last executing test programs: 11.795500258s ago: executing program 4 (id=1444): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) setfsuid(0xee00) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f00000003c0)={0x20, 0xb, 0x8c, "0c169451e7e21f2ecd213166fde61e6df0c2999374e4a85bab599d749f19e2a4539b973b3ba771399a1214d5ca4e629c657465f4ec7c442d3dedc769f01a39b9820c7453a6a54741bc583dc863a9ee1c7a8b62d3bd5096fc39357181037de65daa81a2377b367718dc87d18c4f1b9b406ec1e9ae3080ede184b75bfb6067bc99ed5381e8db733127b60b4249"}, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 11.113963292s ago: executing program 0 (id=1447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b0000008500000007"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.510997899s ago: executing program 0 (id=1450): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x2}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0xa8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x26020480) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x188, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x188}}, 0x8041) socket$kcm(0x2, 0xa, 0x2) 8.276238477s ago: executing program 4 (id=1455): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 7.918810565s ago: executing program 2 (id=1456): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 7.540349557s ago: executing program 4 (id=1459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xb, 0x8, 0x6, 0x1, 0xffff8001}, 0x9, 0x2, [{0x6, 0xe, 0xfffffffb, 0x2, 0x3, 0x9}]}, [{0x40, 0x7, 0x400, 0xf2, 0xe8f, 0x8}, {0xea00, 0xfffffc01, 0xb, 0xfffff000, 0xd, 0x7ff}, {0xffffa6a2, 0x29, 0x1ac, 0x0, 0x81, 0x7}, {0x2, 0xa, 0xf, 0x6, 0x9, 0x9}, {0x1, 0x3, 0x80000000, 0x2, 0x0, 0x7fffffff}, {0x0, 0x6, 0x4, 0x4, 0xd, 0x8}, {0x2, 0x9, 0x5, 0x8, 0x5}, {0x1e, 0x8000, 0x4, 0x10000, 0x10, 0x5a52}, {0x1, 0x4, 0x8, 0x4, 0x8, 0x1}, {0x6, 0x6, 0x800, 0x10000, 0x6, 0x300000}, {0x9, 0x3, 0x200, 0xee, 0x3, 0xa00000}, {0x100, 0x2, 0x5, 0xc, 0x400, 0x2}, {0x800, 0x6, 0x6, 0xfffffff9, 0x8, 0x6428}, {0x8001, 0x8000, 0xf51, 0x400, 0x8000, 0xa}, {0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x81}, {0x9, 0x0, 0x2, 0x90000, 0x6, 0xbeac}, {0x7f, 0x7, 0x10001, 0x7, 0x8000, 0xc6d0}, {0x7, 0x4, 0x200, 0xa, 0x1, 0x10000}, {0x0, 0x9, 0x7, 0x9, 0x7, 0x3}, {0x6, 0x800, 0x3, 0x401, 0xfffffbf5, 0x3}, {0x6, 0x3, 0x7f96, 0x8, 0x551, 0xbc}, {0x5, 0x40000, 0x3ea, 0xe, 0xaf, 0xdec}, {0x6, 0xfffffff2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x2, 0x3, 0x80}, {0x116, 0x7, 0x101, 0x7fff, 0x401, 0xfffff001}, {0x1, 0x7, 0x800, 0x3, 0x80000001, 0xffffffff}, {0x80, 0x2, 0x3, 0xffff, 0x79314002, 0xe}, {0x8, 0xffff7fff, 0x800, 0x32e, 0x3, 0x7}, {0x10000, 0xe, 0x7a, 0x4080000, 0x1, 0x7}, {0x3, 0x7, 0x80, 0x3, 0x1, 0x734b916e}, {0xfffffff8, 0x5, 0x5, 0x9, 0xe, 0x509}, {0x3, 0x400, 0x4, 0x1, 0x3316, 0x8}, {0x0, 0x140, 0x9, 0x802, 0x80000001, 0x1}, {0xffff0000, 0x1, 0x7fff, 0x7, 0xfff, 0xfff00000}, {0x81, 0x101, 0x2, 0x7, 0x2, 0x1acaa3e9}, {0x8, 0x5, 0xd0b, 0xd, 0x0, 0x9}, {0xc62, 0x80000001, 0x1, 0x8ae, 0xc, 0x100}, {0x3, 0xf9, 0x7, 0xec0, 0x200, 0xc80}, {0x2, 0x0, 0x7ff, 0x2, 0x1000, 0xd}, {0x7, 0xb701, 0x10000, 0xad3, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x101, 0x8000, 0x1}, {0x40, 0x3c6b000, 0x7, 0x8, 0x1, 0x7fff}, {0x1, 0xffff, 0x9, 0x4, 0x10000, 0x8001}, {0x40, 0x4, 0x9, 0xfffffff7, 0x3, 0x81}, {0x8, 0x1, 0xffff, 0x9, 0x10001, 0x401}, {0x0, 0xfffffff7, 0x4, 0x2, 0x3be3}, {0x80000000, 0x6, 0x9, 0x0, 0x7, 0x8}, {0xfe000000, 0x7ff, 0x2, 0x0, 0x8, 0x9}, {0x8, 0x9, 0x8, 0x6, 0x10001, 0x1}, {0x4, 0x2, 0x1ff, 0x400, 0x1, 0x1}, {0x74f, 0x5, 0x1000, 0x2, 0x195a, 0x4}, {0x20, 0x9, 0x9, 0x1, 0x1, 0xaafe}, {0x3f, 0xfffffffa, 0xfff, 0x2, 0x8, 0x7ff}, {0x6c, 0xfffffffb, 0x6, 0x7, 0x4, 0xfffffffd}, {0x4, 0xb4ab, 0x8, 0x5, 0x3, 0x1}, {0x100, 0x0, 0x6, 0x5, 0xffff, 0x1000}, {0x1000, 0xc1db, 0x0, 0x6, 0x1, 0x5}, {0x4, 0x87c, 0x9df, 0x4, 0xbf55}, {0x3, 0x1000, 0x8, 0x1, 0x6, 0x1000}, {0x14e5, 0x3f54, 0xfffffffb, 0x9, 0x7, 0xe482}, {0x3, 0xffff, 0x7, 0x800, 0x1d, 0x4}, {0xfff, 0x7fffffff, 0x9, 0x10000, 0x2, 0x8}, {0x9b, 0x6, 0x7fff, 0x6, 0x2, 0x3c}, {0x5, 0x7ff, 0x6, 0x40, 0xf, 0x6}, {0x4, 0x9, 0x2400000, 0x2, 0x6, 0x4}, {0x6, 0x0, 0x40, 0x201a861c, 0x8, 0x8}, {0x5fe, 0xfffffffa, 0x1000, 0x6, 0xfff}, {0x4, 0x1000, 0x6, 0xbc34, 0x5, 0xe6}, {0x8, 0xec54, 0x8000, 0x7, 0x8, 0x6}, {0xc4, 0x7, 0x7ff, 0x6, 0x4, 0x98}, {0x8, 0x8001, 0x5, 0x7fffffff, 0xcea8, 0xff}, {0x5, 0x400, 0x6, 0x1, 0xfffffff9, 0x2}, {0xffff, 0xfffffffe, 0x80, 0x5, 0x57f, 0x8}, {0x6, 0x2, 0x1, 0x5, 0x4, 0x6}, {0x1ff, 0x8000, 0x1, 0x80000001, 0x80, 0x5}, {0x3, 0x235, 0x0, 0x4, 0x100, 0x7}, {0x7, 0x8f9, 0x4, 0xb, 0xfbc, 0x5}, {0x2, 0x7, 0xd, 0x7, 0x9, 0x5}, {0x2, 0x9, 0xffff, 0x3, 0x740, 0x3}, {0xfffff0ab, 0x8c6a, 0x2000, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x1, 0x1000, 0x200, 0x8}, {0x800, 0x7, 0x800, 0x3ff, 0x800, 0x8000}, {0x7fff, 0x5, 0x5, 0x3, 0xa000, 0xe}, {0x6, 0x9, 0xb, 0x8, 0x8, 0x477}, {0x7fffffff, 0x0, 0x1, 0x6, 0x8001, 0x10000}, {0x1, 0x8, 0x6, 0x0, 0x8, 0x7}, {0x4, 0x3, 0x80000001, 0x3, 0x8001, 0xf7}, {0x3, 0x5, 0x5, 0x1, 0x4, 0x20000005}, {0xdd00, 0x7, 0xd, 0x1, 0x2, 0xa79f}, {0x5, 0xfffffffd, 0xb9, 0x3, 0x6, 0x2}, {0x9, 0x3, 0x34400000, 0x401, 0x1, 0xffffffb2}, {0x401, 0x3ff, 0x0, 0x5d, 0x9, 0x8}, {0x6, 0x6, 0x2, 0x5, 0x0, 0x3}, {0x10, 0x7, 0x5, 0x4f, 0x20000000, 0x80000000}, {0x6, 0x96c, 0x0, 0xfffffff6, 0x7, 0x3ff}, {0x0, 0x40004, 0x6, 0x2, 0x1, 0x5}, {0x8, 0xfffff2ca, 0x2, 0x5, 0x4, 0xe43}, {0x9, 0x0, 0xe67, 0x7f, 0x101, 0xc}, {0x0, 0xfffffff7, 0xfffffffc, 0x28a, 0x2, 0x6dd1}, {0x1, 0x4, 0x0, 0xd7, 0x1, 0x5}, {0x4, 0x3, 0x4e82, 0x6, 0x7f, 0x35c}, {0x0, 0x5, 0x8, 0x2, 0x10000, 0x5}, {0x4, 0x7, 0x0, 0xd, 0x5, 0x7}, {0x800, 0xf7, 0x0, 0x8, 0x0, 0x8e38}, {0x5, 0x40, 0xfa, 0x5, 0x43e, 0x5}, {0x2, 0xa, 0x5, 0x9, 0x2, 0x6d4}, {0x6, 0x0, 0x10000, 0x5, 0x7, 0x5}, {0xd, 0x9, 0x9, 0xd19, 0xffffffff, 0x400}, {0x1000, 0xfffffffa, 0x0, 0x8001, 0xf00, 0x10001}, {0x10000, 0x4, 0xa, 0x72b, 0x0, 0x80000000}, {0x2, 0xf, 0x77, 0x100, 0xfe, 0x7}, {0x6, 0x8, 0x80000001, 0x3, 0x8, 0x9}, {0x5, 0x101, 0x3, 0x2, 0xa}, {0xffffffff, 0x4, 0x3, 0x6, 0x6, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x0, 0x8}, {0x7fffffff, 0x1, 0x7, 0x40, 0xc37, 0x9e}, {0x10000, 0x8, 0x1, 0x8, 0xb536, 0x9}, {0x1, 0xffffffc0, 0x7, 0x2, 0x3, 0xbf}, {0xc0a, 0xffffff1e, 0x5, 0x100000e, 0x90, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x10, 0x1}, {0x100, 0x5, 0x6, 0x6, 0x8, 0x17f}, {0x47af, 0x8, 0x4, 0x2, 0x1, 0x8}, {0xa, 0x3, 0xb, 0x4, 0x5, 0x3}, {0x4, 0x7, 0x5, 0xba1b, 0xffff, 0xc87e}, {0x374f, 0x9, 0x5, 0xa, 0x1c87, 0xa2}, {0x3, 0x0, 0x5, 0x8000, 0x1ff, 0x7fffffff}, {0x0, 0x5104, 0x2, 0x7fffffff, 0x3, 0x7}, {0x101, 0x5c, 0x800, 0x6, 0x40, 0x8000}], [{0x5}, {}, {0x2}, {0x4}, {0x3}, {0x4}, {0x2}, {0x6, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1}, {0xc9b7e1d7f2ad2980, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 7.018898219s ago: executing program 1 (id=1460): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 6.723877463s ago: executing program 2 (id=1461): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x20044804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 5.976806574s ago: executing program 0 (id=1463): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005600010000000000000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 5.10495993s ago: executing program 4 (id=1465): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.054687083s ago: executing program 0 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000100000061107d00000000006301480000000000950009000000000070eaa163317972f4b6082a6343a4d2c01fb726504e8b56c33e52651da13c216e196faf06fffcdcb7a7ba0bc83c0fc021febea33214de67db56ba25673b0ab4d3e39fd4df1729a140ced76a0661db510024e6b79c90174856fe10168fca40a15dab753a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x4044044) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6b9eaeee}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffff", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 5.01974351s ago: executing program 3 (id=1467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 4.912316186s ago: executing program 1 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 4.794829705s ago: executing program 2 (id=1469): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 4.336313615s ago: executing program 1 (id=1470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 4.280948085s ago: executing program 2 (id=1471): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.247377514s ago: executing program 3 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="9c6a6db8babc7becfcc6349131df", 0xe}, {&(0x7f0000000200)="4f396a9489c38f0deda7d4", 0xb}], 0x3) 3.870584851s ago: executing program 0 (id=1473): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x2}}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0xa8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x26020480) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x188, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x188}}, 0x8041) socket$kcm(0x2, 0xa, 0x2) 3.780306275s ago: executing program 4 (id=1474): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x4, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x30, {0x30, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.499730367s ago: executing program 3 (id=1475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xb, 0x8, 0x6, 0x1, 0xffff8001}, 0x9, 0x2, [{0x6, 0xe, 0xfffffffb, 0x2, 0x3, 0x9}]}, [{0x40, 0x7, 0x400, 0xf2, 0xe8f, 0x8}, {0xea00, 0xfffffc01, 0xb, 0xfffff000, 0xd, 0x7ff}, {0xffffa6a2, 0x29, 0x1ac, 0x0, 0x81, 0x7}, {0x2, 0xa, 0xf, 0x6, 0x9, 0x9}, {0x1, 0x3, 0x80000000, 0x2, 0x0, 0x7fffffff}, {0x0, 0x6, 0x4, 0x4, 0xd, 0x8}, {0x2, 0x9, 0x5, 0x8, 0x5}, {0x1e, 0x8000, 0x4, 0x10000, 0x10, 0x5a52}, {0x1, 0x4, 0x8, 0x4, 0x8, 0x1}, {0x6, 0x6, 0x800, 0x10000, 0x6, 0x300000}, {0x9, 0x3, 0x200, 0xee, 0x3, 0xa00000}, {0x100, 0x2, 0x5, 0xc, 0x400, 0x2}, {0x800, 0x6, 0x6, 0xfffffff9, 0x8, 0x6428}, {0x8001, 0x8000, 0xf51, 0x400, 0x8000, 0xa}, {0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x81}, {0x9, 0x0, 0x2, 0x90000, 0x6, 0xbeac}, {0x7f, 0x7, 0x10001, 0x7, 0x8000, 0xc6d0}, {0x7, 0x4, 0x200, 0xa, 0x1, 0x10000}, {0x0, 0x9, 0x7, 0x9, 0x7, 0x3}, {0x6, 0x800, 0x3, 0x401, 0xfffffbf5, 0x3}, {0x6, 0x3, 0x7f96, 0x8, 0x551, 0xbc}, {0x5, 0x40000, 0x3ea, 0xe, 0xaf, 0xdec}, {0x6, 0xfffffff2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x2, 0x3, 0x80}, {0x116, 0x7, 0x101, 0x7fff, 0x401, 0xfffff001}, {0x1, 0x7, 0x800, 0x3, 0x80000001, 0xffffffff}, {0x80, 0x2, 0x3, 0xffff, 0x79314002, 0xe}, {0x8, 0xffff7fff, 0x800, 0x32e, 0x3, 0x7}, {0x10000, 0xe, 0x7a, 0x4080000, 0x1, 0x7}, {0x3, 0x7, 0x80, 0x3, 0x1, 0x734b916e}, {0xfffffff8, 0x5, 0x5, 0x9, 0xe, 0x509}, {0x3, 0x400, 0x4, 0x1, 0x3316, 0x8}, {0x0, 0x140, 0x9, 0x802, 0x80000001, 0x1}, {0xffff0000, 0x1, 0x7fff, 0x7, 0xfff, 0xfff00000}, {0x81, 0x101, 0x2, 0x7, 0x2, 0x1acaa3e9}, {0x8, 0x5, 0xd0b, 0xd, 0x0, 0x9}, {0xc62, 0x80000001, 0x1, 0x8ae, 0xc, 0x100}, {0x3, 0xf9, 0x7, 0xec0, 0x200, 0xc80}, {0x2, 0x0, 0x7ff, 0x2, 0x1000, 0xd}, {0x7, 0xb701, 0x10000, 0xad3, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x101, 0x8000, 0x1}, {0x40, 0x3c6b000, 0x7, 0x8, 0x1, 0x7fff}, {0x1, 0xffff, 0x9, 0x4, 0x10000, 0x8001}, {0x40, 0x4, 0x9, 0xfffffff7, 0x3, 0x81}, {0x8, 0x1, 0xffff, 0x9, 0x10001, 0x401}, {0x0, 0xfffffff7, 0x4, 0x2, 0x3be3}, {0x80000000, 0x6, 0x9, 0x0, 0x7, 0x8}, {0xfe000000, 0x7ff, 0x2, 0x0, 0x8, 0x9}, {0x8, 0x9, 0x8, 0x6, 0x10001, 0x1}, {0x4, 0x2, 0x1ff, 0x400, 0x1, 0x1}, {0x74f, 0x5, 0x1000, 0x2, 0x195a, 0x4}, {0x20, 0x9, 0x9, 0x1, 0x1, 0xaafe}, {0x3f, 0xfffffffa, 0xfff, 0x2, 0x8, 0x7ff}, {0x6c, 0xfffffffb, 0x6, 0x7, 0x4, 0xfffffffd}, {0x4, 0xb4ab, 0x8, 0x5, 0x3, 0x1}, {0x100, 0x0, 0x6, 0x5, 0xffff, 0x1000}, {0x1000, 0xc1db, 0x0, 0x6, 0x1, 0x5}, {0x4, 0x87c, 0x9df, 0x4, 0xbf55}, {0x3, 0x1000, 0x8, 0x1, 0x6, 0x1000}, {0x14e5, 0x3f54, 0xfffffffb, 0x9, 0x7, 0xe482}, {0x3, 0xffff, 0x7, 0x800, 0x1d, 0x4}, {0xfff, 0x7fffffff, 0x9, 0x10000, 0x2, 0x8}, {0x9b, 0x6, 0x7fff, 0x6, 0x2, 0x3c}, {0x5, 0x7ff, 0x6, 0x40, 0xf, 0x6}, {0x4, 0x9, 0x2400000, 0x2, 0x6, 0x4}, {0x6, 0x0, 0x40, 0x201a861c, 0x8, 0x8}, {0x5fe, 0xfffffffa, 0x1000, 0x6, 0xfff}, {0x4, 0x1000, 0x6, 0xbc34, 0x5, 0xe6}, {0x8, 0xec54, 0x8000, 0x7, 0x8, 0x6}, {0xc4, 0x7, 0x7ff, 0x6, 