0... [ 1539.510727][T25889] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1539.555173][T25857] tipc: Disabling bearer [ 1539.591375][T25891] IPVS: using max 33 ests per chain, 79200 per kthread [ 1539.617044][T25872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1540.090162][T25905] tipc: Enabled bearer , priority 0 [ 1540.125712][T25902] tipc: Disabling bearer [ 1540.247809][T25919] syzkaller0: entered promiscuous mode [ 1540.264723][T25919] syzkaller0: entered allmulticast mode [ 1540.399672][T25922] tipc: Enabling of bearer rejected, already enabled [ 1540.448547][T15215] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1540.619913][T25939] IPv6: Can't replace route, no match found [ 1540.635938][T25941] __nla_validate_parse: 4 callbacks suppressed [ 1540.635963][T25941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1540.734172][T25946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1540.875670][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6002'. [ 1540.894900][T25944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1540.904331][T25944] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1540.915462][T25946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1540.926997][T25951] lo speed is unknown, defaulting to 1000 [ 1541.513702][T25971] tipc: Enabled bearer , priority 0 [ 1541.521487][T25971] syzkaller0: entered promiscuous mode [ 1541.527275][T25971] syzkaller0: entered allmulticast mode [ 1542.084600][T25970] tipc: Resetting bearer [ 1542.092666][T25970] tipc: Disabling bearer [ 1542.467964][T25982] ipvlan2: entered promiscuous mode [ 1542.618376][T25996] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6015'. [ 1543.524034][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6026'. [ 1543.531738][T26040] bond0: entered promiscuous mode [ 1543.541733][T26040] bond_slave_0: entered promiscuous mode [ 1543.571903][T26040] bond_slave_1: entered promiscuous mode [ 1543.619401][T26040] bridge0: entered promiscuous mode [ 1543.728491][T26040] batadv0: entered promiscuous mode [ 1543.784747][T26040] hsr1: entered allmulticast mode [ 1543.855070][T26040] bond0: entered allmulticast mode [ 1543.884727][T26040] bond_slave_0: entered allmulticast mode [ 1543.911280][T26040] bond_slave_1: entered allmulticast mode [ 1543.923406][T26040] bridge0: entered allmulticast mode [ 1543.934814][T26040] batadv0: entered allmulticast mode [ 1543.935467][T26040] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1543.940439][T26040] bond0: left promiscuous mode [ 1543.940474][T26040] bond_slave_0: left promiscuous mode [ 1543.940636][T26040] bond_slave_1: left promiscuous mode [ 1543.940756][T26040] bridge0: left promiscuous mode [ 1543.948583][T26040] batadv0: left promiscuous mode [ 1544.603919][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 1544.849904][T26082] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1544.850062][ T5957] IPVS: starting estimator thread 0... [ 1544.943068][T26089] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6036'. [ 1544.975104][T26085] IPVS: using max 34 ests per chain, 81600 per kthread [ 1545.026338][T26086] syzkaller0: entered promiscuous mode [ 1545.099715][T26086] syzkaller0: entered allmulticast mode [ 1545.174233][T26086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1545.202784][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6034'. [ 1545.212030][T26100] sctp: [Deprecated]: syz.6.6038 (pid 26100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1545.212030][T26100] Use struct sctp_sack_info instead [ 1545.541063][T26117] netlink: 'syz.8.6041': attribute type 83 has an invalid length. [ 1545.986913][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1546.015118][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6047'. [ 1546.020024][T26131] vlan0: entered promiscuous mode [ 1546.551154][ T5949] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1546.635706][T26149] lo speed is unknown, defaulting to 1000 [ 1546.743698][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 1546.791457][ T5949] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1546.849783][ T5949] usb 2-1: config 0 has no interface number 0 [ 1546.881795][ T5949] usb 2-1: New USB device found, idVendor=045e, idProduct=0410, bcdDevice= 3.bb [ 1546.901046][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.929925][ T5949] usb 2-1: Product: syz [ 1546.939693][ T5949] usb 2-1: Manufacturer: syz [ 1546.970975][ T5949] usb 2-1: SerialNumber: syz [ 1547.019442][T26162] syzkaller0: entered promiscuous mode [ 