last executing test programs: 9m55.044058619s ago: executing program 2 (id=149): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r2, &(0x7f0000002880)=ANY=[], 0xfd7b) splice(r1, 0x0, r0, 0x0, 0xffff, 0x0) 9m54.44321017s ago: executing program 2 (id=153): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x2, 0xfff1}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x26f2}, {0x1, 0x5, 0x1, 0x9}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 9m53.882935733s ago: executing program 2 (id=156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x12, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m53.410491253s ago: executing program 2 (id=160): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0x38, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r2, 0x0, 0x6, 0x2, &(0x7f00000003c0)='\x00 ', 0x4}) 9m52.94649021s ago: executing program 2 (id=162): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x400000000000001, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'CT\x00'}]}, 0xf) 9m51.678652374s ago: executing program 2 (id=168): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x58, 0x3fffff) 9m36.488141559s ago: executing program 32 (id=168): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x58, 0x3fffff) 6m51.678815209s ago: executing program 0 (id=927): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) syz_usb_connect(0x0, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904290000020201000524"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 6m47.457500007s ago: executing program 0 (id=950): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m45.256095356s ago: executing program 0 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x100000000000000d, 0x4, 0x17) 6m43.927755223s ago: executing program 0 (id=964): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xa) 6m43.331191504s ago: executing program 0 (id=968): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6m42.017366306s ago: executing program 0 (id=973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r6, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2b, 0x1, 0x0) unshare(0x2c020400) listen(r9, 0x0) ppoll(&(0x7f0000000280)=[{r9, 0xa0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c7000000000000140012800b00010067656e6576650000040002800484bb7babef5f5a34b5a8ebb7f2f7e45cceb76609b6f7ae70ee2d3e9134f00647a6eeb6b5c8c3a7674d07be65cf8fd05015a01cca4d5ce4f1bfee83d2a055630eeb8b7eebc7f450d0864041d5589e0f6b97d07bd0742b34f459a0831f5e7bc77fbf056353b036a2"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10040880) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) 6m26.795351969s ago: executing program 33 (id=973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r6, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2b, 0x1, 0x0) unshare(0x2c020400) listen(r9, 0x0) ppoll(&(0x7f0000000280)=[{r9, 0xa0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c7000000000000140012800b00010067656e6576650000040002800484bb7babef5f5a34b5a8ebb7f2f7e45cceb76609b6f7ae70ee2d3e9134f00647a6eeb6b5c8c3a7674d07be65cf8fd05015a01cca4d5ce4f1bfee83d2a055630eeb8b7eebc7f450d0864041d5589e0f6b97d07bd0742b34f459a0831f5e7bc77fbf056353b036a2"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10040880) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) 2m36.598511658s ago: executing program 4 (id=1891): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) 2m35.115410337s ago: executing program 4 (id=1894): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) close(r0) 2m34.417182156s ago: executing program 4 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 2m32.808626108s ago: executing program 4 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c00000000000000010000040200", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0xa0}, 0x4004881) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000340)=r5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4cf30aff22329273708b7da72e9179721f02", 0x2c}], 0x2) 2m28.395757762s ago: executing program 4 (id=1910): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff3, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m26.825538645s ago: executing program 4 (id=1916): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x20000400) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x2c}}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffff}]}, 0x1c}}, 0x40880) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10040080}, 0x10) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="12b5ca8883a72c61be64d1809e4e551c8fcc795bacbc79d1a786c09a1861dfb427e430bee5b00ac73434620f11a914ef7cf7658efc365a26b43990993f60d4ffeb9cc31d7d5fc06ba7c3a4d828f40fca355cff79686f12971618904dc7d09e85e7a5f9194c4cae7983ee20f6c522b89ecc73c43438aad7dd15ff4738f5e4e1b7713142e7ff6cfc1b6cf7baba9ebf3b471cd0a72011fef02b46e280ad7a8c42d24bfb2ffe1518bc0fea207ec37a9e388c9dea8124df3f50a75f03df8d30d7b3b73e274042a52c058e1d85ef3b420b4dfce815cff6265e625a61b6fca9699edaadd192a3ae60c765260d1cbfb21f0cc30d8128b3783867b85873de07b02635d5573f9e578094a3ce6efbf44818daef38e14005a360909d226d7e13a86f6c83b6aaf615b6a2642d17bc2c56b8b0f8209e20ec1e0f58b0486493e511ab0a45b44a87340a9052ef5fba93c83753f1b101a744407f54d052188087c1cf43de80fd7bd5f3ce8585b5499959e6c3f5e17ae837d7c5627abb604947ad9906d641658f01464f48244182de8d5a8d037403ad4a964e2124177771a84806cda0682d58743928d2d16d83fd8b706a9669ac7605e8d857ac586dc2eda90715951c21bd116ade52f03cd61f3874aaefa77da678450228eb476d84bf175564a215e1683ced4bb9adba5daed835c6b38b61b213834aca56b86259784addb8601d26a42ad637ee296cd4382aaa7c1eaa5cbfa3a7177390bc646916aeb885d2dd43fc5b2dbbd2d184ba6cc6a439b95b5d814a8582405635b5c6bdb41c24af7a10bbd264eb2308a800a09705ac7856a7ac993cb4d88fea4cd1d5cf9e82e10c4badb996f4c0d5fd5866baf90a07d8777f793feb9250e22dd5190aa26c2a31412f1b41e0a65d0e435a9c5ebbf5205f6c6a117ce1fb16e8eb797e7d3eb5d62178dc0441941e9cb464814982ebe54195d73113efc971799121683f6e85d24ad6f21023868327b67446a36ebffda572b90f9b228a03b612e7e0ca09aac6b5710fc90f51c0efefb69b5d26ba9a1d8954832b1370d099d09c07fb2893d57d617ec0d626f1f96ee1608e0f8d9ca1b491578d639ac74b3ea568a474707ac756555d0ae9cdc609609e30d7ef2648fb8baa5854e58b60fac9ec9670c620ce6dcf3bbcca971cb5bf37462febde30e3865960627ceb15a11dd891160a2fcbb682c94a7de4e00fff20774364ffc4bfa31173261f1684dbbaa9addf0d9bc43539a7c09c6b98769aecf8529402bc66e37f0f20580e8e5f59ec48979957552fe17b897dcb4ed1a8d0fdf68d8c065c9d3501b387cf08c681326fcd79e7104eb50bc58a0140b594ad57b8d4be0c50f98e9c3e323d0a57001f8c6a094a7908315c7d7b33227861d2035649bb91daf77776e11159f3ebf7f3ed576adfc364f363e6f474dbbe3500c62c74193e7102fdf57b345066a6ebe47b4b469187631b586676e8e449fa215444366baf5d675f637a0f52c36a042d74957e94bd6d87061675da18128f69106970a9492d76dc312884bb7fcd88ca7e13f2914ba817724bc97ab634e845dfd1ab40344c33c7c202674ef959378abaf3f4fa038a6bbec31f5bd88f81240d2722dfa5e8621eb604db9ae06d49f0a56d64d525f3d41b367ed4d459f21baa3dc43c7cbe096f15bead83bc5ffe2f82128f2943a479556a39ab661bf0a86e0ad0520ab015112eeb06c13abc0da61cc6bf9508182d142696a4670fef7dcfa7a7e09f673c992f3acd4bafa7874c8bf9dc362943d7cd3c14d32bb7a8c3e3f1f55f500eca0c6fd0f199fefe601857e5307660c000cbd8f83f64e2afeb931f5dbba2d538f1c1d78c6ecd14af198f9e0ae4a8e2ef6cda63e059f5b3137946", 0x52b}, {0x0}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {0x0}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x62, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d3000066a1592e6"}, &(0x7f0000000700)=0x6a) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 2m11.170996004s ago: executing program 34 (id=1916): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x20000400) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x2c}}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffff}]}, 0x1c}}, 0x40880) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10040080}, 0x10) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x52b}, {0x0}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {0x0}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x62, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d3000066a1592e6"}, &(0x7f0000000700)=0x6a) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 14.982494909s ago: executing program 6 (id=2309): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) listen(r3, 0xa1) socket$inet_udp(0x2, 0x2, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x4, 0xffff}, {0xe, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0xfe33) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x140f, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@deltclass={0x4c, 0x29, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf, 0xd}, {0xffff}, {0x6, 0x7}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24}, 0x48000) 13.705815604s ago: executing program 5 (id=2312): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.985458932s ago: executing program 5 (id=2316): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.279192649s ago: executing program 5 (id=2320): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 8.851849266s ago: executing program 5 (id=2328): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) unshare(0x22020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r3, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 7.411062255s ago: executing program 1 (id=2332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20051090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x1}], 0x1}, 0xc814) 6.926122669s ago: executing program 5 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20041040) 6.369643072s ago: executing program 5 (id=2336): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000003702010100000010000046b95a120ec50000000800000008aaf5534491da00"/49, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0xa, 0xffffffff) 6.112416563s ago: executing program 1 (id=2337): socket$packet(0x11, 0x2, 0x300) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x3, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 5.9064693s ago: executing program 7 (id=2338): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 5.775319624s ago: executing program 6 (id=2339): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8640, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0xd6cc, 0x7, 0x7, 0xd4f, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r2, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0xda, 0x6, @remote}, 0x14) 5.762407252s ago: executing program 3 (id=2340): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) 4.644681267s ago: executing program 1 (id=2341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.640971322s ago: executing program 3 (id=2342): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.25500011s ago: executing program 6 (id=2343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f00000038c0)=""/4087, 0xff7, 0x10141, 0x0, 0x0) 4.090650191s ago: executing program 7 (id=2344): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48400, 0x100) 3.711615431s ago: executing program 3 (id=2345): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.276280286s ago: executing program 7 (id=2346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) 2.983419543s ago: executing program 6 (id=2347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x68, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.94925358s ago: executing program 3 (id=2348): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0) 2.551641949s ago: executing program 1 (id=2349): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111c6000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r3, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/222, 0xde}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000002c0)=0x2, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000160000070000008307040000000000"], 0x18}, 0x8000) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100), 0x120) socket$kcm(0x2d, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.457657078s ago: executing program 7 (id=2350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.220770555s ago: executing program 3 (id=2351): socket$packet(0x11, 0x2, 0x300) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x3, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1.896189074s ago: executing program 6 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd29, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) 1.684090708s ago: executing program 7 (id=2353): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8640, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @remote}, 0x14) 1.185350018s ago: executing program 6 (id=2354): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.043452813s ago: executing program 3 (id=2355): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000003fd2a167b288fa00"/84]}, 0xcc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x33}]}, 0x14}], 0x1, 0x0, 0x0, 0x10000050}, 0xc000) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4008090) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) 832.974099ms ago: executing program 1 (id=2356): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48400, 0x100) 215.284473ms ago: executing program 7 (id=2357): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x3}, &(0x7f0000000080)=0x90) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f00000003c0)=""/61}, 0x20) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r9) shutdown(r8, 0x0) 0s ago: executing program 1 (id=2358): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xd0}}], 0x1, 0x44004) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered disabled state [ 382.290523][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.362120][ T8381] bridge0: entered allmulticast mode [ 382.443071][ T8381] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 382.648653][ T8384] sctp: [Deprecated]: syz.3.837 (pid 8384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.648653][ T8384] Use struct sctp_sack_info instead [ 383.709337][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 383.745310][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 383.870132][ T8407] gretap0: entered promiscuous mode [ 383.913801][ T8407] gretap0: left promiscuous mode [ 383.963350][ T5839] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 383.964186][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.144851][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 384.158080][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.195459][ T5839] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 384.219113][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.255839][ T5839] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.307864][ T5839] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.349806][ T8415] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 384.367064][ T5839] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.367283][ T5839] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.367416][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.645543][ T5839] usb 4-1: usb_control_msg returned -32 [ 384.678025][ T5839] usbtmc 4-1:16.0: can't read capabilities [ 385.238316][ T8431] x_tables: duplicate underflow at hook 3 [ 386.549388][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 386.592940][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 386.715570][ T8451] gretap0: entered promiscuous mode [ 386.839762][ T8451] gretap0: left promiscuous mode [ 386.844749][ T5837] usb 4-1: USB disconnect, device number 4 [ 387.131321][ T8454] veth0: entered promiscuous mode [ 387.167189][ T8454] vlan2: entered promiscuous mode [ 387.355430][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.495209][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.594315][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.386928][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.400631][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.886551][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.875'. [ 