0x4, 0x98}, {0x8, 0x8001, 0x5, 0x7fffffff, 0xcea8, 0xff}, {0x5, 0x400, 0x6, 0x1, 0xfffffff9, 0x2}, {0xffff, 0xfffffffe, 0x80, 0x5, 0x57f, 0x8}, {0x6, 0x2, 0x1, 0x5, 0x4, 0x6}, {0x1ff, 0x8000, 0x1, 0x80000001, 0x80, 0x5}, {0x3, 0x235, 0x0, 0x4, 0x100, 0x7}, {0x7, 0x8f9, 0x4, 0xb, 0xfbc, 0x5}, {0x2, 0x7, 0xd, 0x7, 0x9, 0x5}, {0x2, 0x9, 0xffff, 0x3, 0x740, 0x3}, {0xfffff0ab, 0x8c6a, 0x2000, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x1, 0x1000, 0x200, 0x8}, {0x800, 0x7, 0x800, 0x3ff, 0x800, 0x8000}, {0x7fff, 0x5, 0x5, 0x3, 0xa000, 0xe}, {0x6, 0x9, 0xb, 0x8, 0x8, 0x477}, {0x7fffffff, 0x0, 0x1, 0x6, 0x8001, 0x10000}, {0x1, 0x8, 0x6, 0x0, 0x8, 0x7}, {0x4, 0x3, 0x80000001, 0x3, 0x8001, 0xf7}, {0x3, 0x5, 0x5, 0x1, 0x4, 0x20000005}, {0xdd00, 0x7, 0xd, 0x1, 0x2, 0xa79f}, {0x5, 0xfffffffd, 0xb9, 0x3, 0x6, 0x2}, {0x9, 0x3, 0x34400000, 0x401, 0x1, 0xffffffb2}, {0x401, 0x3ff, 0x0, 0x5d, 0x9, 0x8}, {0x6, 0x6, 0x2, 0x5, 0x0, 0x3}, {0x10, 0x7, 0x5, 0x4f, 0x20000000, 0x80000000}, {0x6, 0x96c, 0x0, 0xfffffff6, 0x7, 0x3ff}, {0x0, 0x40004, 0x6, 0x2, 0x1, 0x5}, {0x8, 0xfffff2ca, 0x2, 0x5, 0x4, 0xe43}, {0x9, 0x0, 0xe67, 0x7f, 0x101, 0xc}, {0x0, 0xfffffff7, 0xfffffffc, 0x28a, 0x2, 0x6dd1}, {0x1, 0x4, 0x0, 0xd7, 0x1, 0x5}, {0x4, 0x3, 0x4e82, 0x6, 0x7f, 0x35c}, {0x0, 0x5, 0x8, 0x2, 0x10000, 0x5}, {0x4, 0x7, 0x0, 0xd, 0x5, 0x7}, {0x800, 0xf7, 0x0, 0x8, 0x0, 0x8e38}, {0x5, 0x40, 0xfa, 0x5, 0x43e, 0x5}, {0x2, 0xa, 0x5, 0x9, 0x2, 0x6d4}, {0x6, 0x0, 0x10000, 0x5, 0x7, 0x5}, {0xd, 0x9, 0x9, 0xd19, 0xffffffff, 0x400}, {0x1000, 0xfffffffa, 0x0, 0x8001, 0xf00, 0x10001}, {0x10000, 0x4, 0xa, 0x72b, 0x0, 0x80000000}, {0x2, 0xf, 0x77, 0x100, 0xfe, 0x7}, {0x6, 0x8, 0x80000001, 0x3, 0x8, 0x9}, {0x5, 0x101, 0x3, 0x2, 0xa}, {0xffffffff, 0x4, 0x3, 0x6, 0x6, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x0, 0x8}, {0x7fffffff, 0x1, 0x7, 0x40, 0xc37, 0x9e}, {0x10000, 0x8, 0x1, 0x8, 0xb536, 0x9}, {0x1, 0xffffffc0, 0x7, 0x2, 0x3, 0xbf}, {0xc0a, 0xffffff1e, 0x5, 0x100000e, 0x90, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x10, 0x1}, {0x100, 0x5, 0x6, 0x6, 0x8, 0x17f}, {0x47af, 0x8, 0x4, 0x2, 0x1, 0x8}, {0xa, 0x3, 0xb, 0x4, 0x5, 0x3}, {0x4, 0x7, 0x5, 0xba1b, 0xffff, 0xc87e}, {0x374f, 0x9, 0x5, 0xa, 0x1c87, 0xa2}, {0x3, 0x0, 0x5, 0x8000, 0x1ff, 0x7fffffff}, {0x0, 0x5104, 0x2, 0x7fffffff, 0x3, 0x7}, {0x101, 0x5c, 0x800, 0x6, 0x40, 0x8000}], [{0x5}, {}, {0x2}, {0x4}, {0x3}, {0x4}, {0x2}, {0x6, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1}, {0xc9b7e1d7f2ad2980, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 3.34908916s ago: executing program 2 (id=1476): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005600010000000000000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 3.297849659s ago: executing program 1 (id=1477): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000700002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.709905068s ago: executing program 2 (id=1478): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) 2.596000869s ago: executing program 1 (id=1479): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x20044804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 2.534499516s ago: executing program 3 (id=1480): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(0x0, r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 1.90760912s ago: executing program 3 (id=1481): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 1.246526477s ago: executing program 4 (id=1482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.121053394s ago: executing program 3 (id=1483): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000100000061107d00000000006301480000000000950009000000000070eaa163317972f4b6082a6343a4d2c01fb726504e8b56c33e52651da13c216e196faf06fffcdcb7a7ba0bc83c0fc021febea33214de67db56ba25673b0ab4d3e39fd4df1729a140ced76a0661db510024e6b79c90174856fe10168fca40a15dab753a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x4044044) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6b9eaeee}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff02000000", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 356.621201ms ago: executing program 1 (id=1484): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) 0s ago: executing program 0 (id=1485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="9c6a6db8babc7becfcc6349131df", 0xe}, {&(0x7f0000000200)="4f396a9489c38f0deda7d4", 0xb}], 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 160.648323][ T5564] cgroup: Unknown subsys name 'net' [ 160.797101][ T5564] cgroup: Unknown subsys name 'cpuset' [ 160.816593][ T5564] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 166.446889][ T5564] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 170.757987][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.769924][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.780296][ T5591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.795353][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.807965][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.816968][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.827763][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.836947][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.851204][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.868900][ T4876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.876605][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.887221][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.896693][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.914027][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.921826][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.935222][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.943729][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.954502][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.964899][ T5588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.987927][ T5588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.001190][ T5588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.012763][ T5585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.024562][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.036160][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.065359][ T5585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.059064][ T5585] Bluetooth: hci2: command tx timeout [ 173.060713][ T4876] Bluetooth: hci1: command tx timeout [ 173.064719][ T5591] Bluetooth: hci0: command tx timeout [ 173.139293][ T5591] Bluetooth: hci4: command tx timeout [ 173.144989][ T5585] Bluetooth: hci3: command tx timeout [ 175.086942][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.101783][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.128344][ T5584] bridge_slave_0: entered allmulticast mode [ 175.138705][ T5591] Bluetooth: hci0: command tx timeout [ 175.139185][ T5585] Bluetooth: hci2: command tx timeout [ 175.144314][ T4876] Bluetooth: hci1: command tx timeout [ 175.171426][ T5584] bridge_slave_0: entered promiscuous mode [ 175.199602][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.219765][ T5591] Bluetooth: hci4: command tx timeout [ 175.225447][ T4876] Bluetooth: hci3: command tx timeout [ 175.232247][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.240473][ T5584] bridge_slave_1: entered allmulticast mode [ 175.249982][ T5584] bridge_slave_1: entered promiscuous mode [ 175.332008][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.351843][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.546230][ T5584] team0: Port device team_slave_0 added [ 175.553028][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.566820][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.575073][ T5586] bridge_slave_0: entered allmulticast mode [ 175.585446][ T5586] bridge_slave_0: entered promiscuous mode [ 175.629217][ T5584] team0: Port device team_slave_1 added [ 175.635562][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.643918][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.651716][ T5586] bridge_slave_1: entered allmulticast mode [ 175.660258][ T5586] bridge_slave_1: entered promiscuous mode [ 175.692666][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.700268][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.708184][ T5582] bridge_slave_0: entered allmulticast mode [ 175.716266][ T5582] bridge_slave_0: entered promiscuous mode [ 175.816463][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.824064][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.831835][ T5582] bridge_slave_1: entered allmulticast mode [ 175.839941][ T5582] bridge_slave_1: entered promiscuous mode [ 175.915635][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.923315][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.931121][ T5596] bridge_slave_0: entered allmulticast mode [ 175.939880][ T5596] bridge_slave_0: entered promiscuous mode [ 175.980285][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.988036][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.995504][ T5583] bridge_slave_0: entered allmulticast mode [ 176.004386][ T5583] bridge_slave_0: entered promiscuous mode [ 176.016669][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.024039][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.050278][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.071162][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.080806][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.088724][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.096132][ T5596] bridge_slave_1: entered allmulticast mode [ 176.104715][ T5596] bridge_slave_1: entered promiscuous mode [ 176.137679][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.145527][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.153371][ T5583] bridge_slave_1: entered allmulticast mode [ 176.161632][ T5583] bridge_slave_1: entered promiscuous mode [ 176.173410][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.180836][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.209051][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.278168][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.354778][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.453027][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.495039][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.511510][ T5586] team0: Port device team_slave_0 added [ 176.525530][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.569832][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.585484][ T5586] team0: Port device team_slave_1 added [ 176.626481][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.752193][ T5582] team0: Port device team_slave_0 added [ 176.806926][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.814466][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.840880][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.882261][ T5582] team0: Port device team_slave_1 added [ 176.901814][ T5584] hsr_slave_0: entered promiscuous mode [ 176.910190][ T5584] hsr_slave_1: entered promiscuous mode [ 176.925502][ T5583] team0: Port device team_slave_0 added [ 176.933313][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.940886][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.967219][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.985085][ T5596] team0: Port device team_slave_0 added [ 177.035659][ T5583] team0: Port device team_slave_1 added [ 177.062212][ T5596] team0: Port device team_slave_1 added [ 177.094581][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.101921][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.128203][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.213168][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.219181][ T5591] Bluetooth: hci0: command tx timeout [ 177.225916][ T4876] Bluetooth: hci1: command tx timeout [ 177.226238][ T5585] Bluetooth: hci2: command tx timeout [ 177.232477][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.263925][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.297777][ T5585] Bluetooth: hci4: command tx timeout [ 177.297863][ T5591] Bluetooth: hci3: command tx timeout [ 