1547.025013][T26162] syzkaller0: entered allmulticast mode [ 1547.044854][ T5949] usb 2-1: config 0 descriptor?? [ 1547.104619][T26168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1547.133204][T26162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6056'. [ 1547.692129][T11840] Bluetooth: hci5: link tx timeout [ 1547.697366][T11840] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1549.372208][T26200] delete_channel: no stack [ 1549.739410][ T5866] usb 2-1: USB disconnect, device number 24 [ 1549.791158][T26178] Bluetooth: hci5: command 0x0406 tx timeout [ 1550.144539][T26210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6064'. [ 1550.158771][T26211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6065'. [ 1550.298446][T26210] team0: Unable to change to the same mode the team is in [ 1550.462302][T26217] netlink: 'syz.7.6066': attribute type 16 has an invalid length. [ 1551.133873][T26230] bpq0: entered promiscuous mode [ 1551.403795][T26243] sctp: [Deprecated]: syz.3.6073 (pid 26243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1551.403795][T26243] Use struct sctp_sack_info instead [ 1551.556312][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6075'. [ 1552.032065][T26255] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6076'. [ 1553.689593][ T5866] IPVS: starting estimator thread 0... [ 1553.693098][T26302] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1554.100979][T26306] IPVS: using max 38 ests per chain, 91200 per kthread [ 1555.807209][T26337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6098'. [ 1555.942426][T26339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6098'. [ 1556.244045][T26339] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1556.440646][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1556.447006][ T1297] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1559.016611][T26407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1559.102179][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1559.214333][T26178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1559.217402][T26407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1559.228551][T26178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1559.238161][T26178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1559.246040][T26178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1559.254565][T26178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1559.423014][T26412] lo speed is unknown, defaulting to 1000 [ 1560.001985][T26433] netlink: 'syz.1.6118': attribute type 83 has an invalid length. [ 1560.228811][T12677] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1560.555945][T12677] usb 4-1: config 0 has no interfaces? [ 1560.577342][T12677] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1560.586544][T12677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.594925][T12677] usb 4-1: Product: syz [ 1560.599240][T12677] usb 4-1: Manufacturer: syz [ 1560.616993][T12677] usb 4-1: SerialNumber: syz [ 1560.648423][T12677] usb 4-1: config 0 descriptor?? [ 1561.312447][T26452] usb usb8: usbfs: process 26452 (syz.1.6120) did not claim interface 0 before use [ 1561.324626][T11840] Bluetooth: hci6: command tx timeout [ 1561.375802][T26454] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1562.931126][T26412] chnl_net:caif_netlink_parms(): no params data found [ 1563.421571][T11840] Bluetooth: hci6: command tx timeout [ 1563.703070][ T5949] usb 4-1: USB disconnect, device number 28 [ 1563.896841][T26487] tipc: Enabled bearer , priority 0 [ 1563.997064][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6126'. [ 1564.057977][ T8379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.072905][T26493] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6126'. [ 1564.088618][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.094358][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1564.109217][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.128843][T26412] bridge_slave_0: entered allmulticast mode [ 1564.139948][T26412] bridge_slave_0: entered promiscuous mode [ 1564.202647][T26493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.273700][ T8379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.361226][T26498] tipc: Resetting bearer [ 1564.391954][T26484] tipc: Disabling bearer [ 1564.425408][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.444380][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.461225][T26506] netlink: 'syz.8.6131': attribute type 83 has an invalid length. [ 1564.465153][T26412] bridge_slave_1: entered allmulticast mode [ 1564.512172][T26412] bridge_slave_1: entered promiscuous mode [ 1564.612875][ T8379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.657596][T26412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.718156][ T8379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.845433][T26412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.919964][T26515] syzkaller0: entered promiscuous mode [ 1564.926215][T26515] syzkaller0: entered allmulticast mode [ 1565.046048][T26412] team0: Port device team_slave_0 added [ 1565.195891][T26412] team0: Port device team_slave_1 added [ 1565.473215][T11840] Bluetooth: hci6: command tx timeout [ 1565.628541][T26412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.659253][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.757314][T26412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.790046][T26555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6142'. [ 1565.827956][T26412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.849754][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.940306][T26412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.021766][T26564] netlink: 'syz.3.6145': attribute type 83 has an invalid length. [ 1566.450369][ T8379] bond0 (unregistering): Released all slaves [ 1566.507274][ T8379] bond1 (unregistering): Released all slaves [ 1566.606962][ T8379] bond2 (unregistering): Released all slaves [ 1566.681472][ T8379] bond3 (unregistering): Released all slaves [ 1566.801072][T26412] hsr_slave_0: entered promiscuous mode [ 1566.845776][T26412] hsr_slave_1: entered promiscuous mode [ 1566.885789][T26412] debugfs: 'hsr0' already exists in 'hsr' [ 1566.907630][T26412] Cannot create hsr debugfs directory [ 1566.947263][T26571] tipc: Enabled bearer , priority 0 [ 1566.979138][T26618] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1567.020233][T26587] syzkaller0: entered promiscuous mode [ 1567.035776][T26587] syzkaller0: entered allmulticast mode [ 1567.057167][ T8379] tipc: Left network mode [ 1567.058338][T26606] tipc: Resetting bearer [ 1567.202221][T26565] tipc: Disabling bearer [ 1567.551028][T11840] Bluetooth: hci6: command tx timeout [ 1567.794107][T26637] syzkaller0: entered promiscuous mode [ 1567.818315][T26637] syzkaller0: entered allmulticast mode [ 1567.831141][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1568.540030][ T8379] hsr_slave_0: left promiscuous mode [ 1568.549013][ T8379] hsr_slave_1: left promiscuous mode [ 1568.566410][ T8379] veth1_macvtap: left promiscuous mode [ 1568.581907][ T8379] veth0_macvtap: left promiscuous mode [ 1568.597625][ T8379] veth1_vlan: left promiscuous mode [ 1568.625256][T26668] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6161'. [ 1568.745693][ T8379] Oops: general protection fault, probably for non-canonical address 0xdffffc001fff41ac: 0000 [#1] SMP KASAN NOPTI [ 1568.757789][ T8379] KASAN: probably user-memory-access in range [0x00000000fffa0d60-0x00000000fffa0d67] [ 1568.767332][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1568.776882][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1568.786939][ T8379] Workqueue: netns cleanup_net [ 1568.791737][ T8379] RIP: 0010:__ip_mc_dec_group+0x25a/0x5b0 [ 1568.797483][ T8379] Code: cc ed 0d f8 69 43 08 47 86 c8 61 49 bd 00 00 00 00 00 fc ff df c1 e8 17 4d 8d 24 c4 eb 2d e8 0d 8d a8 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 1e 03 00 00 4d 8b 34 24 4c 39 f3 0f 84 ef 00 [ 1568.817099][ T8379] RSP: 0018:ffffc9000ba67620 EFLAGS: 00010216 [ 1568.823168][ T8379] RAX: 000000001fff41ac RBX: ffff88807c235c00 RCX: ffffffff8a1303c1 [ 1568.831137][ T8379] RDX: ffff88804f908000 RSI: ffffffff8a130383 RDI: 0000000000000005 [ 1568.839104][ T8379] RBP: ffff8880779ce420 R08: 0000000000000005 R09: 0000000000000000 [ 1568.847069][ T8379] R10: 0000000000000000 R11: 0000000000002c10 R12: 00000000fffa0d60 [ 1568.855038][ T8379] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000010000e0 [ 1568.863011][ T8379] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 1568.871942][ T8379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.878527][ T8379] CR2: fffffffffffffffd CR3: 0000000033e3a000 CR4: 0000000000350ef0 [ 1568.886496][ T8379] Call Trace: [ 1568.889766][ T8379] [ 1568.892699][ T8379] inetdev_event+0x3b2/0x18a0 [ 1568.897407][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.903055][ T8379] ? ib_netdevice_event+0xfc/0x330 [ 1568.908200][ T8379] ? __pfx_inetdev_event+0x10/0x10 [ 1568.913389][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.919055][ T8379] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 1568.925328][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.931011][ T8379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1568.936922][ T8379] notifier_call_chain+0xbc/0x410 [ 1568.941977][ T8379] ? __pfx_inetdev_event+0x10/0x10 [ 1568.947126][ T8379] call_netdevice_notifiers_info+0xbe/0x140 [ 1568.953053][ T8379] netif_close_many+0x319/0x630 [ 1568.957935][ T8379] ? __pfx_netif_close_many+0x10/0x10 [ 1568.963330][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.968974][ T8379] ? rcu_is_watching+0x12/0xc0 [ 1568.973758][ T8379] unregister_netdevice_many_notify+0x563/0x24c0 [ 1568.980146][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.985835][ T8379] ? batadv_tt_local_event+0x455/0x7f0 [ 1568.991319][ T8379] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1568.998124][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.003781][ T8379] ? unregister_netdevice_queue+0x22e/0x3f0 [ 1569.009725][ T8379] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1569.016014][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.021678][ T8379] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 1569.027527][ T8379] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 1569.034171][ T8379] default_device_exit_batch+0x853/0xaf0 [ 1569.039841][ T8379] ? _raw_spin_unlock+0x3e/0x50 [ 1569.044705][ T8379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1569.050885][ T8379] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1569.056385][ T8379] ? __pfx___might_resched+0x10/0x10 [ 1569.061698][ T8379] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1569.067883][ T8379] ops_undo_list+0x363/0xab0 [ 1569.072508][ T8379] ? __pfx_ops_undo_list+0x10/0x10 [ 1569.077639][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.083291][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.088944][ T8379] ? lock_release+0x201/0x2f0 [ 1569.093650][ T8379] ? idr_destroy+0x62/0x2e0 [ 1569.098169][ T8379] cleanup_net+0x408/0x890 [ 1569.102612][ T8379] ? __pfx_cleanup_net+0x10/0x10 [ 1569.107574][ T8379] ? lock_acquire+0x2cd/0x350 [ 1569.112282][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.117933][ T8379] ? rcu_is_watching+0x12/0xc0 [ 1569.122719][ T8379] process_one_work+0x9cf/0x1b70 [ 1569.127677][ T8379] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 1569.134123][ T8379] ? __pfx_process_one_work+0x10/0x10 [ 1569.139515][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.145171][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.150814][ T8379] ? assign_work+0x1a0/0x250 [ 1569.155410][ T8379] worker_thread+0x6c8/0xf10 [ 1569.160015][ T8379] ? __pfx_worker_thread+0x10/0x10 [ 1569.165144][ T8379] kthread+0x3c5/0x780 [ 1569.169218][ T8379] ? __pfx_kthread+0x10/0x10 [ 1569.173806][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.179447][ T8379] ? rcu_is_watching+0x12/0xc0 [ 1569.184224][ T8379] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.189868][ T8379] ? rcu_is_watching+0x12/0xc0 [ 1569.194642][ T8379] ? __pfx_kthread+0x10/0x10 [ 1569.199236][ T8379] ret_from_fork+0x5d7/0x6f0 [ 1569.203830][ T8379] ? __pfx_kthread+0x10/0x10 [ 1569.208424][ T8379] ret_from_fork_asm+0x1a/0x30 [ 1569.213215][ T8379] [ 1569.216225][ T8379] Modules linked in: [ 1569.221998][ T8379] ---[ end trace 0000000000000000 ]--- [ 1569.281482][ T8379] RIP: 0010:__ip_mc_dec_group+0x25a/0x5b0 [ 1569.287577][ T8379] Code: cc ed 0d f8 69 43 08 47 86 c8 61 49 bd 00 00 00 00 00 fc ff df c1 e8 17 4d 8d 24 c4 eb 2d e8 0d 8d a8 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 1e 03 00 00 4d 8b 34 24 4c 39 f3 0f 84 ef 00 [ 1569.319341][ T8379] RSP: 0018:ffffc9000ba67620 EFLAGS: 00010216 [ 1569.335151][ T8379] RAX: 000000001fff41ac RBX: ffff88807c235c00 RCX: ffffffff8a1303c1 [ 1569.360967][ T8379] RDX: ffff88804f908000 RSI: ffffffff8a130383 RDI: 0000000000000005 [ 1569.385347][ T8379] RBP: ffff8880779ce420 R08: 0000000000000005 R09: 0000000000000000 [ 1569.415723][ T8379] R10: 0000000000000000 R11: 0000000000002c10 R12: 00000000fffa0d60 [ 1569.439216][ T8379] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000010000e0 [ 1569.465513][ T8379] FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 1569.486625][ T8379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1569.494613][ T8379] CR2: fffffffffffffffd CR3: 000000004251a000 CR4: 0000000000350ef0 [ 1569.506429][ T8379] Kernel panic - not syncing: Fatal exception [ 1569.512785][ T8379] Kernel Offset: disabled [ 1569.517100][ T8379] Rebooting in 86400 seconds..