389.923477][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.875'. [ 390.033399][ T8497] gretap0: entered promiscuous mode [ 390.147376][ T8497] gretap0: left promiscuous mode [ 391.054377][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.160242][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.310786][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.544035][ T8528] syzkaller0: entered promiscuous mode [ 391.564172][ T8528] syzkaller0: entered allmulticast mode [ 394.925788][ T8561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.941167][ T5839] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 394.981342][ T5839] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 395.034911][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 395.043320][ T51] wlan1: authenticated [ 395.045409][ T8564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.067735][ T51] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 395.102350][ T8563] syzkaller0: entered promiscuous mode [ 395.129020][ T8563] syzkaller0: entered allmulticast mode [ 395.231327][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 395.241009][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.214878][ T24] usb 1-1: config 0 has no interface number 0 [ 396.233468][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 396.242976][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.253340][ T24] usb 1-1: Product: syz [ 396.257808][ T24] usb 1-1: Manufacturer: syz [ 396.262575][ T24] usb 1-1: SerialNumber: syz [ 396.272184][ T24] usb 1-1: config 0 descriptor?? [ 396.366708][ T1014] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 396.505007][ T129] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 396.665222][ T129] wlan1: association with 08:02:11:00:00:00 timed out [ 397.192138][ T24] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 397.199079][ T24] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 398.859552][ T24] usb 1-1: USB disconnect, device number 5 [ 399.605743][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.751341][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.388229][ T8622] netlink: 64 bytes leftover after parsing attributes in process `syz.4.921'. [ 401.805792][ T8615] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 402.625569][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 402.840620][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 402.861105][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.890040][ T24] usb 1-1: config 0 has no interface number 0 [ 402.907434][ T8642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.920819][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 402.977664][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.998603][ T24] usb 1-1: Product: syz [ 403.022027][ T24] usb 1-1: Manufacturer: syz [ 403.029630][ T24] usb 1-1: SerialNumber: syz [ 403.044211][ T24] usb 1-1: config 0 descriptor?? [ 403.075777][ T8642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.131599][ T24] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 403.140223][ T24] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 404.887024][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.5.942'. [ 405.170890][ T24] usb 1-1: USB disconnect, device number 6 [ 405.926282][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.046041][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.879460][ T8699] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 406.912034][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 407.668758][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.955'. [ 410.004146][ T8734] misc userio: Invalid payload size [ 410.057694][ T8736] misc userio: No port type given on /dev/userio [ 410.157971][ T8736] misc userio: The device must be registered before sending interrupts [ 410.414059][ T8743] netlink: 'syz.4.969': attribute type 39 has an invalid length. [ 411.981952][ T8757] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 412.014531][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 414.637127][ T8769] geneve2: entered promiscuous mode [ 414.642550][ T8769] geneve2: entered allmulticast mode [ 415.008066][ T8781] misc userio: Invalid payload size [ 415.047502][ T8781] misc userio: No port type given on /dev/userio [ 415.242565][ T8784] misc userio: The device must be registered before sending interrupts [ 415.650409][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.975'. [ 415.717772][ T8762] lec:lec_atm_close: lec0: Shut down! [ 416.820309][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.983'. [ 416.858115][ T8797] netlink: 'syz.3.985': attribute type 39 has an invalid length. [ 418.584304][ T8829] misc userio: Invalid payload size [ 418.612015][ T8829] misc userio: No port type given on /dev/userio [ 418.728260][ T8829] misc userio: The device must be registered before sending interrupts [ 420.466653][ T8847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 421.331133][ T5837] lec:lec_start_xmit: lec0:No lecd attached [ 422.570743][ T8882] misc userio: Invalid payload size [ 422.675860][ T8882] misc userio: The device must be registered before sending interrupts [ 422.798553][ T8888] syzkaller0: entered promiscuous mode [ 422.833335][ T8888] syzkaller0: entered allmulticast mode [ 426.255777][ T8939] misc userio: Invalid payload size [ 426.425509][ T8945] misc userio: The device must be registered before sending interrupts [ 426.764651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 426.773133][ C0] lec:lec_tx_timeout: lec0 [ 426.780111][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 428.256319][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.275827][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.288675][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.315117][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.327919][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.377404][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1032'. [ 428.521944][ T8968] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 428.653900][ T8968] bond3 (unregistering): Released all slaves [ 428.874126][ T8973] lo speed is unknown, defaulting to 1000 [ 428.916010][ T8973] lo speed is unknown, defaulting to 1000 [ 428.947208][ T8973] lo speed is unknown, defaulting to 1000 [ 429.092212][ T8969] lo speed is unknown, defaulting to 1000 [ 429.226190][ T8973] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 429.341666][ T8983] misc userio: Invalid payload size [ 429.409465][ T8985] misc userio: The device must be registered before sending interrupts [ 429.545047][ T8973] lo speed is unknown, defaulting to 1000 [ 429.603594][ T8973] lo speed is unknown, defaulting to 1000 [ 429.654156][ T8973] lo speed is unknown, defaulting to 1000 [ 429.698497][ T8973] lo speed is unknown, defaulting to 1000 [ 429.727524][ T8973] lo speed is unknown, defaulting to 1000 [ 430.445644][ T49] Bluetooth: hci3: command tx timeout [ 430.513939][ T8969] chnl_net:caif_netlink_parms(): no params data found [ 431.021053][ T9010] netlink: 'syz.3.1043': attribute type 3 has an invalid length. [ 431.066803][ T9010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1043'. [ 432.266640][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.311469][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.365955][ T8969] bridge_slave_0: entered allmulticast mode [ 432.420700][ T8969] bridge_slave_0: entered promiscuous mode [ 432.524809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 432.525321][ T49] Bluetooth: hci3: command tx timeout [ 432.533218][ C0] lec:lec_tx_timeout: lec0 [ 432.544367][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 432.596347][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 432.689071][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.723097][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.784321][ T8969] bridge_slave_1: entered allmulticast mode [ 432.843461][ T8969] bridge_slave_1: entered promiscuous mode [ 433.276921][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.360766][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.434171][ T8754] Set syz1 is full, maxelem 65536 reached [ 433.552149][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1054'. [ 433.912003][ T8969] team0: Port device team_slave_0 added [ 434.018347][ T8969] team0: Port device team_slave_1 added [ 434.406168][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.413305][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.516533][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.588579][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.604916][ T49] Bluetooth: hci3: command tx timeout [ 434.619982][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.686470][ T9054] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1057'. [ 434.742205][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.316329][ T8969] hsr_slave_0: entered promiscuous mode [ 435.360357][ T8969] hsr_slave_1: entered promiscuous mode [ 435.391515][ T8969] debugfs: 'hsr0' already exists in 'hsr' [ 435.414830][ T8969] Cannot create hsr debugfs directory [ 435.435778][ T9059] lo speed is unknown, defaulting to 1000 [ 435.753765][ T9067] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 436.149424][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 436.684962][ T49] Bluetooth: hci3: command tx timeout [ 436.746677][ T9081] misc userio: Invalid payload size [ 436.817597][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'. [ 437.041087][ T6016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.483243][ T6016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.554716][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 437.563106][ C0] lec:lec_tx_timeout: lec0 [ 437.568376][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.716629][ T6016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.129377][ T9107] netlink: 'syz.3.1070': attribute type 3 has an invalid length. [ 438.151348][ T6016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.168969][ T9107] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1070'. [ 438.607752][ T9099] syzkaller0: entered promiscuous mode [ 438.614124][ T9099] syzkaller0: entered allmulticast mode [ 438.652861][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 439.798096][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1074'. [ 439.895342][ T8969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.048391][ T9134] misc userio: Invalid payload size [ 440.075590][ T6016] bridge_slave_0: left allmulticast mode [ 440.081685][ T6016] bridge_slave_0: left promiscuous mode [ 440.115746][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.360722][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1078'. [ 440.686932][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 441.232537][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.268956][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.300136][ T6016] bond0 (unregistering): Released all slaves [ 441.381113][ T8969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.492438][ T8969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.524185][ T9156] fuse: Bad value for 'fd' [ 441.603539][ T9145] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 441.715249][ T8969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 442.165868][ T9166] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1082'. [ 442.584645][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 442.593095][ C0] lec:lec_tx_timeout: lec0 [ 442.598917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.820562][ T9186] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 443.048715][ T6016] hsr_slave_0: left promiscuous mode [ 443.119602][ T6016] hsr_slave_1: left promiscuous mode [ 443.142173][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.190572][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.272405][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.305149][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.357019][ T6016] veth1_macvtap: left promiscuous mode [ 443.363401][ T6016] veth0_macvtap: left promiscuous mode [ 443.383911][ T6016] veth1_vlan: left promiscuous mode [ 443.405156][ T6016] veth0_vlan: left promiscuous mode [ 444.639224][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 444.666814][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 444.922706][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 445.156344][ T9204] syzkaller0: entered promiscuous mode [ 445.189449][ T9204] syzkaller0: entered allmulticast mode [ 445.630439][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'. [ 445.820168][ T6016] IPVS: stop unused estimator thread 0... [ 446.319224][ T9231] tipc: Started in network mode [ 446.324376][ T9231] tipc: Node identity 82f8898ecd0a, cluster identity 4711 [ 446.395609][ T9231] tipc: Enabled bearer , priority 0 [ 446.502889][ T9227] syzkaller0: entered promiscuous mode [ 446.584880][ T9227] syzkaller0: entered allmulticast mode [ 446.837151][ T9227] tipc: Resetting bearer [ 446.948606][ T9226] tipc: Resetting bearer [ 446.972090][ T9240] fuse: Bad value for 'fd' [ 447.023124][ T9226] tipc: Disabling bearer [ 447.247365][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.424866][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.533935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.541526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.614750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 447.622953][ C0] lec:lec_tx_timeout: lec0 [ 447.628357][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 447.743753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.751429][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.723064][ T9257] syzkaller0: entered promiscuous mode [ 448.755443][ T9257] syzkaller0: entered allmulticast mode [ 449.039847][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 449.535183][ T9263] syzkaller0: entered promiscuous mode [ 449.555389][ T9263] syzkaller0: entered allmulticast mode [ 449.838917][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.846175][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.257093][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 450.292826][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1106'. [ 450.507940][ T9288] fuse: Bad value for 'fd' [ 450.826795][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.453291][ T9291] lo speed is unknown, defaulting to 1000 [ 453.628017][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 453.644694][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms [ 453.652937][ C0] lec:lec_tx_timeout: lec0 [ 453.659891][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.360651][ T8969] veth0_vlan: entered promiscuous mode [ 454.553880][ T8969] veth1_vlan: entered promiscuous mode [ 454.920352][ T8969] veth0_macvtap: entered promiscuous mode [ 455.040661][ T8969] veth1_macvtap: entered promiscuous mode [ 455.272533][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.363729][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.571290][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.608178][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.729398][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.761508][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.176021][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1125'. [ 457.221572][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 457.597173][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 