177.410268][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.417689][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.445265][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.497761][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.504915][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.532951][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.607019][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.614604][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.640955][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.675924][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.683149][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.709524][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.782983][ T5586] hsr_slave_0: entered promiscuous mode [ 177.791449][ T5586] hsr_slave_1: entered promiscuous mode [ 177.799622][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 177.805445][ T5586] Cannot create hsr debugfs directory [ 177.854485][ T5582] hsr_slave_0: entered promiscuous mode [ 177.863351][ T5582] hsr_slave_1: entered promiscuous mode [ 177.871437][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 177.877258][ T5582] Cannot create hsr debugfs directory [ 178.161538][ T5583] hsr_slave_0: entered promiscuous mode [ 178.170166][ T5583] hsr_slave_1: entered promiscuous mode [ 178.180112][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 178.185997][ T5583] Cannot create hsr debugfs directory [ 178.205281][ T5596] hsr_slave_0: entered promiscuous mode [ 178.213584][ T5596] hsr_slave_1: entered promiscuous mode [ 178.221586][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 178.227495][ T5596] Cannot create hsr debugfs directory [ 179.174369][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.191217][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.201496][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.220281][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.229696][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.248392][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.295077][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.303092][ T5591] Bluetooth: hci0: command tx timeout [ 179.304505][ T5585] Bluetooth: hci1: command tx timeout [ 179.308855][ T4876] Bluetooth: hci2: command tx timeout [ 179.329672][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.379199][ T5585] Bluetooth: hci4: command tx timeout [ 179.380032][ T5591] Bluetooth: hci3: command tx timeout [ 179.482783][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.502276][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.529613][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.550058][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.577549][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.601598][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.628993][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.647219][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.746919][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.770886][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.785099][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.801921][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.822174][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.844570][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.857080][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.873937][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.098687][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.117110][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.129855][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.148809][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.180764][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.199815][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.209974][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.228936][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.492605][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.512668][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.522379][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.540316][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.549997][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.569535][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.614831][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.633999][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.743728][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.923450][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.006356][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.030601][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.038020][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.108745][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.116236][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.170505][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.271822][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.329224][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.336600][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.366466][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.456472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.463824][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.485920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.493285][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.521508][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.594340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.601760][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.632258][ T5584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.819393][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.943858][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.951561][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.044863][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.052489][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.142222][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.380974][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.504681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.512260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.653367][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.661126][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.382775][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.476434][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.766868][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.151040][ T5586] veth0_vlan: entered promiscuous mode [ 186.318524][ T5586] veth1_vlan: entered promiscuous mode [ 186.345649][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.402304][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.608873][ T5584] veth0_vlan: entered promiscuous mode [ 186.616171][ T5583] veth0_vlan: entered promiscuous mode [ 186.708840][ T5586] veth0_macvtap: entered promiscuous mode [ 186.743737][ T5583] veth1_vlan: entered promiscuous mode [ 186.767740][ T5584] veth1_vlan: entered promiscuous mode [ 186.810465][ T5586] veth1_macvtap: entered promiscuous mode [ 187.005291][ T5582] veth0_vlan: entered promiscuous mode [ 187.033468][ T5596] veth0_vlan: entered promiscuous mode [ 187.049747][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.103630][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.129930][ T5582] veth1_vlan: entered promiscuous mode [ 187.173345][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.185793][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.226731][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.249235][ T5596] veth1_vlan: entered promiscuous mode [ 187.271949][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.307077][ T5584] veth0_macvtap: entered promiscuous mode [ 187.326915][ T5583] veth0_macvtap: entered promiscuous mode [ 187.385304][ T5584] veth1_macvtap: entered promiscuous mode [ 187.426508][ T5583] veth1_macvtap: entered promiscuous mode [ 187.648940][ T5582] veth0_macvtap: entered promiscuous mode [ 187.679494][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.733367][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.772642][ T5582] veth1_macvtap: entered promiscuous mode [ 187.846070][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.910655][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.926383][ T5596] veth0_macvtap: entered promiscuous mode [ 188.005670][ T5712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.017124][ T5712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.072859][ T5712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.087516][ T5712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.128030][ T5596] veth1_macvtap: entered promiscuous mode [ 188.149610][ T5712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.162476][ T5712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.223795][ T5712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.253656][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.306306][ T5712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.369833][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.496446][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.525423][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.555146][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.606389][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.632929][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.684186][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.838943][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.862070][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.903502][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.951512][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.835411][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.880605][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.130311][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.153764][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.536838][ T5586] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 193.812331][ T5729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.860482][ T5729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.056277][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.080565][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.273139][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.290054][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.454808][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.474345][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.486781][ T5854] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 194.597042][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.643235][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.891927][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.945353][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.269600][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.277765][ T5856] syzkaller0: entered promiscuous mode [ 195.277859][ T5856] syzkaller0: entered allmulticast mode [ 195.327526][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.529243][ T5729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.557512][ T5729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.059295][ T5866] syz_tun: entered allmulticast mode [ 196.176854][ T11] IPVS: starting estimator thread 0... [ 196.317820][ T5867] IPVS: using max 240 ests per chain, 12000 per kthread [ 198.929208][ T5918] netlink: 27 bytes leftover after parsing attributes in process `syz.0.24'. [ 200.320813][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 200.333018][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 200.390596][ T5934] netlink: 15 bytes leftover after parsing attributes in process `syz.0.28'. [ 201.068355][ T5942] syzkaller0: entered promiscuous mode [ 201.074049][ T5942] syzkaller0: entered allmulticast mode [ 201.154686][ T5943] tipc: Started in network mode [ 201.202718][ T5943] tipc: Node identity d6a7a3e57eff, cluster identity 4711 [ 201.235450][ T5943] tipc: Enabled bearer , priority 0 [ 201.517515][ T5945] syzkaller0: entered promiscuous mode [ 201.529145][ T5945] syzkaller0: entered allmulticast mode [ 201.642359][ T5946] Zero length message leads to an empty skb [ 201.653996][ T5957] tipc: Resetting bearer [ 201.762420][ T5941] tipc: Resetting bearer [ 201.832894][ T5941] tipc: Disabling