457.643297][ T9385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1127'. [ 459.404673][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 459.413006][ C0] lec:lec_tx_timeout: lec0 [ 459.419625][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 459.512185][ T9417] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1132'. [ 460.573719][ T9429] xt_bpf: check failed: parse error [ 460.822884][ T9433] xt_l2tp: missing protocol rule (udp|l2tpip) [ 461.241731][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1137'. [ 461.883339][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1138'. [ 462.593206][ T9461] netlink: 'syz.3.1141': attribute type 39 has an invalid length. [ 462.792059][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.846756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.066395][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 463.265869][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.273881][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.444760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 464.452992][ C0] lec:lec_tx_timeout: lec0 [ 464.465238][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.376941][ T9489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 465.707216][ T9492] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 465.763572][ T9492] tipc: Started in network mode [ 465.772368][ T9492] tipc: Node identity d62ed03f7b32, cluster identity 4711 [ 465.819895][ T9492] tipc: Enabled bearer , priority 0 [ 465.874113][ T9497] syzkaller0: entered promiscuous mode [ 465.965330][ T9497] syzkaller0: entered allmulticast mode [ 466.107898][ T9492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1150'. [ 466.201348][ T9492] tipc: Resetting bearer [ 466.229050][ T9506] netlink: 'syz.6.1153': attribute type 39 has an invalid length. [ 466.260824][ T9490] tipc: Resetting bearer [ 466.289886][ T9490] tipc: Disabling bearer [ 467.280938][ T9528] fuse: Unknown parameter 'group_id00000000000000000000' [ 469.474760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 469.483258][ C0] lec:lec_tx_timeout: lec0 [ 469.489243][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.578258][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1165'. [ 469.980299][ T9555] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 470.000015][ T9555] tipc: Enabled bearer , priority 0 [ 470.010510][ T9555] syzkaller0: entered promiscuous mode [ 470.020523][ T9555] syzkaller0: entered allmulticast mode [ 470.038422][ T9555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1166'. [ 470.088502][ T9555] tipc: Resetting bearer [ 470.107210][ T9553] tipc: Resetting bearer [ 470.216277][ T9553] tipc: Disabling bearer [ 470.343808][ T9561] misc userio: Invalid payload size [ 473.720992][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1180'. [ 473.963333][ T9599] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.119983][ T9599] tipc: Enabled bearer , priority 0 [ 474.147262][ T9609] syzkaller0: entered promiscuous mode [ 474.164825][ T9609] syzkaller0: entered allmulticast mode [ 474.337639][ T9595] tipc: Resetting bearer [ 474.431919][ T9595] tipc: Disabling bearer [ 474.504667][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 474.512887][ C0] lec:lec_tx_timeout: lec0 [ 474.518483][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.793665][ T9619] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 474.859239][ T9620] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 474.899938][ T9619] bond0: (slave dummy0): Releasing backup interface [ 475.137686][ T9619] team0: Port device dummy0 added [ 475.342695][ T9620] team0: Port device dummy0 removed [ 475.377586][ T9631] fuse: Unknown parameter 'use00000000000000000000' [ 475.488345][ T9620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 476.319208][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1195'. [ 476.938125][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1198'. [ 477.989528][ T9675] fuse: Unknown parameter 'use00000000000000000000' [ 479.534775][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.543025][ C0] lec:lec_tx_timeout: lec0 [ 479.548478][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.046060][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1213'. [ 481.663266][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 482.279977][ T29] audit: type=1800 audit(1771501603.995:7): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1219" name="cgroup.controllers" dev="tmpfs" ino=1052 res=0 errno=0 [ 483.138067][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1227'. [ 484.311911][ T9764] tipc: Enabled bearer , priority 0 [ 484.363837][ T9770] syzkaller0: entered promiscuous mode [ 484.396482][ T9770] syzkaller0: entered allmulticast mode [ 484.539541][ T9764] tipc: Resetting bearer [ 484.564735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 484.573070][ C0] lec:lec_tx_timeout: lec0 [ 484.578526][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 484.633956][ T9763] tipc: Resetting bearer [ 484.749689][ T9763] tipc: Disabling bearer [ 486.365622][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 487.326529][ T9813] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1247'. [ 488.358359][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 489.594715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 489.603095][ C0] lec:lec_tx_timeout: lec0 [ 489.608421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 490.256655][ T9855] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1261'. [ 491.463944][ T9870] syzkaller0: entered promiscuous mode [ 491.494432][ T9870] syzkaller0: entered allmulticast mode [ 491.891241][ T9878] netlink: 'syz.5.1269': attribute type 39 has an invalid length. [ 493.265962][ T9899] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1274'. [ 494.896020][ T9919] syzkaller0: entered promiscuous mode [ 494.901770][ T9919] syzkaller0: entered allmulticast mode [ 495.136345][ T9927] netlink: 'syz.5.1283': attribute type 39 has an invalid length. [ 495.404640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 495.413041][ C0] lec:lec_tx_timeout: lec0 [ 495.419087][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 496.144087][ T9938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.467234][ T9940] bond2: (slave veth5): Enslaving as an active interface with an up link [ 496.567538][ T9943] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1288'. [ 497.767211][ T9966] netlink: 'syz.6.1295': attribute type 39 has an invalid length. [ 497.823761][ T9968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.023966][ T9968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.060231][ T9974] netlink: 'syz.3.1297': attribute type 3 has an invalid length. [ 498.143961][ T9974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1297'. [ 498.424426][ T9968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.813690][ T9968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.788654][ T9992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.209631][T10004] fuse: Bad value for 'group_id' [ 500.213993][ T9994] bond1: (slave veth5): Enslaving as an active interface with an up link [ 500.239407][T10004] fuse: Bad value for 'group_id' [ 500.270280][T10001] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1303'. [ 500.446533][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 500.454873][ C0] lec:lec_tx_timeout: lec0 [ 500.462523][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.053669][T10020] netlink: 'syz.1.1309': attribute type 39 has an invalid length. [ 501.199547][T10021] netlink: 'syz.6.1310': attribute type 10 has an invalid length. [ 501.293070][T10022] netlink: 'syz.6.1310': attribute type 10 has an invalid length. [ 501.428262][T10021] team0: Port device dummy0 added [ 501.581645][T10022] team0: Port device dummy0 removed [ 501.707940][T10022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 501.960766][T10027] syzkaller0: entered promiscuous mode [ 502.002177][T10027] syzkaller0: entered allmulticast mode [ 502.812307][T10040] fuse: Bad value for 'group_id' [ 502.825101][T10040] fuse: Bad value for 'group_id' [ 503.456552][T10042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.707571][T10046] bond2: (slave veth7): Enslaving as an active interface with an up link [ 503.717453][T10045] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1319'. [ 504.189784][T10055] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 504.254276][T10060] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 504.325901][T10055] team0: Port device dummy0 added [ 504.521190][T10060] team0: Port device dummy0 removed [ 504.638527][T10060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 504.965061][ T29] audit: type=1800 audit(1771501626.665:8): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1322" name="cgroup.controllers" dev="tmpfs" ino=1680 res=0 errno=0 [ 505.126881][T10069] fuse: Bad value for 'group_id' [ 505.132116][T10069] fuse: Bad value for 'group_id' [ 505.474656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 505.483054][ C0] lec:lec_tx_timeout: lec0 [ 505.488635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 505.991292][T10082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.311289][T10084] bond1: (slave veth3): Enslaving as an active interface with an up link [ 507.291435][T10095] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 507.355712][T10099] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 507.412641][T10095] bond0: (slave dummy0): Releasing backup interface [ 507.580687][T10095] team0: Port device dummy0 added [ 507.826431][T10099] team0: Port device dummy0 removed [ 507.892878][T10099] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 508.179851][ T29] audit: type=1800 audit(1771501629.895:9): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1341" name="cgroup.controllers" dev="tmpfs" ino=244 res=0 errno=0 [ 508.371111][T10117] tipc: Started in network mode [ 508.393569][T10117] tipc: Node identity 764c9d541656, cluster identity 4711 [ 508.454084][T10117] tipc: Enabled bearer , priority 0 [ 508.464347][T10115] syzkaller0: entered promiscuous mode [ 508.487188][T10115] syzkaller0: entered allmulticast mode [ 508.921424][T10120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.280546][T10121] bond3: (slave veth9): Enslaving as an active interface with an up link [ 509.362958][T10114] tipc: Resetting bearer [ 509.385681][T10132] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 509.415338][T10132] netlink: 'syz.1.1350': attribute type 2 has an invalid length. [ 509.417625][T10114] tipc: Disabling bearer [ 509.472889][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'. [ 510.496326][T10145] netlink: 'syz.6.1356': attribute type 10 has an invalid length. [ 510.504739][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 510.512996][ C0] lec:lec_tx_timeout: lec0 [ 510.518533][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 510.602405][T10153] netlink: 'syz.6.1356': attribute type 10 has an invalid length. [ 510.662215][T10145] bond0: (slave dummy0): Releasing backup interface [ 510.790695][T10145] team0: Port device dummy0 added [ 510.936849][T10153] team0: Port device dummy0 removed [ 510.967267][T10153] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.262999][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.270161][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.468618][T10161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.867496][T10164] bond1: (slave veth5): Enslaving as an active interface with an up link [ 512.385514][T10176] tipc: Enabled bearer , priority 0 [ 512.698803][T10170] tipc: Disabling bearer [ 513.609046][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 513.906271][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 514.008138][T10211] fuse: Invalid rootmode [ 514.211132][ T5838] IPVS: starting estimator thread 0... [ 514.315596][T10216] IPVS: using max 240 ests per chain, 12000 per kthread [ 514.472928][ T5839] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 514.671254][ T5839] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 514.713172][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.740208][ T5839] usb 2-1: config 0 has no interface number 0 [ 514.768796][ T5839] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 514.792560][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.821500][ T5839] usb 2-1: Product: syz [ 514.831792][ T5839] usb 2-1: Manufacturer: syz [ 514.842956][ T5839] usb 2-1: SerialNumber: syz [ 514.875002][ T5839] usb 2-1: config 0 descriptor?? [ 514.933547][ T5839] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 514.965208][ T5839] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 515.506549][T10232] tipc: Enabled bearer , priority 0 [ 515.534666][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 515.543046][ C0] lec:lec_tx_timeout: lec0 [ 515.546147][T10232] syzkaller0: entered promiscuous mode [ 515.555231][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 515.625674][T10232] syzkaller0: entered allmulticast mode [ 515.767327][ T5839] usb 2-1: USB disconnect, device number 5 [ 515.823720][T10229] tipc: Resetting bearer [ 515.916351][T10229] tipc: Disabling bearer [ 518.540525][T10260] ip6tnl1: entered allmulticast mode [ 519.172009][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1393'. [ 519.470159][T10281] tipc: Enabled bearer , priority 0 [ 519.651183][T10278] syzkaller0: entered promiscuous mode [ 519.712744][T10278] syzkaller0: entered allmulticast mode [ 519.900105][T10276] tipc: Resetting bearer [ 519.973432][T10276] tipc: Disabling bearer [ 520.564640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 520.573193][ C0] lec:lec_tx_timeout: lec0 [ 520.583327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 522.228169][T10314] fuse: Bad value for 'rootmode' [ 522.549303][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 523.056652][ T5838] IPVS: starting estimator thread 0... [ 523.145645][T10328] IPVS: using max 240 ests per chain, 12000 per kthread [ 523.191249][T10329] tipc: Enabled bearer , priority 0 [ 523.252446][T10326] syzkaller0: entered promiscuous mode [ 523.295646][T10326] syzkaller0: entered allmulticast mode [ 523.335034][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 523.436150][T10323] tipc: Resetting bearer [ 523.548243][T10323] tipc: Disabling bearer [ 523.572523][ T5838] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 523.601387][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.658738][ T5838] usb 5-1: config 0 has no interface number 0 [ 523.719550][ T5838] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 523.750108][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.769990][ T5838] usb 5-1: Product: syz [ 523.781071][ T5838] usb 5-1: Manufacturer: syz [ 523.795530][ T5838] usb 5-1: SerialNumber: syz [ 523.876879][ T5838] usb 5-1: config 0 descriptor?? [ 524.012587][ T5838] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 524.069915][ T5838] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 524.845473][ T5838] usb 5-1: USB disconnect, device number 4 [ 525.594644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 525.602851][ C0] lec:lec_tx_timeout: lec0 [ 525.615469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 525.720958][T10338] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.844391][T10347] fuse: Bad value for 'rootmode' [ 526.144164][T10338] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.424306][T10338] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.634290][T10338] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.917596][T10360] tipc: Enabled bearer , priority 0 [ 526.966835][T10360] syzkaller0: entered promiscuous mode [ 526.995116][T10360] syzkaller0: entered allmulticast mode [ 527.095497][T10359] tipc: Resetting bearer [ 527.139390][T10359] tipc: Disabling bearer [ 527.365126][ T1014] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.655844][ T1014] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.695470][ T1014] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.831472][ T1132] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.074897][ T5832] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 528.271906][ T5832] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 528.281609][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.297912][T10381] fuse: Unknown parameter 'use00000000000000000000' [ 528.323258][ T5832] usb 2-1: config 0 has no interface number 0 [ 528.425936][ T5832] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 528.461417][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.491754][ T5832] usb 2-1: Product: syz [ 528.514902][ T5832] usb 2-1: Manufacturer: syz [ 528.519971][ T5832] usb 2-1: SerialNumber: syz [ 528.572957][ T5832] usb 2-1: config 0 descriptor?? [ 528.641415][ T5832] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 528.655973][ T5832] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 529.469589][ T5832] usb 2-1: USB disconnect, device number 6 [ 530.090018][T10405] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.403734][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 530.663365][T10405] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.130052][T10405] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.404664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 531.413048][ C0] lec:lec_tx_timeout: lec0 [ 531.418976][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.246832][T10405] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.682026][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.815248][ T129] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.911994][ T51] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.037892][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.312938][T10455] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 533.585779][T10455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.143633][T10457] bond3: (slave veth7): Enslaving as an active interface with an up link [ 534.173224][T10461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 534.725177][T10470] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1459'. [ 535.589559][T10486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.625770][T10486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.773282][T10482] lo speed is unknown, defaulting to 1000 [ 535.892097][T10486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.933859][T10486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.260567][T10486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.333075][T10486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.444712][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 536.453053][ C0] lec:lec_tx_timeout: lec0 [ 536.458725][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 536.627060][T10486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.670191][T10486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.073720][ T1132] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.093175][ T1132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.172027][ T1132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.185293][ T1132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.331404][ T129] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.382879][ T129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.865692][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.878863][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.641348][T10543] lo speed is unknown, defaulting to 1000 [ 539.708605][T10543] lo speed is unknown, defaulting to 1000 [ 539.993590][T10537] loop3: detected capacity change from 0 to 32768 [ 540.004890][T10537] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1484 (10537) [ 540.033936][T10537] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 540.045397][T10537] BTRFS info (device loop3): using blake2b checksum algorithm [ 540.065661][T10543] lo speed is unknown, defaulting to 1000 [ 540.292269][T10537] BTRFS info (device loop3): enabling ssd optimizations [ 540.299602][T10537] BTRFS info (device loop3): turning on async discard [ 540.306886][T10537] BTRFS info (device loop3): enabling free space tree [ 541.474658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 541.483396][ C0] lec:lec_tx_timeout: lec0 [ 541.488895][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.656244][T10543] infiniband syz0: set active [ 542.661163][T10543] infiniband syz0: added lo [ 542.683466][ T5832] lo speed is unknown, defaulting to 1000 [ 542.729854][T10543] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 542.749218][T10543] infiniband syz0: Couldn't open port 1 [ 542.979660][T10543] RDS/IB: syz0: added [ 543.003804][T10543] smc: adding ib device syz0 with port count 1 [ 543.037415][T10543] smc: ib device syz0 port 1 has no pnetid [ 543.083452][ T5838] lo speed is unknown, defaulting to 1000 [ 543.111375][T10543] lo speed is unknown, defaulting to 1000 [ 543.201351][ T5779] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 543.914064][T10597] lo speed is unknown, defaulting to 1000 [ 544.886295][T10597] lo speed is unknown, defaulting to 1000 [ 546.201731][T10543] lo speed is unknown, defaulting to 1000 [ 546.504677][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 546.512898][ C0] lec:lec_tx_timeout: lec0 [ 546.518585][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.752715][T10634] loop1: detected capacity change from 0 to 32768 [ 547.767602][T10634] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1505 (10634) [ 547.805529][T10634] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 547.816033][T10634] BTRFS info (device loop1): using blake2b checksum algorithm [ 548.040215][T10634] BTRFS info (device loop1): enabling ssd optimizations [ 548.047530][T10634] BTRFS info (device loop1): turning on async discard [ 548.054482][T10634] BTRFS info (device loop1): enabling free space tree [ 548.082211][T10654] IPVS: ip_vs_add_dest(): server weight less than zero [ 548.526116][T10543] lo speed is unknown, defaulting to 1000 [ 550.271474][T10543] lo speed is unknown, defaulting to 1000 [ 550.383360][ T5775] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 550.915624][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1517'. [ 551.534787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 551.543106][ C0] lec:lec_tx_timeout: lec0 [ 551.549121][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 551.824295][T10543] lo speed is unknown, defaulting to 1000 [ 552.154975][T10693] IPVS: ip_vs_add_dest(): server weight less than zero [ 552.729136][T10699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.472584][T10713] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 556.564634][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 556.572869][ C0] lec:lec_tx_timeout: lec0 [ 556.578163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 556.709179][T10725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.794185][T10397] lo speed is unknown, defaulting to 1000 [ 557.478758][T10730] syzkaller0: entered promiscuous mode [ 557.535909][T10730] syzkaller0: entered allmulticast mode [ 557.868717][T10397] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 558.101448][T10397] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 558.133083][T10397] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.181612][T10397] usb 4-1: config 0 has no interface number 0 [ 558.240011][T10397] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 558.258954][T10397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.295153][T10397] usb 4-1: Product: syz [ 558.299632][T10397] usb 4-1: Manufacturer: syz [ 558.322322][T10397] usb 4-1: SerialNumber: syz [ 558.375998][T10397] usb 4-1: config 0 descriptor?? [ 558.481416][T10397] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 558.499918][T10397] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 559.065138][T10735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.340289][T10397] usb 4-1: USB disconnect, device number 5 [ 559.618739][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 561.113483][T10767] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 561.486942][T10766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.584792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 561.593190][ C0] lec:lec_tx_timeout: lec0 [ 561.598802][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 561.896391][T10773] bridge0: left allmulticast mode [ 562.140013][T10777] batadv_slave_0: entered promiscuous mode [ 562.179234][T10776] batadv_slave_0: left promiscuous mode [ 563.318177][T10785] syzkaller0: entered promiscuous mode [ 563.326819][T10785] syzkaller0: entered allmulticast mode [ 563.343242][ T5838] IPVS: starting estimator thread 0... [ 563.468073][T10793] IPVS: using max 240 ests per chain, 12000 per kthread [ 563.595448][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 563.823097][ T5838] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 563.851186][ T5838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.913296][ T5838] usb 7-1: config 0 has no interface number 0 [ 563.959721][ T5838] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 564.009856][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.057517][ T5838] usb 7-1: Product: syz [ 564.077702][ T5838] usb 7-1: Manufacturer: syz [ 564.089455][ T5838] usb 7-1: SerialNumber: syz [ 564.120992][ T5838] usb 7-1: config 0 descriptor?? [ 564.221094][ T5838] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 564.268276][ T5838] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 564.509110][T10812] fuse: Unknown parameter '0x0000000000000003' [ 565.001188][T10397] usb 7-1: USB disconnect, device number 2 [ 565.338161][ T29] audit: type=1800 audit(1771501687.035:10): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1558" name="cgroup.controllers" dev="tmpfs" ino=1362 res=0 errno=0 [ 566.614904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 566.623140][ C0] lec:lec_tx_timeout: lec0 [ 566.630010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.074699][T10849] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 567.107391][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1566'. [ 567.906930][T10852] syzkaller0: entered promiscuous mode [ 567.913305][T10852] syzkaller0: entered allmulticast mode [ 568.963910][T10866] fuse: Unknown parameter '0x0000000000000003' [ 569.073280][T10868] netlink: 'syz.3.1573': attribute type 39 has an invalid length. [ 569.410806][T10872] syzkaller0: entered promiscuous mode [ 569.444812][T10397] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 569.456171][T10872] syzkaller0: entered allmulticast mode [ 569.632850][T10397] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 569.658283][T10397] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.705580][T10397] usb 5-1: config 0 has no interface number 0 [ 569.739543][T10397] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 569.773952][T10397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.814913][T10397] usb 5-1: Product: syz [ 569.819297][T10397] usb 5-1: Manufacturer: syz [ 569.824332][T10397] usb 5-1: SerialNumber: syz [ 569.877192][T10397] usb 5-1: config 0 descriptor?? [ 569.942676][T10397] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 569.985853][T10397] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 570.292595][ T29] audit: type=1800 audit(1771501692.005:11): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1576" name="cgroup.controllers" dev="tmpfs" ino=428 res=0 errno=0 [ 570.786266][T10397] usb 5-1: USB disconnect, device number 5 [ 571.653441][T10906] netlink: 'syz.1.1586': attribute type 49 has an invalid length. [ 572.109036][T10910] fuse: Unknown parameter '0x0000000000000003' [ 572.449873][T10916] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 572.482646][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'. [ 572.686536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6050 ms [ 572.694861][ C0] lec:lec_tx_timeout: lec0 [ 572.705209][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.718152][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.777365][T10914] netlink: 'syz.3.1588': attribute type 39 has an invalid length. [ 573.106675][T10918] syzkaller0: entered promiscuous mode [ 573.112373][T10918] syzkaller0: entered allmulticast mode [ 573.586878][T10923] syzkaller0: entered promiscuous mode [ 573.646062][T10923] syzkaller0: entered allmulticast mode [ 574.389249][T10932] syzkaller0: entered promiscuous mode [ 574.395745][T10932] syzkaller0: entered allmulticast mode [ 574.575078][ T9894] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 574.786522][ T9894] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 574.817735][ T9894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.862819][ T9894] usb 4-1: config 0 has no interface number 0 [ 574.919585][ T9894] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 574.954955][ T9894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.996038][ T9894] usb 4-1: Product: syz [ 575.000516][ T9894] usb 4-1: Manufacturer: syz [ 575.038847][ T9894] usb 4-1: SerialNumber: syz [ 575.078462][ T9894] usb 4-1: config 0 descriptor?? [ 575.150161][ T9894] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 575.189771][ T9894] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 575.976382][ T9894] usb 4-1: USB disconnect, device number 6 [ 576.431809][T10934] lo speed is unknown, defaulting to 1000 [ 576.696325][T10934] lo speed is unknown, defaulting to 1000 [ 576.708687][T10960] tipc: Enabled bearer , priority 0 [ 576.776588][T10960] syzkaller0: entered promiscuous mode [ 576.782267][T10960] syzkaller0: entered allmulticast mode [ 576.966179][T10960] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1601'. [ 577.032666][T10960] tipc: Resetting bearer [ 577.195272][T10959] tipc: Resetting bearer [ 577.233059][T10959] tipc: Disabling bearer [ 577.269161][T10971] netlink: 'syz.3.1603': attribute type 39 has an invalid length. [ 577.341623][T10973] syzkaller0: entered promiscuous mode [ 577.360304][T10973] syzkaller0: entered allmulticast mode [ 577.770798][T10978] syzkaller0: entered promiscuous mode [ 577.797498][T10978] syzkaller0: entered allmulticast mode [ 577.893201][T10981] batadv_slave_0: entered promiscuous mode [ 577.960841][T10979] batadv_slave_0: left promiscuous mode [ 578.444613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 578.453043][ C0] lec:lec_tx_timeout: lec0 [ 578.460901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.796276][T10991] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.839593][T10991] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.132131][T11001] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 579.165502][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 579.592655][T10991] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.697918][T10991] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.914145][T10991] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.973389][T10991] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.157932][T10991] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.192953][T10991] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.044861][ T5838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 581.141190][T11010] syzkaller0: entered promiscuous mode [ 581.155034][T11010] syzkaller0: entered allmulticast mode [ 581.212230][ T1137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.221524][ T1137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.250264][ T5838] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 581.274723][ T5838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.304956][ T5838] usb 7-1: config 0 has no interface number 0 [ 581.366018][ T5838] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 581.395262][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.403487][ T5838] usb 7-1: Product: syz [ 581.485309][ T5838] usb 7-1: Manufacturer: syz [ 581.515296][ T5838] usb 7-1: SerialNumber: syz [ 581.596426][ T5838] usb 7-1: config 0 descriptor?? [ 581.619935][ T5838] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 581.635615][ T5838] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 581.903808][T11020] syzkaller0: entered promiscuous mode [ 581.911144][T11020] syzkaller0: entered allmulticast mode [ 582.339736][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.385133][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.470487][ T5838] usb 7-1: USB disconnect, device number 3 [ 582.517035][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.530893][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.675589][ T6016] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.684038][ T6016] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.961841][T11031] tipc: Enabled bearer , priority 0 [ 583.002735][T11031] syzkaller0: entered promiscuous mode [ 583.043813][T11031] syzkaller0: entered allmulticast mode [ 583.188425][T11031] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1616'. [ 583.325882][T11032] tipc: Resetting bearer [ 583.474720][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 583.482938][ C0] lec:lec_tx_timeout: lec0 [ 583.488216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.500629][T11034] netlink: 'syz.1.1617': attribute type 39 has an invalid length. [ 583.724301][T11030] tipc: Resetting bearer [ 583.742921][T11030] tipc: Disabling bearer [ 583.786459][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1619'. [ 584.837309][T11048] syzkaller0: entered promiscuous mode [ 584.870153][T11048] syzkaller0: entered allmulticast mode [ 585.342609][T11068] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 585.376474][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1624'. [ 586.139914][T11058] syzkaller0: entered promiscuous mode [ 586.151930][T11058] syzkaller0: entered allmulticast mode [ 586.463314][T11057] syzkaller0: entered promiscuous mode [ 586.495339][T11057] syzkaller0: entered allmulticast mode [ 587.199913][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.331037][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.478929][ T1132] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.552606][ T1132] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.747597][T11080] tipc: Enabled bearer , priority 0 [ 587.835225][ T5837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 588.001978][T11080] tipc: Resetting bearer [ 588.027980][ T5837] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 588.054849][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.075684][ T5837] usb 7-1: config 0 has no interface number 0 [ 588.108578][T11079] tipc: Disabling bearer [ 588.117829][ T5837] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 588.149170][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.168638][ T5837] usb 7-1: Product: syz [ 588.179185][ T5837] usb 7-1: Manufacturer: syz [ 588.195929][ T5837] usb 7-1: SerialNumber: syz [ 588.253075][ T5837] usb 7-1: config 0 descriptor?? [ 588.317545][ T5837] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 588.347131][ T5837] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 588.366547][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1634'. [ 588.418483][T11091] syzkaller1: entered promiscuous mode [ 588.439729][T11091] syzkaller1: entered allmulticast mode [ 588.504702][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 588.513013][ C0] lec:lec_tx_timeout: lec0 [ 588.518827][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 589.187972][ T5837] usb 7-1: USB disconnect, device number 4 [ 589.592084][T11102] syzkaller0: entered promiscuous mode [ 589.639589][T11102] syzkaller0: entered allmulticast mode [ 589.719821][T11107] syzkaller0: entered promiscuous mode [ 589.726044][T11107] syzkaller0: entered allmulticast mode [ 591.616672][T11132] tipc: Enabled bearer , priority 0 [ 591.766167][T11130] tipc: Resetting bearer [ 591.895540][T11128] tipc: Disabling bearer [ 591.896460][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1648'. [ 591.948000][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1649'. [ 592.583906][T11147] syzkaller0: entered promiscuous mode [ 592.599372][T11147] syzkaller0: entered allmulticast mode [ 592.699445][T10397] IPVS: starting estimator thread 0... [ 592.805190][T11159] IPVS: using max 240 ests per chain, 12000 per kthread [ 592.951537][T10397] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 593.130826][T10397] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 593.151448][T10397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.211905][T10397] usb 6-1: config 0 has no interface number 0 [ 593.233197][T10397] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 593.271338][T10397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.314794][T10397] usb 6-1: Product: syz [ 593.320496][T11163] syzkaller0: entered promiscuous mode [ 593.325989][T10397] usb 6-1: Manufacturer: syz [ 593.349490][T10397] usb 6-1: SerialNumber: syz [ 593.354390][T11163] syzkaller0: entered allmulticast mode [ 593.439341][T10397] usb 6-1: config 0 descriptor?? [ 593.483401][T10397] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 593.521284][T10397] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 593.534782][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 593.543179][ C0] lec:lec_tx_timeout: lec0 [ 593.548678][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.111849][T11164] lo speed is unknown, defaulting to 1000 [ 594.318116][ T5837] usb 6-1: USB disconnect, device number 2 [ 594.349613][T11164] lo speed is unknown, defaulting to 1000 [ 594.379437][T11177] syzkaller0: entered promiscuous mode [ 594.425059][T11177] syzkaller0: entered allmulticast mode [ 595.313607][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 595.424098][T11184] team0 (unregistering): Port device team_slave_0 removed [ 595.540633][T11184] team0 (unregistering): Port device team_slave_1 removed [ 595.875653][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 595.877762][T11197] tipc: Enabled bearer , priority 0 [ 595.942260][T11196] netlink: 'syz.3.1663': attribute type 21 has an invalid length. [ 595.964156][T11196] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1663'. [ 595.964385][T11195] tipc: Resetting bearer [ 596.017874][T11196] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 596.042688][T11196] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1663'. [ 596.143371][T11192] tipc: Disabling bearer [ 596.600894][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1666'. [ 596.667130][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1666'. [ 597.733405][T11218] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 597.766311][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 598.380295][T11223] syzkaller0: entered promiscuous mode [ 598.406988][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1673'. [ 598.417280][T11223] syzkaller0: entered allmulticast mode [ 598.564584][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.572890][ C0] lec:lec_tx_timeout: lec0 [ 598.585142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.874819][T10397] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 599.151262][T10397] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 599.271425][T10397] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.346141][T10397] usb 2-1: config 0 has no interface number 0 [ 599.401262][T10397] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 599.442303][T10397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.505720][T10397] usb 2-1: Product: syz [ 599.510112][T10397] usb 2-1: Manufacturer: syz [ 599.557047][T10397] usb 2-1: SerialNumber: syz [ 599.622164][T10397] usb 2-1: config 0 descriptor?? [ 599.772857][T10397] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 599.865565][T10397] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 600.309095][T11231] tipc: Enabling of bearer rejected, failed to enable media [ 600.568660][ T5838] usb 2-1: USB disconnect, device number 7 [ 601.493026][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1680'. [ 601.502535][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1680'. [ 601.666952][T11250] syzkaller1: entered promiscuous mode [ 601.710380][T11250] syzkaller1: entered allmulticast mode [ 602.106086][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 602.123267][T11257] netlink: 'syz.6.1683': attribute type 12 has an invalid length. [ 602.320061][ T6016] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.341707][ T6016] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.355047][ T6016] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.364331][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 602.390347][ T6016] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.404118][T11257] netlink: 'syz.6.1683': attribute type 12 has an invalid length. [ 602.750067][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 603.261244][T11272] syzkaller0: entered promiscuous mode [ 603.282387][T11272] syzkaller0: entered allmulticast mode [ 603.594856][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.603187][ C0] lec:lec_tx_timeout: lec0 [ 603.608660][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.852777][T11287] IPVS: ip_vs_edit_dest(): server weight less than zero [ 604.506861][T11281] tipc: Enabling of bearer rejected, failed to enable media [ 604.591302][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'. [ 604.705261][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1693'. [ 605.332995][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1698'. [ 605.856037][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 606.365954][T11322] syzkaller0: entered promiscuous mode [ 606.372102][T11322] syzkaller0: entered allmulticast mode [ 606.512165][T11332] syzkaller0: entered promiscuous mode [ 606.543147][T11332] syzkaller0: entered allmulticast mode [ 606.609069][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 606.676057][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1708'. [ 607.491814][T11335] tipc: Enabling of bearer rejected, failed to enable media [ 608.016011][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 608.628711][T11379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1716'. [ 609.404614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 609.412826][ C0] lec:lec_tx_timeout: lec0 [ 609.418406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 609.686710][T11395] tipc: Enabling of bearer rejected, failed to enable media [ 610.342839][ C1] hrtimer: interrupt took 369176 ns [ 611.702715][T11428] syzkaller0: entered promiscuous mode [ 611.721672][T11428] syzkaller0: entered allmulticast mode [ 611.804102][T11432] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1732'. [ 612.538095][T11441] tipc: Enabling of bearer rejected, failed to enable media [ 612.659236][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 612.707431][T11444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1738'. [ 613.052407][T11450] syzkaller0: entered promiscuous mode [ 613.105583][T11450] syzkaller0: entered allmulticast mode [ 613.996960][T11465] tipc: Enabled bearer , priority 0 [ 614.027713][T11465] syzkaller0: entered promiscuous mode [ 614.033376][T11465] syzkaller0: entered allmulticast mode [ 614.152501][T11465] tipc: Resetting bearer [ 614.215250][T11463] tipc: Resetting bearer [ 614.272000][T11463] tipc: Disabling bearer [ 614.444630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 614.452951][ C0] lec:lec_tx_timeout: lec0 [ 614.458489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 614.601147][T11473] syzkaller0: entered promiscuous mode [ 614.607119][T11473] syzkaller0: entered allmulticast mode [ 616.213152][T11495] tipc: Enabling of bearer rejected, failed to enable media [ 618.278437][T11516] lo speed is unknown, defaulting to 1000 [ 618.309231][T11516] lo speed is unknown, defaulting to 1000 [ 619.343495][T11530] syzkaller0: entered promiscuous mode [ 619.373348][T11530] syzkaller0: entered allmulticast mode [ 619.484616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 619.492949][ C0] lec:lec_tx_timeout: lec0 [ 619.498812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 619.711548][T11527] loop3: detected capacity change from 0 to 32768 [ 619.729468][T11527] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1763 (11527) [ 619.754971][T11527] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 619.766389][T11527] BTRFS info (device loop3): using blake2b checksum algorithm [ 619.925242][T11527] BTRFS info (device loop3): enabling ssd optimizations [ 619.932425][T11527] BTRFS info (device loop3): turning on async discard [ 619.939690][T11527] BTRFS info (device loop3): enabling free space tree [ 621.184042][T11558] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.208846][T11558] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.856555][T11558] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.896847][T11558] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.103157][T11558] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.127566][T11558] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.410568][T11558] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.471649][T11558] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.968817][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.001179][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.123245][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.133130][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.145690][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.164044][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.244835][ T5779] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 623.305656][ T1132] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.334911][ T1132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.841092][T11572] batadv_slave_0: entered promiscuous mode [ 623.900432][T11571] batadv_slave_0: left promiscuous mode [ 624.514600][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 624.522992][ C0] lec:lec_tx_timeout: lec0 [ 624.529137][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 625.675689][T11597] tipc: Enabled bearer , priority 10 [ 626.785105][ T5838] tipc: Node number set to 1341294990 [ 628.397160][T11676] batadv_slave_0: entered promiscuous mode [ 628.436525][T11675] batadv_slave_0: left promiscuous mode [ 628.645385][T11680] syzkaller0: entered promiscuous mode [ 628.695614][T11680] syzkaller0: entered allmulticast mode [ 629.544691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 629.553190][ C0] lec:lec_tx_timeout: lec0 [ 629.559371][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.247401][T11704] lo speed is unknown, defaulting to 1000 [ 630.269716][T11704] lo speed is unknown, defaulting to 1000 [ 630.685015][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 630.881123][ T5838] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 