bearer [ 204.827792][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.834694][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.357885][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 209.515228][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 209.644119][ T6065] netlink: 72 bytes leftover after parsing attributes in process `syz.3.74'. [ 210.492073][ T6078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.961564][ T6072] syzkaller0: entered promiscuous mode [ 210.968389][ T6072] syzkaller0: entered allmulticast mode [ 211.412134][ T6078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.466293][ T6087] syzkaller0: entered promiscuous mode [ 211.541768][ T6087] syzkaller0: entered allmulticast mode [ 211.774626][ T6078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.081857][ T6078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.545536][ T198] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.657012][ T198] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.784821][ T1020] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.872304][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.425372][ T6111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.432981][ T6111] IPv6: NLM_F_CREATE should be set when creating new route [ 213.440612][ T6111] IPv6: NLM_F_CREATE should be set when creating new route [ 214.235807][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 214.457104][ T6122] syzkaller0: entered promiscuous mode [ 214.522658][ T6122] syzkaller0: entered allmulticast mode [ 214.560382][ T6118] tipc: Enabling of bearer rejected, failed to enable media [ 215.257278][ T6135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.350664][ T6125] syzkaller0: entered promiscuous mode [ 215.362264][ T6125] syzkaller0: entered allmulticast mode [ 215.468327][ T6135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.716164][ T6135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.965494][ T6135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.992515][ T6144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.331673][ T198] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.510700][ T134] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.640901][ T14] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.752656][ T14] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.114949][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 217.778123][ T6169] syzkaller0: entered promiscuous mode [ 217.811528][ T6169] syzkaller0: entered allmulticast mode [ 218.344642][ T6180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.352161][ T6180] IPv6: NLM_F_CREATE should be set when creating new route [ 218.359799][ T6180] IPv6: NLM_F_CREATE should be set when creating new route [ 218.718097][ T6187] syzkaller0: entered promiscuous mode [ 218.724310][ T6187] syzkaller0: entered allmulticast mode [ 218.781317][ T6189] syz.1.117 uses obsolete (PF_INET,SOCK_PACKET) [ 218.800879][ T6187] tipc: Enabling of bearer rejected, failed to enable media [ 219.348621][ T6195] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.453691][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 219.523559][ T6195] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.663136][ T6195] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.839512][ T6195] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.255958][ T5721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.325847][ T134] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.402862][ T134] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.489707][ T134] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.846925][ T6211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.854620][ T6211] IPv6: NLM_F_CREATE should be set when creating new route [ 220.862228][ T6211] IPv6: NLM_F_CREATE should be set when creating new route [ 221.473087][ T6217] syzkaller0: entered promiscuous mode [ 221.559909][ T6217] syzkaller0: entered allmulticast mode [ 221.826366][ T6224] syzkaller0: entered promiscuous mode [ 221.862198][ T6224] syzkaller0: entered allmulticast mode [ 222.064785][ T6225] tipc: Enabling of bearer rejected, failed to enable media [ 222.264156][ T6235] team0: Port device vxlan0 added [ 222.270784][ T5712] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.283275][ T14] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.329526][ T14] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.342085][ T14] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.997927][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 224.292671][ T6267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.669262][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 225.796917][ T6290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.150'. [ 226.409642][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 227.258109][ T6313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.196912][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.206636][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.218112][ T6348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.239243][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.289400][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.722131][ T5712] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.743849][ T5712] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.786579][ T5712] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.833097][ T5712] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.441829][ T6361] syzkaller0: entered promiscuous mode [ 231.452464][ T6361] syzkaller0: entered allmulticast mode [ 231.466610][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 231.571520][ T6367] netlink: 72 bytes leftover after parsing attributes in process `syz.0.175'. [ 232.711255][ T6384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.277411][ T6387] syzkaller0: entered promiscuous mode [ 233.307022][ T6387] syzkaller0: entered allmulticast mode [ 235.342091][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 236.360046][ T6430] syzkaller0: entered promiscuous mode [ 236.382721][ T6430] syzkaller0: entered allmulticast mode [ 236.576237][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 236.676703][ T6439] netlink: 72 bytes leftover after parsing attributes in process `syz.4.200'. [ 237.842408][ T6457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.850021][ T6457] IPv6: NLM_F_CREATE should be set when creating new route [ 237.857558][ T6457] IPv6: NLM_F_CREATE should be set when creating new route [ 242.444809][ T6520] syzkaller0: entered promiscuous mode [ 242.460767][ T6520] syzkaller0: entered allmulticast mode [ 243.386087][ T6534] syzkaller0: entered promiscuous mode [ 243.408842][ T6534] syzkaller0: entered allmulticast mode [ 244.539946][ T6556] syzkaller0: entered promiscuous mode [ 244.587766][ T6556] syzkaller0: entered allmulticast mode [ 244.838390][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 246.030873][ T6573] syzkaller0: entered promiscuous mode [ 246.049632][ T6573] syzkaller0: entered allmulticast mode [ 246.550530][ T6587] syzkaller0: entered promiscuous mode [ 246.575927][ T6587] syzkaller0: entered allmulticast mode [ 247.719908][ T6610] syzkaller0: entered promiscuous mode [ 247.764916][ T6610] syzkaller0: entered allmulticast mode [ 247.880138][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 248.007425][ T6620] netlink: 72 bytes leftover after parsing attributes in process `syz.3.261'. [ 248.352965][ T6615] tc action pedit 'at' offset 9 out of bounds [ 249.365189][ T6637] syzkaller0: entered promiscuous mode [ 249.396156][ T6637] syzkaller0: entered allmulticast mode [ 250.095334][ T6646] syzkaller0: entered promiscuous mode [ 250.142999][ T6646] syzkaller0: entered allmulticast mode [ 251.042993][ T6660] syzkaller0: entered promiscuous mode [ 251.062356][ T6660] syzkaller0: entered allmulticast mode [ 251.808413][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 251.843340][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 252.019409][ T6670] team0: entered promiscuous mode [ 252.048299][ T6670] team_slave_0: entered promiscuous mode [ 252.095790][ T6670] team_slave_1: entered promiscuous mode [ 252.132745][ T6670] vxlan0: entered promiscuous mode [ 252.218686][ T6670] bond0: entered promiscuous mode [ 252.236003][ T6670] bond_slave_0: entered promiscuous mode [ 252.264874][ T6670] bond_slave_1: entered promiscuous mode [ 252.316523][ T6670] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 253.674042][ T6690] syzkaller0: entered promiscuous mode [ 253.701467][ T6690] syzkaller0: entered allmulticast mode [ 254.425824][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 254.547983][ T6710] netlink: 72 bytes leftover after parsing attributes in process `syz.2.291'. [ 254.866787][ T6713] syzkaller0: entered promiscuous mode [ 254.875417][ T6713] syzkaller0: entered allmulticast mode [ 258.092728][ T6751] syzkaller0: entered promiscuous mode [ 258.160926][ T6751] syzkaller0: entered allmulticast mode [ 258.789761][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 258.910402][ T6761] netlink: 72 bytes leftover after parsing attributes in process `syz.2.311'. [ 260.321237][ T6775] syz.4.314 (6775) used greatest stack depth: 1808 bytes left [ 260.849962][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 261.677072][ T6799] syzkaller0: entered promiscuous mode [ 261.724679][ T6799] syzkaller0: entered allmulticast mode [ 263.350505][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 263.621189][ T6832] netlink: 72 bytes leftover after parsing attributes in process `syz.0.336'. [ 264.912112][ T6843] syzkaller0: entered promiscuous mode [ 264.945560][ T6843] syzkaller0: entered allmulticast mode [ 265.964443][ T6864] netlink: 136 bytes leftover after parsing attributes in process `syz.4.345'. [ 266.268091][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.276978][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.512625][ T6869] syzkaller0: entered promiscuous mode [ 266.551443][ T6869] syzkaller0: entered allmulticast mode [ 266.631910][ T6871] tipc: Started in network mode [ 266.643588][ T6871] tipc: Node identity 2632b5650f28, cluster identity 4711 [ 266.693930][ T6871] tipc: Enabled bearer , priority 0 [ 266.781209][ T6868] tipc: Resetting bearer [ 266.871271][ T6868] tipc: Disabling bearer [ 268.933990][ T6896] syzkaller0: entered promiscuous mode [ 268.964076][ T6896] syzkaller0: entered allmulticast mode [ 271.533976][ T6943] syzkaller0: entered promiscuous mode [ 271.540839][ T6943] syzkaller0: entered allmulticast mode [ 273.970625][ T6978] syzkaller0: entered promiscuous mode [ 274.001817][ T6978] syzkaller0: entered allmulticast mode [ 275.250562][ T7000] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 275.301063][ T7000] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 275.394134][ T7000] netlink: 'syz.4.401': attribute type 2 has an invalid length. [ 275.489843][ T7000] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 277.974855][ T7040] syzkaller0: entered promiscuous mode [ 278.006387][ T7040] syzkaller0: entered allmulticast mode [ 278.496441][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 278.689934][ T7059] netlink: 72 bytes leftover after parsing attributes in process `syz.4.418'. [ 282.174336][ T7102] syzkaller0: entered promiscuous mode [ 282.206573][ T7102] syzkaller0: entered allmulticast mode [ 282.331020][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 284.185293][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.194599][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.164016][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.204568][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.792331][ T5729] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.825501][ T5729] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.878667][ T5729] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.914884][ T5729] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.281576][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 287.504968][ T7199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.457'. [ 287.622646][ T7182] syzkaller0: entered promiscuous mode [ 287.659488][ T7182] syzkaller0: entered allmulticast