630.920369][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.970669][ T5838] usb 6-1: config 0 has no interface number 0 [ 631.034207][ T5838] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 631.071260][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.095175][ T5838] usb 6-1: Product: syz [ 631.099560][ T5838] usb 6-1: Manufacturer: syz [ 631.125003][ T5838] usb 6-1: SerialNumber: syz [ 631.149703][ T5838] usb 6-1: config 0 descriptor?? [ 631.196581][ T5838] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 631.235152][ T5838] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 631.457491][T11717] batadv_slave_0: entered promiscuous mode [ 631.629329][T11716] batadv_slave_0: left promiscuous mode [ 632.041343][ T5839] usb 6-1: USB disconnect, device number 3 [ 632.334421][T11727] syzkaller0: entered promiscuous mode [ 632.371084][T11727] syzkaller0: entered allmulticast mode [ 634.185891][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.574566][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.582788][ C0] lec:lec_tx_timeout: lec0 [ 634.590108][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.993273][T11755] batadv_slave_0: entered promiscuous mode [ 635.062110][T11753] batadv_slave_0: left promiscuous mode [ 635.305211][ T5837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 635.481901][T11765] lo: Caught tx_queue_len zero misconfig [ 635.530694][ T5837] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 635.545733][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.588207][ T5837] usb 4-1: config 0 has no interface number 0 [ 635.626141][ T5837] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 635.636587][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.657209][ T5837] usb 4-1: Product: syz [ 635.661584][ T5837] usb 4-1: Manufacturer: syz [ 635.688559][ T5837] usb 4-1: SerialNumber: syz [ 635.712047][ T5837] usb 4-1: config 0 descriptor?? [ 635.743956][ T5837] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 635.770307][ T5837] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 635.796404][T11773] netlink: 'syz.4.1817': attribute type 4 has an invalid length. [ 636.531142][T11771] syzkaller0: entered promiscuous mode [ 636.565282][T11771] syzkaller0: entered allmulticast mode [ 636.596088][ T5839] usb 4-1: USB disconnect, device number 7 [ 636.624726][T11765] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 637.971653][T11754] lec:lec_atm_close: lec0: Shut down! [ 638.525677][T11799] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 639.021771][T11799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.184256][T11802] bond4: (slave geneve2): making interface the new active one [ 639.234263][T11802] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 639.947182][T11815] syzkaller0: entered promiscuous mode [ 640.026469][T11815] syzkaller0: entered allmulticast mode [ 640.334884][ T5839] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 640.346191][T11812] loop4: detected capacity change from 0 to 32768 [ 640.361923][T11812] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1830 (11812) [ 640.387451][T11812] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 640.398021][T11812] BTRFS info (device loop4): using blake2b checksum algorithm [ 640.529231][ T5839] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 640.536891][T11812] BTRFS info (device loop4): enabling ssd optimizations [ 640.544889][T11812] BTRFS info (device loop4): turning on async discard [ 640.548697][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.551810][T11812] BTRFS info (device loop4): enabling free space tree [ 640.562935][ T5839] usb 2-1: config 0 has no interface number 0 [ 640.604384][ T5839] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 640.616107][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.624315][ T5839] usb 2-1: Product: syz [ 640.629420][ T5839] usb 2-1: Manufacturer: syz [ 640.635248][ T5839] usb 2-1: SerialNumber: syz [ 640.697142][ T5839] usb 2-1: config 0 descriptor?? [ 640.861910][ T5839] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 640.925633][ T5839] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 641.705576][ T5839] usb 2-1: USB disconnect, device number 8 [ 643.404601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 643.412961][ C0] lec:lec_tx_timeout: lec0 [ 643.420977][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 643.902366][ T5786] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 644.311911][T11871] syzkaller0: entered promiscuous mode [ 644.354972][T11871] syzkaller0: entered allmulticast mode [ 644.562747][T11877] batadv_slave_0: entered promiscuous mode [ 644.598023][T11878] netlink: 'syz.6.1846': attribute type 7 has an invalid length. [ 644.605482][T11875] batadv_slave_0: left promiscuous mode [ 644.648278][T11878] netlink: 'syz.6.1846': attribute type 7 has an invalid length. [ 644.877505][ T5839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 645.103079][ T5839] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 645.142912][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.189666][ T5839] usb 6-1: config 0 has no interface number 0 [ 645.217643][ T5839] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 645.245540][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.309755][T11886] syzkaller0: entered promiscuous mode [ 645.316314][ T5839] usb 6-1: Product: syz [ 645.320204][T11886] syzkaller0: entered allmulticast mode [ 645.320643][ T5839] usb 6-1: Manufacturer: syz [ 645.374956][ T5839] usb 6-1: SerialNumber: syz [ 645.396156][ T5839] usb 6-1: config 0 descriptor?? [ 645.469676][ T5839] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 645.485224][ T5839] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 646.258714][ T5839] usb 6-1: USB disconnect, device number 4 [ 646.713780][T11896] loop1: detected capacity change from 0 to 32768 [ 646.724844][T11896] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1851 (11896) [ 646.903611][T11896] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 646.914401][T11896] BTRFS info (device loop1): using blake2b checksum algorithm [ 647.175541][T11896] BTRFS info (device loop1): enabling ssd optimizations [ 647.182923][T11896] BTRFS info (device loop1): turning on async discard [ 647.192968][T11896] BTRFS info (device loop1): enabling free space tree [ 647.530985][T11920] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1853'. [ 648.444659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 648.453005][ C0] lec:lec_tx_timeout: lec0 [ 648.458571][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 648.833344][T11935] batadv_slave_0: entered promiscuous mode [ 648.881468][T11933] batadv_slave_0: left promiscuous mode [ 649.219403][T11939] netlink: 'syz.6.1860': attribute type 7 has an invalid length. [ 649.267750][T11939] netlink: 'syz.6.1860': attribute type 7 has an invalid length. [ 649.557848][T11941] syzkaller0: entered promiscuous mode [ 649.603103][T11941] syzkaller0: entered allmulticast mode [ 650.244925][ T5837] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 650.412771][ T5775] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 650.474744][ T5837] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 650.511432][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.537940][ T5837] usb 7-1: config 0 has no interface number 0 [ 650.571768][ T5837] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 650.595731][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.603956][ T5837] usb 7-1: Product: syz [ 650.664636][ T5837] usb 7-1: Manufacturer: syz [ 650.714786][ T5837] usb 7-1: SerialNumber: syz [ 650.727801][ T5837] usb 7-1: config 0 descriptor?? [ 650.879911][ T5837] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 650.913264][ T5837] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 651.617048][ T5839] usb 7-1: USB disconnect, device number 5 [ 652.105468][T11980] batadv_slave_0: entered promiscuous mode [ 652.219866][T11979] batadv_slave_0: left promiscuous mode [ 653.279266][T11991] syzkaller0: entered promiscuous mode [ 653.319181][T11991] syzkaller0: entered allmulticast mode [ 653.484547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 653.493046][ C0] lec:lec_tx_timeout: lec0 [ 653.498794][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 653.903713][T11993] loop6: detected capacity change from 0 to 32768 [ 653.938626][T11993] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1877 (11993) [ 654.015744][T11993] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 654.026403][T11993] BTRFS info (device loop6): using blake2b checksum algorithm [ 654.240417][T11993] BTRFS info (device loop6): enabling ssd optimizations [ 654.248425][T11993] BTRFS info (device loop6): turning on async discard [ 654.256455][T11993] BTRFS info (device loop6): enabling free space tree [ 654.837248][T12020] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 655.226034][T12020] team0: Port device dummy0 added [ 655.394922][T12026] batadv_slave_0: entered promiscuous mode [ 655.461247][T12024] batadv_slave_0: left promiscuous mode [ 658.471897][ T8969] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 658.514556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 658.522770][ C0] lec:lec_tx_timeout: lec0 [ 658.989227][T12053] tipc: Enabling of bearer rejected, failed to enable media [ 659.066633][T12045] syzkaller0: entered promiscuous mode [ 659.072388][T12045] syzkaller0: entered allmulticast mode [ 659.332432][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 659.665356][T12073] macsec1: entered promiscuous mode [ 659.701051][T12073] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 659.769553][T12073] macsec1: entered allmulticast mode [ 659.835059][T12073] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 659.949961][T12073] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 660.012306][T12073] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 662.241614][T12090] tipc: Enabled bearer , priority 0 [ 662.674669][T12095] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 662.750996][T12095] syzkaller0: entered promiscuous mode [ 662.822322][T12095] syzkaller0: entered allmulticast mode [ 662.871441][T12095] tipc: Resetting bearer [ 662.911906][T12087] tipc: Resetting bearer [ 663.341625][T12112] loop6: detected capacity change from 0 to 32768 [ 663.430111][T12112] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1905 (12112) [ 663.510326][T12087] tipc: Disabling bearer [ 663.741113][T12112] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 663.751624][T12112] BTRFS info (device loop6): using blake2b checksum algorithm [ 663.790391][T10397] tipc: Node number set to 1612356948 [ 663.865532][T12112] BTRFS info (device loop6): enabling ssd optimizations [ 663.881393][T12112] BTRFS info (device loop6): turning on async discard [ 663.888789][T12112] BTRFS info (device loop6): enabling free space tree [ 665.285158][T12141] tipc: Enabled bearer , priority 0 [ 665.331479][T12140] tipc: Enabling of bearer rejected, failed to enable media [ 665.490433][T12136] tipc: Resetting bearer [ 665.657632][T12135] tipc: Disabling bearer [ 666.963200][T12169] lo speed is unknown, defaulting to 1000 [ 667.078238][T12169] lo speed is unknown, defaulting to 1000 [ 667.212822][T12169] lo speed is unknown, defaulting to 1000 [ 667.535050][ T8969] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 667.794377][T12174] syzkaller0: entered promiscuous mode [ 667.840435][T12174] syzkaller0: entered allmulticast mode [ 668.085815][T12179] netlink: 'syz.5.1919': attribute type 10 has an invalid length. [ 668.681270][T12179] team0: Port device dummy0 added [ 669.760805][T12190] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.825553][T12190] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.077286][T12169] infiniband sqz0: set active [ 670.083824][ T9894] lo speed is unknown, defaulting to 1000 [ 670.091367][T12169] infiniband sqz0: added lo [ 670.130869][T12190] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.213507][T12169] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 670.237359][T12190] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.259779][T12169] infiniband sqz0: Couldn't open port 1 [ 670.486096][T12169] RDS/IB: sqz0: added [ 670.490306][T12169] smc: adding ib device sqz0 with port count 1 [ 670.541263][T12169] smc: ib device sqz0 port 1 has no pnetid [ 670.889588][T12190] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.956533][T12190] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.038091][T12199] tipc: Enabled bearer , priority 0 [ 671.055772][T12169] lo speed is unknown, defaulting to 1000 [ 671.216647][T12206] tipc: Resetting bearer [ 671.327519][T12190] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.384877][T12190] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.476662][T10397] lo speed is unknown, defaulting to 1000 [ 671.501064][T12195] tipc: Disabling bearer [ 671.594948][T12208] tipc: Enabling of bearer rejected, failed to enable media [ 672.167085][T11650] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.246449][T11650] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.509593][T11637] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.585080][T11637] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.929908][T11637] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.003690][T11637] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.229144][T12221] loop3: detected capacity change from 0 to 32768 [ 673.240346][T12221] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1928 (12221) [ 673.279571][T12221] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 673.290975][T12221] BTRFS info (device loop3): using blake2b checksum algorithm [ 673.489056][T12221] BTRFS info (device loop3): enabling ssd optimizations [ 673.496377][T12221] BTRFS info (device loop3): turning on async discard [ 673.504140][T12221] BTRFS info (device loop3): enabling free space tree [ 673.923291][T12190] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.010030][T12190] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.340005][T12190] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.451710][T12190] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.619405][T12169] lo speed is unknown, defaulting to 1000 [ 674.749656][T12190] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.805432][T12190] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.143346][ T5779] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 677.164003][T12169] lo speed is unknown, defaulting to 1000 [ 677.671910][T12264] syzkaller0: entered promiscuous mode [ 677.718874][T12264] syzkaller0: entered allmulticast mode [ 678.374819][T12274] tipc: Enabling of bearer rejected, failed to enable media [ 680.125219][T12169] lo speed is unknown, defaulting to 1000 [ 681.330604][T12303] loop5: detected capacity change from 0 to 32768 [ 681.434058][T12303] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1947 (12303) [ 681.496863][T12303] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 681.508358][T12303] BTRFS info (device loop5): using blake2b checksum algorithm [ 681.907274][T12303] BTRFS info (device loop5): enabling ssd optimizations [ 681.914623][T12303] BTRFS info (device loop5): turning on async discard [ 681.921576][T12303] BTRFS info (device loop5): enabling free space tree [ 683.487799][T12329] syzkaller0: entered promiscuous mode [ 683.494968][T12329] syzkaller0: entered allmulticast mode [ 683.572833][T12334] tipc: Enabling of bearer rejected, failed to enable media [ 684.123218][T12169] lo speed is unknown, defaulting to 1000 [ 684.504268][T12345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.514998][T12345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.532097][T12345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.548265][T12345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.559716][T12345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.140511][T12347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.249752][T12347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.577915][ T6528] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 686.205071][T12295] siw: device registration error -23 [ 686.208538][T12343] lo speed is unknown, defaulting to 1000 [ 686.260942][T12343] lo speed is unknown, defaulting to 1000 [ 686.606391][ T49] Bluetooth: hci0: command tx timeout [ 687.382020][T12343] lo speed is unknown, defaulting to 1000 [ 688.695024][ T49] Bluetooth: hci0: command tx timeout [ 690.130177][T11646] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.485132][T12375] tipc: Enabling of bearer rejected, failed to enable media [ 690.618831][T11646] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.764850][ T49] Bluetooth: hci0: command tx timeout [ 690.865413][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1964'. [ 690.888995][T11646] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.171639][T12382] vlan2: entered promiscuous mode [ 691.222521][T12382] team0: entered promiscuous mode [ 691.265505][T12382] team_slave_0: entered promiscuous mode [ 691.286740][T12382] team_slave_1: entered promiscuous mode [ 691.565736][T12391] siw: device registration error -23 [ 691.599795][T11646] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.745744][T12343] chnl_net:caif_netlink_parms(): no params data found [ 692.844805][ T49] Bluetooth: hci0: command tx timeout [ 693.301728][T11646] bridge_slave_1: left allmulticast mode [ 693.315437][T11646] bridge_slave_1: left promiscuous mode [ 693.321863][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.475540][T11646] bridge_slave_0: left allmulticast mode [ 693.481381][T11646] bridge_slave_0: left promiscuous mode [ 693.511205][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.686207][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 694.292791][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1977'. [ 694.855593][T12439] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1979'. [ 695.243455][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.295065][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.320623][T11646] bond0 (unregistering): Released all slaves [ 695.352377][T11646] bond1 (unregistering): Released all slaves [ 695.447671][T11646] bond2 (unregistering): Released all slaves [ 695.590306][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.612230][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 695.922623][T11646] tipc: Left network mode [ 696.741925][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.785424][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.807121][T12343] bridge_slave_0: entered allmulticast mode [ 696.840884][T12343] bridge_slave_0: entered promiscuous mode [ 696.903941][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.935289][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.971917][T12343] bridge_slave_1: entered allmulticast mode [ 697.031103][T12343] bridge_slave_1: entered promiscuous mode [ 697.180564][T12448] syzkaller0: entered promiscuous mode [ 697.226626][T12448] syzkaller0: entered allmulticast mode [ 698.118280][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.403906][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.675750][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 699.407358][T12480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'. [ 699.417959][T11646] hsr_slave_0: left promiscuous mode [ 699.444920][T11646] hsr_slave_1: left promiscuous mode [ 699.488521][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.510128][T12484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 699.534641][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.627305][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.643872][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.836118][T11646] veth1_macvtap: left promiscuous mode [ 699.863313][T11646] veth1_vlan: left promiscuous mode [ 699.873606][T11646] veth0_vlan: left promiscuous mode [ 701.404613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 701.413146][ C0] lec:lec_tx_timeout: lec0 [ 701.719825][T11646] team0 (unregistering): Port device team_slave_1 removed [ 701.776549][T11646] team0 (unregistering): Port device team_slave_0 removed [ 702.188285][T11646] team0 (unregistering): Port device dummy0 removed [ 702.260603][T11653] smc: removing ib device sqz0 [ 702.474012][ T5838] lo speed is unknown, defaulting to 1000 [ 702.514626][ T5838] sqz0: Port: 1 Link DOWN [ 702.559991][T12343] team0: Port device team_slave_0 added [ 702.709286][T12343] team0: Port device team_slave_1 added [ 703.516579][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.523801][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.626291][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'. [ 703.665229][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.866204][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.873343][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.084782][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.918005][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'. [ 706.661650][T12554] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2002'. [ 707.029451][T12343] hsr_slave_0: entered promiscuous mode [ 707.094230][T12343] hsr_slave_1: entered promiscuous mode [ 707.853368][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 708.541773][T12581] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2010'. [ 708.654348][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2011'. [ 708.984837][ T8931] lec:lec_start_xmit: lec0:No lecd attached [ 709.033246][T12587] overlayfs: failed to resolve './file0': -2 [ 709.211074][T11646] IPVS: stop unused estimator thread 0... [ 709.243904][T12574] lo speed is unknown, defaulting to 1000 [ 709.359358][T12574] lo speed is unknown, defaulting to 1000 [ 709.359439][T11637] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.406734][T11637] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.426063][T11637] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.467820][T11637] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.867782][T11637] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.914732][T11637] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.198349][T11653] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.245256][T11653] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.940511][T12343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 711.057912][T12607] syzkaller0: entered promiscuous mode [ 711.063590][T12607] syzkaller0: entered allmulticast mode [ 711.191624][T12612] netlink: 'syz.3.2017': attribute type 11 has an invalid length. [ 711.201584][T12343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 711.328184][T12343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 711.440744][T12343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 711.758360][T12618] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2019'. [ 712.677823][T12632] overlayfs: failed to resolve './file0': -2 [ 713.716147][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.908037][T12643] syzkaller0: entered promiscuous mode [ 713.935277][T12643] syzkaller0: entered allmulticast mode [ 714.056467][T12650] netlink: 'syz.5.2029': attribute type 11 has an invalid length. [ 714.328935][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.444607][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 714.452826][ C0] lec:lec_tx_timeout: lec0 [ 714.517953][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.525570][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.625008][T12657] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2031'. [ 714.866330][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.873809][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.561355][T12674] overlayfs: failed to resolve './file0': -2 [ 716.057815][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 716.868404][T12692] netlink: 'syz.5.2041': attribute type 11 has an invalid length. [ 718.025032][T12709] netlink: 'syz.6.2045': attribute type 10 has an invalid length. [ 718.139915][T12709] bond0: (slave dummy0): Releasing backup interface [ 718.505153][T12343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.497768][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 721.402468][T12343] veth0_vlan: entered promiscuous mode [ 721.606426][T12343] veth1_vlan: entered promiscuous mode [ 722.042790][T12343] veth0_macvtap: entered promiscuous mode [ 722.103460][T12343] veth1_macvtap: entered promiscuous mode [ 722.403363][T12343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.494135][T12343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.577900][T12761] netlink: 'syz.5.2058': attribute type 10 has an invalid length. [ 722.739870][T11642] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.820301][T11642] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.962934][T11642] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.984971][T11642] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.669730][T12770] syzkaller0: entered promiscuous mode [ 723.740320][T12770] syzkaller0: entered allmulticast mode [ 724.978833][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2065'. [ 726.350638][T12810] netlink: 'syz.6.2070': attribute type 10 has an invalid length. [ 728.007169][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 728.048293][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 729.117722][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 730.169550][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.224867][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.430821][T12864] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 730.672589][T12864] bond0: (slave dummy0): Releasing backup interface [ 730.836313][T12864] team0: Port device dummy0 added [ 730.901345][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.957971][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.928766][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 732.947458][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 733.021821][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 733.485282][T12345] Bluetooth: hci3: command 0x0406 tx timeout [ 733.916729][T12910] netlink: 'syz.7.2094': attribute type 10 has an invalid length. [ 734.280766][T12910] team0: Port device dummy0 added [ 736.817560][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'. [ 737.337028][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 737.405528][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 738.546161][T12967] netlink: 'syz.6.2108': attribute type 10 has an invalid length. [ 739.815577][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 739.844708][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 740.521606][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 740.589145][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 741.093912][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 741.125338][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2116'. [ 741.981865][T13003] syzkaller0: entered promiscuous mode [ 741.988284][T13003] syzkaller0: entered allmulticast mode [ 743.153631][T13017] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 743.970477][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2126'. [ 744.526366][T13042] Bluetooth: MGMT ver 1.23 [ 744.988398][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 745.059082][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2131'. [ 745.314949][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 745.329313][ T1137] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.372148][ T1137] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.402427][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2131'. [ 745.465055][ T1137] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.474171][ T1137] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.204803][T13062] syzkaller0: entered promiscuous mode [ 746.261624][T13062] syzkaller0: entered allmulticast mode [ 747.720392][T13087] netlink: 'syz.5.2137': attribute type 10 has an invalid length. [ 748.564683][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2140'. [ 750.215245][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2144'. [ 750.271741][T13120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2144'. [ 750.459940][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2144'. [ 750.485224][ T1137] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.555319][T11642] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.606056][T13120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2144'. [ 750.616627][T11642] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.658166][T11642] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.704760][T13142] syzkaller0: entered promiscuous mode [ 751.710421][T13142] syzkaller0: entered allmulticast mode [ 752.229288][T13146] tipc: Enabled bearer , priority 0 [ 752.319658][T13149] syzkaller0: entered promiscuous mode [ 752.339625][T13149] syzkaller0: entered allmulticast mode [ 752.479647][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 752.525038][T13153] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2152'. [ 752.663172][T13149] tipc: Resetting bearer [ 753.270576][ T5832] tipc: Node number set to 2904346687 [ 753.380434][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 753.419246][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2158'. [ 754.334346][T13184] overlayfs: missing 'lowerdir' [ 756.067475][T13198] syzkaller0: entered promiscuous mode [ 756.084067][T13198] syzkaller0: entered allmulticast mode [ 757.039887][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.072220][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 757.140330][T13218] tipc: Enabling of bearer rejected, already enabled [ 757.219653][T13225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2169'. [ 757.786244][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 757.900700][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 757.934142][T13229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 758.353056][T13243] overlayfs: missing 'lowerdir' [ 760.488430][T13264] syzkaller0: entered promiscuous mode [ 760.512325][T13264] syzkaller0: entered allmulticast mode [ 761.218553][T13278] tipc: Enabling of bearer rejected, already enabled [ 761.360049][T13278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2185'. [ 761.498601][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'. [ 761.577825][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2186'. [ 761.717205][T13285] overlayfs: missing 'lowerdir' [ 762.444593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 762.452894][ C0] lec:lec_tx_timeout: lec0 [ 762.707994][T13301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 763.804348][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2196'. [ 764.278673][T13328] tipc: Started in network mode [ 764.355367][T13328] tipc: Node identity 567ff7922ee8, cluster identity 4711 [ 764.436023][T13328] tipc: Enabled bearer , priority 0 [ 764.568419][T13320] syzkaller0: entered promiscuous mode [ 764.574086][T13320] syzkaller0: entered allmulticast mode [ 764.684884][T13326] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2199'. [ 764.754015][T13329] syzkaller0: entered