mode [ 289.151965][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 290.195071][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 290.325861][ T7245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.468'. [ 293.855561][ T7294] vlan2: entered promiscuous mode [ 293.876751][ T7294] batadv0: entered promiscuous mode [ 293.942747][ T7266] Bluetooth: hci2: command 0x0406 tx timeout [ 293.949502][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 293.952588][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 293.955737][ T5590] Bluetooth: hci1: command 0x0406 tx timeout [ 293.964763][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 297.531188][ T7357] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 297.641686][ T7358] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 297.952407][ T7357] team0: Port device wlan0 added [ 298.106068][ T7358] team0: Port device wlan0 removed [ 298.223801][ T7358] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 300.168224][ T7389] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 300.213329][ T7389] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 300.248360][ T7389] netlink: 'syz.4.521': attribute type 2 has an invalid length. [ 300.279898][ T7391] syzkaller0: entered promiscuous mode [ 300.296217][ T7389] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 300.315250][ T7391] syzkaller0: entered allmulticast mode [ 300.599252][ T7398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.635897][ T7395] syzkaller0: entered promiscuous mode [ 300.652566][ T7395] syzkaller0: entered allmulticast mode [ 300.988991][ T7398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.348718][ T7398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.565488][ T7398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.913348][ T5729] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.032587][ T5729] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.215083][ T1020] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.675988][ T1020] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.724170][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 302.832236][ T7431] netlink: 72 bytes leftover after parsing attributes in process `syz.4.535'. [ 303.420974][ T7439] syzkaller0: entered promiscuous mode [ 303.445201][ T7439] syzkaller0: entered allmulticast mode [ 304.814896][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.547'. [ 307.699979][ T7490] syzkaller0: entered promiscuous mode [ 307.760478][ T7490] syzkaller0: entered allmulticast mode [ 308.715105][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 308.827477][ T7529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.563'. [ 311.736838][ T7572] tap0: tun_chr_ioctl cmd 1074025677 [ 311.744816][ T7572] tap0: linktype set to 270 [ 311.998354][ T7574] syzkaller0: entered promiscuous mode [ 312.038278][ T7574] syzkaller0: entered allmulticast mode [ 314.189263][ T7612] netlink: 380 bytes leftover after parsing attributes in process `syz.0.588'. [ 314.211546][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 314.234517][ T7612] netlink: 7 bytes leftover after parsing attributes in process `syz.0.588'. [ 314.719555][ T7616] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 314.741020][ T7616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.590'. [ 314.895241][ T7620] syzkaller0: entered promiscuous mode [ 314.930444][ T7620] syzkaller0: entered allmulticast mode [ 317.831484][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 318.173592][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 321.396227][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 323.496281][ T7744] tc_dump_action: action bad kind [ 323.968555][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 324.812231][ T7765] team0: Port device vxlan0 added [ 325.224063][ T14] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.255537][ T14] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.424781][ T14] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.454839][ T14] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.675959][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 327.410486][ T7820] netlink: 'syz.3.664': attribute type 32 has an invalid length. [ 327.469751][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 327.495971][ T7820] netlink: 'syz.3.664': attribute type 32 has an invalid length. [ 327.706335][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.730923][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.899433][ T7823] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 327.932749][ T7823] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 327.963772][ T7823] netlink: 'syz.4.665': attribute type 2 has an invalid length. [ 328.022834][ T7823] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 328.608387][ T7827] syzkaller0: entered promiscuous mode [ 328.637551][ T7827] syzkaller0: entered allmulticast mode [ 328.982207][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 334.463959][ T7942] syzkaller0: entered promiscuous mode [ 334.500386][ T7942] syzkaller0: entered allmulticast mode [ 334.567886][ T7944] tipc: Enabling of bearer rejected, failed to enable media [ 334.832112][ T7949] netlink: 27 bytes leftover after parsing attributes in process `syz.4.696'. [ 335.443097][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 335.533690][ T7960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.700'. [ 336.155187][ T7967] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 336.189731][ T7967] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 336.248459][ T7967] netlink: 'syz.2.703': attribute type 2 has an invalid length. [ 336.318379][ T7967] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 337.946936][ T7979] syzkaller0: entered promiscuous mode [ 338.008142][ T7979] syzkaller0: entered allmulticast mode [ 338.115795][ T7984] tipc: Enabling of bearer rejected, failed to enable media [ 338.756491][ T7988] syzkaller0: entered promiscuous mode [ 338.789640][ T7988] syzkaller0: entered allmulticast mode [ 339.066869][ T7999] netlink: 27 bytes leftover after parsing attributes in process `syz.4.711'. [ 339.739314][ T8006] netlink: 392 bytes leftover after parsing attributes in process `syz.0.714'. [ 340.455201][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 340.496124][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.562015][ T8018] syzkaller0: entered promiscuous mode [ 340.595495][ T8018] syzkaller0: entered allmulticast mode [ 340.643145][ T8023] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 340.688188][ T8023] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 340.715942][ T8023] netlink: 'syz.1.720': attribute type 2 has an invalid length. [ 340.761625][ T8023] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 341.129379][ T8027] tipc: Enabled bearer , priority 0 [ 341.190384][ T8024] tipc: Disabling bearer [ 341.693918][ T8043] netlink: 27 bytes leftover after parsing attributes in process `syz.0.725'. [ 342.132747][ T8034] tipc: Enabling of bearer rejected, failed to enable media [ 342.245644][ T8044] syzkaller0: entered promiscuous mode [ 342.308183][ T8044] syzkaller0: entered allmulticast mode [ 342.751893][ T8054] syzkaller0: entered promiscuous mode [ 342.774745][ T8054] syzkaller0: entered allmulticast mode [ 343.865384][ T8069] syzkaller0: entered promiscuous mode [ 343.881751][ T8069] syzkaller0: entered allmulticast mode [ 344.522268][ T8074] tipc: Enabled bearer , priority 0 [ 344.596781][ T8072] tipc: Disabling bearer [ 344.742551][ T8078] netlink: 27 bytes leftover after parsing attributes in process `syz.0.738'. [ 345.119645][ T8080] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 345.195958][ T8080] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 345.262046][ T8080] netlink: 'syz.3.739': attribute type 2 has an invalid length. [ 345.333245][ T8080] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 345.676595][ T8087] syzkaller0: entered promiscuous mode [ 345.698078][ T8087] syzkaller0: entered allmulticast mode [ 345.736370][ T8087] tipc: Enabling of bearer rejected, failed to enable media [ 347.947855][ T8104] syzkaller0: entered promiscuous mode [ 347.989313][ T8104] syzkaller0: entered allmulticast mode [ 348.393144][ T8117] netlink: 27 bytes leftover after parsing attributes in process `syz.1.752'. [ 348.495837][ T8111] tipc: Started in network mode [ 348.508005][ T8111] tipc: Node identity 5232680ec55c, cluster identity 4711 [ 348.569489][ T8111] tipc: Enabled bearer , priority 0 [ 348.991276][ T8109] tipc: Disabling bearer [ 349.492129][ T8129] syzkaller0: entered promiscuous mode [ 349.506202][ T8129] syzkaller0: entered allmulticast mode [ 349.596915][ T8130] tipc: Enabling of bearer rejected, failed to enable media [ 349.752978][ T8132] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 349.771557][ T8132] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 349.783781][ T8132] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 349.800909][ T8132] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 350.457621][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.761'. [ 351.289027][ T8149] syzkaller0: entered promiscuous mode [ 351.313278][ T8149] syzkaller0: entered allmulticast mode [ 351.645301][ T8153] netlink: 27 bytes leftover after parsing attributes in process `syz.0.765'. [ 352.143496][ T8158] tipc: Started in network mode [ 352.155836][ T8158] tipc: Node identity 52b0a1320ce3, cluster identity 4711 [ 352.203770][ T8158] tipc: Enabled bearer , priority 0 [ 352.241218][ T8157] tipc: Disabling bearer [ 352.999029][ T8167] syzkaller0: entered promiscuous mode [ 353.033548][ T8167] syzkaller0: entered allmulticast mode [ 353.140522][ T8168] tipc: Enabling of bearer rejected, failed to enable media [ 353.447609][ T8174] tipc: Enabled bearer , priority 0 [ 353.734056][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 353.980919][ T8175] syzkaller0: entered promiscuous mode [ 353.986485][ T8185] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 353.986561][ T8185] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 353.986626][ T8185] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 353.986692][ T8185] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 354.080678][ T8175] syzkaller0: entered allmulticast mode [ 354.140744][ T8175] tipc: Resetting bearer [ 354.207240][ T14] tipc: Resetting bearer [ 354.777780][ T8203] netlink: 27 bytes leftover after parsing attributes in process `syz.1.778'. [ 355.912233][ T8173] tipc: Resetting bearer [ 356.124898][ T8173] tipc: Disabling bearer [ 356.154727][ T5685] tipc: Node number set to 2824381413 [ 356.945098][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 357.235797][ T8232] tipc: Enabling of bearer rejected, failed to enable media [ 358.464783][ T8252] netlink: 27 bytes leftover after parsing attributes in process `syz.0.789'. [ 359.009739][ T8256] syzkaller0: entered promiscuous mode [ 359.029714][ T8256] syzkaller0: entered allmulticast mode [ 359.718781][ T8261] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 359.741047][ T8261] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 359.798049][ T8261] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 359.865354][ T8261] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 359.905353][ T8264] syzkaller0: entered promiscuous mode [ 359.918597][ T8264] syzkaller0: entered allmulticast mode [ 359.965282][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 361.898209][ T8287] tipc: Enabling of bearer rejected, failed to enable media [ 362.823348][ T8294] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.089557][ T8294] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.278545][ T8294] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.503536][ T8294] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.603400][ T8304] syzkaller0: entered promiscuous mode [ 363.641631][ T8304] syzkaller0: entered allmulticast mode [ 363.918943][ T5729] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.999044][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.088187][ T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.204078][ T8315] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 364.236814][ T8315] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 364.264745][ T8315] netlink: 'syz.1.808': attribute type 2 has an invalid length. [ 364.277224][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.338312][ T8315] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 366.149804][ T8337] smc: net device wlan0 applied user defined pnetid SYZ0 [ 366.193375][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 366.612226][ T8344] syzkaller0: entered promiscuous mode [ 366.642107][ T8344] syzkaller0: entered allmulticast mode [ 366.673013][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 366.963771][ T8357] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.159131][ T8357] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.382351][ T8357] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.543676][ T8357] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.872583][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.904062][ T8368] syzkaller0: entered promiscuous mode [ 367.938524][ T8368] syzkaller0: entered allmulticast mode [ 368.055610][ T14] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.319363][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 368.353846][ T198] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.473469][ T198] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.721906][ T8385] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 368.762885][ T8385] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 368.798142][ T8385] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 368.883791][ T8385] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 371.281412][ T8416] netlink: 27 bytes leftover after parsing attributes in process `syz.0.840'. [ 371.953092][ T8421] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.161067][ T8421] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.370703][ T8421] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.483166][ T8421] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.775463][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 372.859380][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'. [ 372.911953][ T8443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.848'. [ 372.949792][ T14] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.993320][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.130165][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.166093][ T8445] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 373.223946][ T14] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.232253][ T8445] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 373.232331][ T8445] netlink: 'syz.2.850': attribute type 2 has an invalid length. [ 373.232398][ T8445] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 375.970692][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 376.551302][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'. [ 376.594723][ T8494] netlink: 52 bytes leftover after parsing attributes in process `syz.2.861'. [ 377.565002][ T8511] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 377.579799][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 377.589933][ T8511] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 377.607759][ T8511] netlink: 'syz.1.867': attribute type 2 has an invalid length. [ 377.630212][ T8513] vlan0: entered promiscuous mode [ 377.631557][ T8511] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 377.636508][ T8513] gretap0: entered promiscuous mode [ 378.920724][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 379.324119][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 382.405437][ T8565] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 382.437853][ T8565] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 382.465089][ T8565] netlink: 'syz.2.886': attribute type 2 has an invalid length. [ 382.535681][ T8565] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 384.131562][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 386.052190][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 386.108080][ T8619] netlink: 44 bytes leftover after parsing attributes in process `syz.4.904'. [ 386.428473][ T8621] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 386.470999][ T8621] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 386.508513][ T8621] netlink: 'syz.2.905': attribute type 2 has an invalid length. [ 386.542434][ T8621] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 388.311353][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.918'. [ 388.354090][ T8652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.918'. [ 389.076485][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 389.146143][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.153546][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.204748][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 389.255773][ T8670] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 389.264184][ T8662] bond0: option arp_all_targets: invalid value (8) [ 389.314338][ T8670] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 389.369784][ T8670] netlink: 'syz.0.923': attribute type 2 has an invalid length. [ 389.424797][ T8670] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 389.646520][ T8671] vlan2: entered allmulticast mode [ 389.664679][ T8671] bridge1: entered allmulticast mode [ 389.682721][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 389.742804][ T8672] bridge1: port 1(erspan0) entered blocking state [ 389.759437][ T8672] bridge1: port 1(erspan0) entered disabled state [ 389.770714][ T8672] erspan0: entered allmulticast mode [ 389.816361][ T8672] erspan0: entered promiscuous mode [ 389.842116][ T8672] bridge1: port 1(erspan0) entered blocking state [ 389.849228][ T8672] bridge1: port 1(erspan0) entered forwarding state [ 390.097395][ T8669] bridge1: port 1(erspan0) entered disabled state [ 390.458510][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.524526][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.029251][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 391.094493][ T8707] netlink: 72 bytes leftover after parsing attributes in process `syz.2.932'. [ 391.198815][ T8699] warning: `syz.0.930' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 392.932172][ T8729] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 392.972335][ T8729] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 393.000667][ T8729] netlink: 'syz.4.940': attribute type 2 has an invalid length. [ 393.051017][ T8729] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 393.333931][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 393.360631][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'. [ 393.926566][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.944'. [ 393.966024][ T8743] netlink: 260 bytes leftover after parsing attributes in process `syz.4.946'. [ 395.229228][ T8763] syzkaller0: entered promiscuous mode [ 395.244850][ T8763] syzkaller0: entered allmulticast mode [ 395.252128][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 395.275597][ T8764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.954'. [ 395.855439][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 395.862705][ T8770] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 395.892681][ T8770] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 395.941340][ T8770] netlink: 'syz.0.956': attribute type 2 has an invalid length. [ 395.952599][ T8775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.957'. [ 396.018880][ T8770] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 396.175238][ T8782] netlink: 260 bytes leftover after parsing attributes in process `syz.3.959'. [ 396.524172][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.960'. [ 397.764562][ T8797] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 397.802343][ T8797] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 398.110469][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.967'. [ 398.138103][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.967'. [ 398.622782][ T8807] syzkaller0: entered promiscuous mode [ 398.650088][ T8807] syzkaller0: entered allmulticast mode [ 398.763225][ T8812] netlink: 260 bytes leftover after parsing attributes in process `syz.3.971'. [ 398.940096][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'. [ 399.750861][ T8825] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 399.775130][ T8825] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 399.858505][ T8825] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 399.914673][ T8825] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 400.535315][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 400.548643][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.981'. [ 400.918577][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 401.017198][ T8847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.983'. [ 401.232660][ T8854] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.361638][ T14] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.393360][ T8856] syzkaller0: entered promiscuous mode [ 401.416607][ T8856] syzkaller0: entered allmulticast mode [ 401.631899][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 402.762284][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 403.634110][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 403.662606][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.994'. [ 404.653392][ T8908] syzkaller0: entered promiscuous mode [ 404.671852][ T8908] syzkaller0: entered allmulticast mode [ 405.618232][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.882265][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 406.992684][ T8955] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1011'. [ 409.470422][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 410.382448][ T9002] syzkaller0: entered promiscuous mode [ 410.396833][ T9002] syzkaller0: entered allmulticast mode [ 412.689199][ T5685] IPVS: starting estimator thread 0... [ 412.812905][ T9053] IPVS: using max 240 ests per chain, 12000 per kthread [ 413.509083][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 413.573748][ T9070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1037'. [ 414.098096][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.432864][ T9075] syzkaller0: entered promiscuous mode [ 414.484792][ T9075] syzkaller0: entered allmulticast mode [ 415.826526][ T9101] syzkaller0: entered promiscuous mode [ 415.850238][ T9101] syzkaller0: entered allmulticast mode [ 417.357033][ T9122] syzkaller1: entered promiscuous mode [ 417.395096][ T9122] syzkaller1: entered allmulticast mode [ 417.990891][ T9130] syzkaller0: entered promiscuous mode [ 418.017687][ T9130] syzkaller0: entered allmulticast mode [ 418.736702][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 418.805747][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1059'. [ 419.372136][ T9158] syzkaller0: entered promiscuous mode [ 419.406267][ T9158] syzkaller0: entered allmulticast mode [ 421.674881][ T9184] syzkaller0: entered promiscuous mode [ 421.695741][ T9184] syzkaller0: entered allmulticast mode [ 423.628448][ T9222] tipc: Enabled bearer , priority 0 [ 423.663757][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 423.833945][ T9221] syzkaller0: entered promiscuous mode [ 423.842369][ T9221] syzkaller0: entered allmulticast mode [ 423.897195][ T9220] tipc: Disabling bearer [ 426.946432][ T9290] syzkaller0: entered promiscuous mode [ 426.985734][ T9290] syzkaller0: entered allmulticast mode [ 427.740916][ T9303] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.767863][ T9303] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.967076][ T9303] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.003442][ T9303] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.132997][ T9303] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.162602][ T9303] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.389004][ T9303] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.421200][ T9303] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.711369][ T198] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.721071][ T198] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.811901][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.826867][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.922117][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.935084][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.064012][ T5712] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.082846][ T5712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.149430][ T9332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1109'. [ 430.723026][ T9356] syzkaller0: entered promiscuous mode [ 430.738094][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.757827][ T9356] syzkaller0: entered allmulticast mode [ 432.398886][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1124'. [ 433.684873][ T9417] netlink: 'syz.3.1130': attribute type 9 has an invalid length. [ 433.739126][ T9417] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1130'. [ 433.753822][ T9413] tipc: Enabled bearer , priority 0 [ 433.909931][ T9410] tipc: Disabling bearer [ 436.012908][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 436.705021][ T9461] netlink: 'syz.2.1144': attribute type 9 has an invalid length. [ 436.748401][ T9461] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1144'. [ 437.076030][ T9464] tipc: Enabled bearer , priority 0 [ 437.177052][ T9463] tipc: Disabling bearer [ 437.433644][ T9472] syzkaller0: entered promiscuous mode [ 437.460466][ T9472] syzkaller0: entered allmulticast mode [ 439.519467][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 440.539087][ T9523] tipc: Enabled bearer , priority 0 [ 440.957159][ T9518] tipc: Disabling bearer [ 441.304407][ T9541] syzkaller0: entered promiscuous mode [ 441.330022][ T9541] syzkaller0: entered allmulticast mode [ 443.105703][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'. [ 445.029307][ T9607] syzkaller0: entered promiscuous mode [ 445.055502][ T9607] syzkaller0: entered allmulticast mode [ 446.298639][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 447.075144][ T9651] geneve2: entered promiscuous mode [ 447.938375][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 448.194423][ T9668] vlan2: entered promiscuous mode [ 448.215306][ T9668] gretap0: entered promiscuous mode [ 449.119927][ T9679] syzkaller0: entered promiscuous mode [ 449.142642][ T9679] syzkaller0: entered allmulticast mode [ 449.489033][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 450.600544][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.613192][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.360762][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'. [ 452.395474][ T9732] syzkaller0: entered promiscuous mode [ 452.405523][ T9732] syzkaller0: entered allmulticast mode [ 453.502557][ T9743] syzkaller0: entered promiscuous mode [ 453.508696][ T9743] syzkaller0: entered allmulticast mode [ 456.621475][ T9801] syzkaller0: entered promiscuous mode [ 456.642303][ T9801] syzkaller0: entered allmulticast mode [ 457.985705][ T9812] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 458.010713][ T9812] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 458.046019][ T9812] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 458.569163][ T9835] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1238'. [ 458.978251][ T5588] Bluetooth: hci4: command 0x0406 tx timeout [ 459.901906][ T9859] syzkaller0: entered promiscuous mode [ 459.908265][ T9859] syzkaller0: entered allmulticast mode [ 460.274664][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 461.022447][ T9875] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1253'. [ 462.111101][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 462.738109][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.522100][ T9913] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1267'. [ 465.588707][ T9946] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1281'. [ 466.474203][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1286'. [ 467.977019][ T9976] tc action pedit 'at' offset 9 out of bounds [ 468.527698][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 468.718577][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 468.738467][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.768002][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.815484][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.863200][ T11] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.904720][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.966010][ T11] usb 2-1: config 0 descriptor?? [ 469.361740][T10003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 469.470642][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.518005][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.534597][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.566532][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.594984][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.628299][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.647849][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.683500][ T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 469.795631][ T11] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 469.840615][ T11] microsoft 0003:045E:07DA.0001: no inputs found [ 469.885248][ T11] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 469.968101][ T11] usb 2-1: USB disconnect, device number 2 [ 470.644565][T10010] fido_id[10010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 470.944538][T10021] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 470.993800][T10021] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 471.006889][T10018] tc action pedit 'at' offset 9 out of bounds [ 471.075791][T10021] netlink: 'syz.4.1312': attribute type 2 has an invalid length. [ 471.135852][T10021] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 472.586226][T10046] syzkaller0: entered promiscuous mode [ 472.617142][T10046] syzkaller0: entered allmulticast mode [ 475.004964][T10089] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 475.075916][T10089] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 475.141948][T10089] netlink: 'syz.1.1334': attribute type 2 has an invalid length. [ 475.188320][T10089] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 476.297684][T10104] syzkaller0: entered promiscuous mode [ 476.316109][T10110] capability: warning: `syz.1.1342' uses 32-bit capabilities (legacy support in use) [ 476.330165][T10104] syzkaller0: entered allmulticast mode [ 478.572553][T10149] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 478.593260][T10149] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 478.614222][T10149] netlink: 'syz.0.1352': attribute type 2 has an invalid length. [ 478.636630][T10149] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 479.333499][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 479.769178][ T2161] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 479.958199][ T2161] usb 4-1: Using ep0 maxpacket: 32 [ 479.968787][ T5689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 479.988380][ T2161] usb 4-1: unable to get BOS descriptor or descriptor too short [ 480.041245][ T2161] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 480.061312][ T2161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.083804][ T2161] usb 4-1: Product: syz [ 480.094020][ T2161] usb 4-1: Manufacturer: syz [ 480.111691][ T2161] usb 4-1: SerialNumber: syz [ 480.149598][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 480.181943][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 480.213252][ T5689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.224459][ T5689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.236323][ T5689] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 200, using maximum allowed: 30 [ 480.249495][ T5689] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 200 [ 480.277873][ T5689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.300298][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.324527][ T5689] usb 1-1: Product: syz [ 480.336242][ T5689] usb 1-1: Manufacturer: syz [ 480.354101][ T5689] usb 1-1: SerialNumber: syz [ 480.572972][ T2161] usb 4-1: unit 0 not found! [ 480.605080][ T5689] usb-storage 1-1:1.0: USB Mass Storage device detected [ 480.719410][ T5689] usb 1-1: USB disconnect, device number 2 [ 480.809177][ T2161] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 480.910199][ T2161] usb 4-1: unit 0 not found! [ 480.953874][ T2161] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 481.024903][ T2161] usb 4-1: unit 0 not found! [ 481.454311][ T2161] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 481.524214][ T2161] usb 4-1: USB disconnect, device number 2 [ 481.757826][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.245287][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1367'. [ 482.566014][T10197] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 482.598576][T10197] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 482.631660][T10197] netlink: 'syz.4.1368': attribute type 2 has an invalid length. [ 482.676438][T10197] netlink: 'syz.4.1368': attribute type 1 has an invalid length. [ 483.087843][ T5690] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 483.097269][T10207] tipc: Enabling of bearer rejected, failed to enable media [ 483.258432][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 483.306750][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.342440][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.405604][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.444055][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.474718][ T5690] usb 2-1: Product: syz [ 483.496483][ T5690] usb 2-1: Manufacturer: syz [ 483.519000][ T5690] usb 2-1: SerialNumber: syz [ 483.596529][ T5690] usb 2-1: 0:2 : does not exist [ 483.820873][ T5690] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 484.005864][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 484.106333][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1375'. [ 484.203016][ T5690] usb 2-1: USB disconnect, device number 3 [ 484.473098][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.849920][T10232] syzkaller0: entered promiscuous mode [ 484.873126][T10232] syzkaller0: entered allmulticast mode [ 486.992499][T10270] tipc: Enabling of bearer rejected, failed to enable media [ 487.098745][ T2161] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 487.297227][ T2161] usb 1-1: config 3 has an invalid interface number: 3 but max is 0 [ 487.307806][ T2161] usb 1-1: config 3 has no interface number 0 [ 487.324832][ T2161] usb 1-1: config 3 interface 3 has no altsetting 0 [ 487.382126][ T2161] usb 1-1: string descriptor 0 read error: -22 [ 487.402941][ T2161] usb 1-1: New USB device found, idVendor=09fb, idProduct=6026, bcdDevice=ae.dc [ 487.437601][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.514815][ T2161] ftdi_sio 1-1:3.3: FTDI USB Serial Device converter detected [ 487.554777][ T2161] ftdi_sio ttyUSB0: unknown device type: 0xaedc [ 487.752914][ T2161] usb 1-1: USB disconnect, device number 3 [ 487.794688][ T2161] ftdi_sio 1-1:3.3: device disconnected [ 487.815793][T10285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 488.276229][T10289] syzkaller0: entered promiscuous mode [ 488.282716][T10289] syzkaller0: entered allmulticast mode [ 490.056663][T10320] tipc: Enabled bearer , priority 0 [ 490.097608][T10300] syzkaller0: entered promiscuous mode [ 490.111540][T10300] syzkaller0: entered allmulticast mode [ 490.162888][T10316] syzkaller0: entered promiscuous mode [ 490.180473][T10316] syzkaller0: entered allmulticast mode [ 490.522299][T10316] tipc: Resetting bearer [ 490.600170][T10316] tipc: Disabling bearer [ 491.059036][T10344] tipc: Enabling of bearer rejected, failed to enable media [ 491.144474][T10347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1406'. [ 491.858025][T10356] syzkaller0: entered promiscuous mode [ 491.880063][T10356] syzkaller0: entered allmulticast mode [ 492.000736][T10356] tipc: Enabled bearer , priority 0 [ 492.044188][T10355] tipc: Resetting bearer [ 492.129379][T10355] tipc: Disabling bearer [ 492.365378][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 493.047629][ T5690] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 493.226643][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 493.249803][ T5690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.283976][ T5690] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 493.325683][ T5690] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 493.371985][ T5690] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 493.448373][ T5690] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.501731][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 493.543155][ T5690] usb 5-1: SerialNumber: syz [ 493.611556][T10377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.668892][T10377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.725934][ T5690] hub 5-1:1.0: bad descriptor, ignoring hub [ 493.761279][ T5690] hub 5-1:1.0: probe with driver hub failed with error -5 [ 493.972325][T10377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.004809][T10377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.216569][T10389] syzkaller0: entered promiscuous mode [ 494.259020][T10389] syzkaller0: entered allmulticast mode [ 494.606210][ T5690] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 495.019233][ T5690] usb 5-1: USB disconnect, device number 2 [ 495.122046][ T5690] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 495.443584][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 495.751855][T10400] tipc: Enabling of bearer rejected, failed to enable media [ 496.236420][T10408] syzkaller0: entered promiscuous mode [ 496.296252][T10408] syzkaller0: entered allmulticast mode [ 496.391724][T10408] tipc: Enabled bearer , priority 0 [ 496.452364][T10407] tipc: Resetting bearer [ 496.531192][T10407] tipc: Disabling bearer [ 497.588937][T10443] syzkaller0: entered promiscuous mode [ 497.617943][T10443] syzkaller0: entered allmulticast mode [ 498.252879][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 498.475217][T10453] vlan3: entered promiscuous mode [ 498.494479][T10453] gretap0: entered promiscuous mode [ 499.328527][T10472] tipc: Enabling of bearer rejected, failed to enable media [ 500.028207][ T2161] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 500.217957][ T2161] usb 5-1: Using ep0 maxpacket: 16 [ 500.250328][ T2161] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 500.290996][ T2161] usb 5-1: config 0 has no interface number 0 [ 500.324120][ T2161] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 500.364217][ T2161] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 500.416358][ T2161] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 500.449261][ T2161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.485225][ T2161] usb 5-1: Product: syz [ 500.503277][ T2161] usb 5-1: Manufacturer: syz [ 500.527172][ T2161] usb 5-1: SerialNumber: syz [ 500.571593][ T2161] usb 5-1: config 0 descriptor?? [ 500.604041][T10483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.648228][T10483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.824090][T10499] syzkaller0: entered promiscuous mode [ 500.849602][T10499] syzkaller0: entered allmulticast mode [ 500.956798][T10483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 501.000602][T10483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 501.243721][ T2161] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 501.906149][ T2161] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 501.932586][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1451'. [ 501.975061][ T2161] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 502.054766][ T2161] asix 5-1:0.34: probe with driver asix failed with error -71 [ 502.193907][ T2161] usb 5-1: USB disconnect, device number 3 [ 503.999528][T10545] tipc: Enabled bearer , priority 0 [ 504.171798][T10541] tipc: Disabling bearer [ 505.681776][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 507.306620][T10609] tipc: Enabled bearer , priority 0 [ 507.354682][T10608] tipc: Disabling bearer [ 508.157848][ T2161] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 508.214871][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1477'. [ 508.339202][ T2161] usb 5-1: Using ep0 maxpacket: 32 [ 508.402417][ T2161] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 508.444151][ T2161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.550280][ T2161] usb 5-1: config 0 descriptor?? [ 509.011297][ T2161] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x3 [ 509.013624][T10630] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.051794][ T2161] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x4 [ 509.071703][ T2161] zeroplus 0003:0C12:0030.0002: reserved main item tag 0xd [ 509.167041][ T2161] zeroplus 0003:0C12:0030.0002: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 509.253262][ T2161] zeroplus 0003:0C12:0030.0002: no inputs found [ 509.362255][ T2161] usb 5-1: USB disconnect, device number 4 [ 509.445281][T10630] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.856017][T10637] fido_id[10637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 509.988024][T10632] syzkaller0: entered promiscuous mode [ 510.020199][T10632] syzkaller0: entered allmulticast mode [ 510.422023][T10630] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.532488][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1483'. [ 510.693660][T10630] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.229918][T10658] ===================================================== [ 511.237449][T10658] BUG: KMSAN: uninit-value in eth_type_trans+0x68f/0xae0 [ 511.244747][T10658] eth_type_trans+0x68f/0xae0 [ 511.249741][T10658] loopback_xmit+0x4d2/0x720 [ 511.254464][T10658] dev_hard_start_xmit+0x22f/0xa80 [ 511.259938][T10658] __dev_queue_xmit+0x2990/0x5a00 [ 511.265146][T10658] raw_sendmsg+0x65e/0xe30 [ 511.269831][T10658] ieee802154_sock_sendmsg+0x91/0xe0 [ 511.275288][T10658] sock_write_iter+0x728/0x7e0 [ 511.280442][T10658] vfs_write+0xbe1/0x15c0 [ 511.285001][T10658] ksys_write+0x1d9/0x470 [ 511.289640][T10658] __ia32_sys_write+0x9a/0xf0 [ 511.294487][T10658] ia32_sys_call+0x37a7/0x4360 [ 511.299618][T10658] __do_fast_syscall_32+0x195/0x470 [ 511.305073][T10658] do_fast_syscall_32+0x37/0x80 [ 511.310277][T10658] do_SYSENTER_32+0x1f/0x30 [ 511.314934][T10658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.321598][T10658] [ 511.323992][T10658] Uninit was created at: [ 511.328677][T10658] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 511.334862][T10658] __alloc_skb+0x855/0x1190 [ 511.339668][T10658] alloc_skb_with_frags+0xc5/0x990 [ 511.344967][T10658] sock_alloc_send_pskb+0xacb/0xc60 [ 511.350573][T10658] raw_sendmsg+0x331/0xe30 [ 511.355153][T10658] ieee802154_sock_sendmsg+0x91/0xe0 [ 511.360799][T10658] sock_write_iter+0x728/0x7e0 [ 511.365709][T10658] vfs_write+0xbe1/0x15c0 [ 511.370348][T10658] ksys_write+0x1d9/0x470 [ 511.374847][T10658] __ia32_sys_write+0x9a/0xf0 [ 511.379907][T10658] ia32_sys_call+0x37a7/0x4360 [ 511.384865][T10658] __do_fast_syscall_32+0x195/0x470 [ 511.390483][T10658] do_fast_syscall_32+0x37/0x80 [ 511.395475][T10658] do_SYSENTER_32+0x1f/0x30 [ 511.400272][T10658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.406773][T10658] [ 511.409420][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.1.1484 Not tainted syzkaller #0 PREEMPT(lazy) [ 511.419094][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.429451][T10658] ===================================================== [ 511.436474][T10658] Disabling lock debugging due to kernel taint [ 511.442935][T10658] Kernel panic - not syncing: kmsan.panic set ... [ 511.449479][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.1.1484 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 511.460588][T10658] Tainted: [B]=BAD_PAGE [ 511.464816][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.474971][T10658] Call Trace: [ 511.478323][T10658] [ 511.481318][T10658] __dump_stack+0x26/0x30 [ 511.485789][T10658] dump_stack_lvl+0x50/0x1c0 [ 511.490510][T10658] ? dump_stack+0x12/0x25 [ 511.494986][T10658] dump_stack+0x1e/0x25 [ 511.499285][T10658] vpanic+0x7b4/0x1430 [ 511.503532][T10658] panic+0x15d/0x160 [ 511.507619][T10658] kmsan_report+0x31a/0x320 [ 511.512292][T10658] ? __msan_warning+0x1b/0x30 [ 511.517125][T10658] ? eth_type_trans+0x68f/0xae0 [ 511.522103][T10658] ? loopback_xmit+0x4d2/0x720 [ 511.526989][T10658] ? dev_hard_start_xmit+0x22f/0xa80 [ 511.532463][T10658] ? __dev_queue_xmit+0x2990/0x5a00 [ 511.537839][T10658] ? raw_sendmsg+0x65e/0xe30 [ 511.542591][T10658] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 511.548232][T10658] ? sock_write_iter+0x728/0x7e0 [ 511.553300][T10658] ? vfs_write+0xbe1/0x15c0 [ 511.557964][T10658] ? ksys_write+0x1d9/0x470 [ 511.562628][T10658] ? __ia32_sys_write+0x9a/0xf0 [ 511.567632][T10658] ? ia32_sys_call+0x37a7/0x4360 [ 511.572736][T10658] ? __do_fast_syscall_32+0x195/0x470 [ 511.578243][T10658] ? do_fast_syscall_32+0x37/0x80 [ 511.583391][T10658] ? do_SYSENTER_32+0x1f/0x30 [ 511.588189][T10658] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.594859][T10658] ? kmsan_internal_poison_memory+0x4a/0x90 [ 511.600911][T10658] ? kmsan_slab_alloc+0xdc/0x160 [ 511.606013][T10658] ? kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 511.612345][T10658] ? __alloc_skb+0x855/0x1190 [ 511.617163][T10658] ? alloc_skb_with_frags+0xc5/0x990 [ 511.622605][T10658] ? sock_alloc_send_pskb+0xacb/0xc60 [ 511.628149][T10658] ? raw_sendmsg+0x331/0xe30 [ 511.632879][T10658] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 511.638492][T10658] ? sock_write_iter+0x728/0x7e0 [ 511.643565][T10658] ? vfs_write+0xbe1/0x15c0 [ 511.648218][T10658] ? ksys_write+0x1d9/0x470 [ 511.652874][T10658] ? __ia32_sys_write+0x9a/0xf0 [ 511.657880][T10658] ? ia32_sys_call+0x37a7/0x4360 [ 511.662993][T10658] ? __do_fast_syscall_32+0x195/0x470 [ 511.668503][T10658] ? do_fast_syscall_32+0x37/0x80 [ 511.673651][T10658] ? do_SYSENTER_32+0x1f/0x30 [ 511.678448][T10658] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.685115][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.690396][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.695672][T10658] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.701667][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.706944][T10658] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.712931][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.718226][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.723514][T10658] __msan_warning+0x1b/0x30 [ 511.728169][T10658] eth_type_trans+0x68f/0xae0 [ 511.733030][T10658] loopback_xmit+0x4d2/0x720 [ 511.737736][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.743024][T10658] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.749010][T10658] ? __pfx_loopback_xmit+0x10/0x10 [ 511.754252][T10658] dev_hard_start_xmit+0x22f/0xa80 [ 511.759562][T10658] __dev_queue_xmit+0x2990/0x5a00 [ 511.764764][T10658] ? _copy_from_iter+0x4af/0x3000 [ 511.769912][T10658] ? skb_set_owner_w+0x39f/0x460 [ 511.775034][T10658] ? kmsan_get_metadata+0xf1/0x160 [ 511.780308][T10658] ? __dev_queue_xmit+0x2d4/0x5a00 [ 511.785616][T10658] raw_sendmsg+0x65e/0xe30 [ 511.790190][T10658] ? __pfx_raw_sendmsg+0x10/0x10 [ 511.795266][T10658] ieee802154_sock_sendmsg+0x91/0xe0 [ 511.800883][T10658] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 511.807035][T10658] sock_write_iter+0x728/0x7e0 [ 511.811965][T10658] vfs_write+0xbe1/0x15c0 [ 511.816484][T10658] ? __pfx_sock_write_iter+0x10/0x10 [ 511.821922][T10658] ksys_write+0x1d9/0x470 [ 511.826467][T10658] __ia32_sys_write+0x9a/0xf0 [ 511.831398][T10658] ia32_sys_call+0x37a7/0x4360 [ 511.836336][T10658] __do_fast_syscall_32+0x195/0x470 [ 511.841683][T10658] do_fast_syscall_32+0x37/0x80 [ 511.846673][T10658] do_SYSENTER_32+0x1f/0x30 [ 511.851302][T10658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.857898][T10658] RIP: 0023:0xf709f01c [ 511.862430][T10658] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 511.882170][T10658] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 511.890731][T10658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 511.898808][T10658] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.906867][T10658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.914927][T10658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.922997][T10658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.931093][T10658] [ 511.934546][T10658] Kernel Offset: disabled [ 511.938922][T10658] Rebooting in 86400 seconds..