promiscuous mode [ 764.798642][T13329] syzkaller0: entered allmulticast mode [ 764.816513][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 764.878547][T13328] tipc: Resetting bearer [ 764.896708][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 764.933582][T13317] tipc: Resetting bearer [ 764.986065][T13336] overlayfs: missing 'lowerdir' [ 765.004795][T13317] tipc: Disabling bearer [ 766.562533][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2208'. [ 767.225185][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2211'. [ 767.960106][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 767.981628][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 768.193565][T13363] syzkaller0: left promiscuous mode [ 768.199310][T13363] syzkaller0: left allmulticast mode [ 768.391829][T13378] overlayfs: missing 'lowerdir' [ 769.155093][T13382] tipc: Enabled bearer , priority 0 [ 769.260046][T13382] syzkaller0: entered promiscuous mode [ 769.315037][T13382] syzkaller0: entered allmulticast mode [ 769.430756][T13387] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2215'. [ 769.640713][T13392] tipc: Resetting bearer [ 769.832607][T13380] tipc: Resetting bearer [ 769.966358][T13380] tipc: Disabling bearer [ 770.150061][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 771.019449][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 771.122609][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 771.226528][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'. [ 772.148089][ T8931] lec:lec_start_xmit: lec0:No lecd attached [ 772.172438][T13432] overlayfs: missing 'lowerdir' [ 772.206079][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2229'. [ 773.342462][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 773.633015][T13446] lo speed is unknown, defaulting to 1000 [ 773.661725][T13454] syzkaller0: entered promiscuous mode [ 773.689105][T13454] syzkaller0: entered allmulticast mode [ 773.855374][T13458] tipc: Started in network mode [ 773.894963][T13458] tipc: Node identity ca12ef7da353, cluster identity 4711 [ 773.975558][T13458] tipc: Enabled bearer , priority 0 [ 774.034914][T13446] lo speed is unknown, defaulting to 1000 [ 774.041315][T13454] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2235'. [ 774.138250][T13465] tipc: Resetting bearer [ 774.310878][T13452] tipc: Resetting bearer [ 774.450138][T13452] tipc: Disabling bearer [ 774.722014][T13472] syzkaller0: entered promiscuous mode [ 774.761574][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2239'. [ 774.779167][T13472] syzkaller0: entered allmulticast mode [ 775.752177][T13488] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 775.845650][T13488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 776.037573][T13485] lo speed is unknown, defaulting to 1000 [ 776.086518][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 776.499312][T13499] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2247'. [ 776.509535][T13485] lo speed is unknown, defaulting to 1000 [ 777.404553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 777.412856][ C0] lec:lec_tx_timeout: lec0 [ 777.607998][T13509] syzkaller0: left promiscuous mode [ 777.649499][T13509] syzkaller0: left allmulticast mode [ 778.280597][T13522] tipc: Enabled bearer , priority 0 [ 778.346341][T13518] syzkaller0: entered promiscuous mode [ 778.370590][T13518] syzkaller0: entered allmulticast mode [ 778.477292][T13518] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2251'. [ 778.529846][T13525] syzkaller0: entered promiscuous mode [ 778.535718][T13525] syzkaller0: entered allmulticast mode [ 778.597960][T13520] tipc: Resetting bearer [ 778.670364][T13517] tipc: Resetting bearer [ 778.727307][T13517] tipc: Disabling bearer [ 779.518344][T13535] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 779.565175][T13535] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 781.948874][T13559] netlink: 'syz.7.2262': attribute type 1 has an invalid length. [ 781.985121][T13559] netlink: 'syz.7.2262': attribute type 2 has an invalid length. [ 783.439822][T13589] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 783.497441][T13589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 784.408291][T13594] lo speed is unknown, defaulting to 1000 [ 784.569966][T13611] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2273'. [ 786.769155][T13633] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 787.095202][T13622] lo speed is unknown, defaulting to 1000 [ 787.764286][T13643] overlayfs: missing 'lowerdir' [ 788.837276][T13656] syzkaller0: entered promiscuous mode [ 788.848524][T13656] syzkaller0: entered allmulticast mode [ 789.197803][T13639] lo speed is unknown, defaulting to 1000 [ 791.483288][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2291'. [ 792.514725][ T29] audit: type=1800 audit(1771501914.215:12): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2291" name="cgroup.controllers" dev="tmpfs" ino=192 res=0 errno=0 [ 793.837351][T13699] overlayfs: missing 'lowerdir' [ 794.637267][T13705] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2296'. [ 794.704043][T13708] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.795515][T13708] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.206787][T13708] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.256202][T13708] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.789507][T13708] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.889826][T13708] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.199810][T13708] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.269045][T13708] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.810478][T13743] overlayfs: missing 'lowerdir' [ 797.111709][T13737] bridge_slave_0: left allmulticast mode [ 797.135984][T13737] bridge_slave_0: left promiscuous mode [ 797.175902][T13737] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.336123][T13737] bridge_slave_1: left allmulticast mode [ 797.341973][T13737] bridge_slave_1: left promiscuous mode [ 797.497215][T13737] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.636921][T13737] bond0: (slave bond_slave_0): Releasing backup interface [ 797.689527][T13737] bond0: (slave bond_slave_1): Releasing backup interface [ 797.752389][T13737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.783433][T13737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.832121][T13737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.855074][T13737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.916110][T13737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 798.434589][T11653] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.495523][T11653] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.624255][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.705196][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.813551][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2310'. [ 798.918477][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2310'. [ 799.015246][T11637] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.023673][T11637] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.405263][T13774] gretap0: refused to change device tx_queue_len [ 799.463652][T13774] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 799.578930][T11637] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.620232][T11637] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.775424][T13773] lo speed is unknown, defaulting to 1000 [ 801.685119][T13811] overlayfs: missing 'workdir' [ 802.107109][T13813] team0: Port device dummy0 removed [ 802.260581][T13813] bridge_slave_0: left allmulticast mode [ 802.318229][T13813] bridge_slave_0: left promiscuous mode [ 802.385454][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.507072][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2321'. [ 802.542138][T13813] bridge_slave_1: left allmulticast mode [ 802.583900][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2321'. [ 802.671871][T13813] bridge_slave_1: left promiscuous mode [ 802.759324][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.977145][T13813] bond0: (slave bond_slave_0): Releasing backup interface [ 803.126649][T13813] bond0: (slave bond_slave_1): Releasing backup interface [ 803.446382][T13813] team0: Port device team_slave_0 removed [ 803.599092][T13813] team0: Port device team_slave_1 removed [ 803.659169][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.712574][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.831372][T13813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 806.252147][T13871] overlayfs: missing 'workdir' [ 807.025785][T13882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2334'. [ 807.089645][T13882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2334'. [ 807.896550][T13900] syzkaller0: left promiscuous mode [ 807.945412][T13900] syzkaller0: left allmulticast mode [ 808.017733][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2340'. [ 808.316136][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2336'. [ 809.253144][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 809.417699][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 809.616429][T13928] overlayfs: missing 'workdir' [ 809.717307][T13921] team1: entered promiscuous mode [ 809.764898][T13921] team1: entered allmulticast mode [ 809.808416][T13921] 8021q: adding VLAN 0 to HW filter on device team1 [ 809.922774][T13926] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 810.225305][T13926] team2: entered promiscuous mode [ 810.230539][T13926] team2: entered allmulticast mode [ 810.283386][T13926] 8021q: adding VLAN 0 to HW filter on device team2 [ 811.097098][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2350'. [ 811.149752][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2350'. [ 811.652696][T13958] syzkaller0: left promiscuous mode [ 811.678105][T13958] syzkaller0: left allmulticast mode [ 812.761082][T13974] syzkaller0: entered promiscuous mode [ 812.768407][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 812.801636][T13974] syzkaller0: entered allmulticast mode [ 813.418612][T11637] ===================================================== [ 813.426388][T11637] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 813.433453][T11637] __inet_bind+0x8a4/0xf20 [ 813.438269][T11637] inet_bind+0x12c/0x1a0 [ 813.442687][T11637] kernel_bind+0xd6/0x130 [ 813.447576][T11637] rds_tcp_conn_path_connect+0x952/0xff0 [ 813.453500][T11637] rds_connect_worker+0x353/0x4d0 [ 813.459013][T11637] process_scheduled_works+0xb21/0x1e30 [ 813.465257][T11637] worker_thread+0xede/0x1580 [ 813.473269][T11637] kthread+0x53f/0x600 [ 813.478654][T11637] ret_from_fork+0x20f/0x910 [ 813.483495][T11637] ret_from_fork_asm+0x1a/0x30 [ 813.489226][T11637] [ 813.491713][T11637] Uninit was stored to memory at: [ 813.497153][T11637] kernel_bind+0x92/0x130 [ 813.501607][T11637] rds_tcp_conn_path_connect+0x952/0xff0 [ 813.507856][T11637] rds_connect_worker+0x353/0x4d0 [ 813.513048][T11637] process_scheduled_works+0xb21/0x1e30 [ 813.520154][T11637] worker_thread+0xede/0x1580 [ 813.525105][T11637] kthread+0x53f/0x600 [ 813.529327][T11637] ret_from_fork+0x20f/0x910 [ 813.534058][T11637] ret_from_fork_asm+0x1a/0x30 [ 813.539239][T11637] [ 813.541631][T11637] Uninit was stored to memory at: [ 813.547008][T11637] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 813.552816][T11637] rds_connect_worker+0x353/0x4d0 [ 813.558145][T11637] process_scheduled_works+0xb21/0x1e30 [ 813.563848][T11637] worker_thread+0xede/0x1580 [ 813.568816][T11637] kthread+0x53f/0x600 [ 813.573057][T11637] ret_from_fork+0x20f/0x910 [ 813.577933][T11637] ret_from_fork_asm+0x1a/0x30 [ 813.582863][T11637] [ 813.585351][T11637] Uninit was created at: [ 813.589917][T11637] kmem_cache_alloc_noprof+0x37b/0x1270 [ 813.595875][T11637] rds_tcp_conn_alloc+0x7b/0xbb0 [ 813.600986][T11637] __rds_conn_create+0x267f/0x34e0 [ 813.606377][T11637] rds_conn_create_outgoing+0x5d/0x80 [ 813.611924][T11637] rds_sendmsg+0x2684/0x4d70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 813.616811][T11637] ____sys_sendmsg+0xfe7/0x1080 [ 813.621903][T11637] ___sys_sendmsg+0x271/0x3b0 [ 813.626864][T11637] __x64_sys_sendmsg+0x211/0x3e0 [ 813.631976][T11637] x64_sys_call+0x1e20/0x3ea0 [ 813.636963][T11637] do_syscall_64+0x134/0xf80 [ 813.641829][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.647991][T11637] [ 813.651347][T11637] CPU: 1 UID: 0 PID: 11637 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 813.661731][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.672034][T11637] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 813.678525][T11637] ===================================================== [ 813.685782][T11637] Disabling lock debugging due to kernel taint [ 813.711282][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2357'. [ 814.706767][T11637] Kernel panic - not syncing: kmsan.panic set ... [ 814.713355][T11637] CPU: 1 UID: 0 PID: 11637 Comm: kworker/u8:18 Tainted: G B syzkaller #0 PREEMPT(full) [ 814.724734][T11637] Tainted: [B]=BAD_PAGE [ 814.728964][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.739151][T11637] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 814.745522][T11637] Call Trace: [ 814.748888][T11637] [ 814.751898][T11637] __dump_stack+0x26/0x30 [ 814.756411][T11637] dump_stack_lvl+0x50/0x1c0 [ 814.761164][T11637] ? dump_stack+0x12/0x25 [ 814.765650][T11637] dump_stack+0x1e/0x25 [ 814.769956][T11637] vpanic+0x7b4/0x1430 [ 814.774210][T11637] panic+0x15d/0x160 [ 814.778310][T11637] kmsan_report+0x31a/0x320 [ 814.783006][T11637] ? __msan_warning+0x1b/0x30 [ 814.787838][T11637] ? __inet_bind+0x8a4/0xf20 [ 814.792609][T11637] ? inet_bind+0x12c/0x1a0 [ 814.797201][T11637] ? kernel_bind+0xd6/0x130 [ 814.801833][T11637] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 814.807834][T11637] ? rds_connect_worker+0x353/0x4d0 [ 814.813193][T11637] ? process_scheduled_works+0xb21/0x1e30 [ 814.819077][T11637] ? worker_thread+0xede/0x1580 [ 814.824079][T11637] ? kthread+0x53f/0x600 [ 814.828470][T11637] ? ret_from_fork+0x20f/0x910 [ 814.833373][T11637] ? ret_from_fork_asm+0x1a/0x30 [ 814.838502][T11637] ? kmsan_get_metadata+0xf1/0x160 [ 814.843787][T11637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 814.849771][T11637] ? __rcu_read_unlock+0x6c/0xd0 [ 814.855007][T11637] ? inet_addr_type_table+0x33b/0x560 [ 814.860590][T11637] ? kmsan_get_metadata+0xf1/0x160 [ 814.865881][T11637] __msan_warning+0x1b/0x30 [ 814.870528][T11637] __inet_bind+0x8a4/0xf20 [ 814.875132][T11637] inet_bind+0x12c/0x1a0 [ 814.879536][T11637] ? __pfx_inet_bind+0x10/0x10 [ 814.884459][T11637] kernel_bind+0xd6/0x130 [ 814.888919][T11637] ? rds_tcp_tune+0x834/0xe60 [ 814.893765][T11637] ? kmsan_get_metadata+0xf1/0x160 [ 814.899044][T11637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 814.905043][T11637] rds_tcp_conn_path_connect+0x952/0xff0 [ 814.910867][T11637] ? kmsan_get_metadata+0xf1/0x160 [ 814.916170][T11637] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 814.922520][T11637] rds_connect_worker+0x353/0x4d0 [ 814.927704][T11637] ? __pfx_rds_connect_worker+0x10/0x10 [ 814.933401][T11637] process_scheduled_works+0xb21/0x1e30 [ 814.939154][T11637] worker_thread+0xede/0x1580 [ 814.944020][T11637] kthread+0x53f/0x600 [ 814.948246][T11637] ? __pfx_worker_thread+0x10/0x10 [ 814.953512][T11637] ? __pfx_kthread+0x10/0x10 [ 814.958260][T11637] ret_from_fork+0x20f/0x910 [ 814.962986][T11637] ? __switch_to+0x51c/0x750 [ 814.967848][T11637] ? __pfx_kthread+0x10/0x10 [ 814.972601][T11637] ret_from_fork_asm+0x1a/0x30 [ 814.977554][T11637] [ 814.981028][T11637] Kernel Offset: disabled [ 814.985415][T11637] Rebooting in 86400 seconds..