last executing test programs: 16m33.377663015s ago: executing program 2 (id=70): prlimit64(0x0, 0xe, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x50440, 0x29) socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x6, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 16m31.169717536s ago: executing program 2 (id=73): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="000000006f00180005001000020000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0xffffffff, 0xf4240, 0x7, {0x0, 0x6}, 0x0, 0x8}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a40000000002010400000000000000000a000007180001802f000280050001009800000006000340200200003c0003800c00028004000100890000002c00018014000300fe8000"], 0xa4}}, 0x4) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000002480)="02a956ba9a03f14026d9b3aa80040a2951e42bfb8ff2c45a16e8cea80f0eabca4935a2cb67c06eabee5c4398b8580d8213658a6e781dc01c4b0811b1", 0x3c) 16m29.29210258s ago: executing program 2 (id=75): creat(0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1df) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=126.0.0.1,port=2049,mountport=2049,proto=tO']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='-:s/', 0x4) 16m26.454962746s ago: executing program 2 (id=79): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000040)={0x0}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) fspick(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') read$char_usb(r5, &(0x7f00000002c0)=""/244, 0xf4) r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000d00)='n\\ 127.0.0', 0xc) 16m24.320083786s ago: executing program 2 (id=81): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00') syz_fuse_handle_req(r4, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r4, 0xffffffffffffffff, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getresuid(0x0, 0x0, &(0x7f0000002380)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002780)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xffff, 0x100, 0x8, 0x1, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x9, 0x8, 0x6, 0xfff, 0x9, 0x7, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0xa1, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x1, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x2, 0x80, 0x44f0, 0x1, 0x6bf, 0xf, 0x3f0d, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x0, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffb, 0xcb4, 0x6, 0x1, 0x3, 0x7, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x9, 0x4, 0x6, 0x2, 0x1, 0xa, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x3, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0xee7, 0xffff, 0x401, 0x62a, 0x8, 0x6, 0x3, 0xf, 0x6, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x5, 0xbf, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x6, 0x7, 0x3, 0x80, {0x88, 0x1, 0x0, 0x1ff, 0x3ff, 0x1}, {0x5, 0x1, 0x1, 0x1, 0x669, 0x1ff}, 0x1, 0xa, 0x6}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 16m21.99394927s ago: executing program 2 (id=83): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r0 = syz_open_dev$loop(0x0, 0x4, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 16m6.392719075s ago: executing program 32 (id=83): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r0 = syz_open_dev$loop(0x0, 0x4, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 6m51.255224125s ago: executing program 3 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x136) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) 6m51.015270161s ago: executing program 3 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000806"], 0x0) 6m50.491412863s ago: executing program 3 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x4800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x62, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 6m48.09751893s ago: executing program 3 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) 6m44.494208534s ago: executing program 3 (id=1025): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x204, &(0x7f0000000040)={0x0}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) fspick(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') read$char_usb(r5, &(0x7f00000002c0)=""/244, 0xf4) r6 = openat(r5, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000d00)='n\\ 127.0.0', 0xc) 6m43.032130008s ago: executing program 3 (id=1030): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x9, 0xf, 0x5b}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r2) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x16) 6m27.496893901s ago: executing program 33 (id=1030): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x9, 0xf, 0x5b}, 0x2c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r2) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x16) 5m43.684918134s ago: executing program 4 (id=1168): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2a, 0x0, 0x0) 5m41.419888128s ago: executing program 4 (id=1178): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) 5m39.887239483s ago: executing program 4 (id=1182): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r2, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 5m36.773717866s ago: executing program 4 (id=1187): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000009c0)="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", 0x202) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r2, &(0x7f0000000480), 0x0) close(r2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='MSFT100\n\x00', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f00000006c0)='WINNCM', 0x6) close(r4) write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0', 0xb) 5m36.405293295s ago: executing program 4 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xe30a16b12b0d1e59, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054805}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m35.557567174s ago: executing program 4 (id=1189): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x114, 0xc}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008810}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, 0x0, 0x40408c4) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 5m19.783526983s ago: executing program 34 (id=1189): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x114, 0xc}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008810}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, 0x0, 0x40408c4) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 9.174144004s ago: executing program 0 (id=2336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.233408436s ago: executing program 0 (id=2349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d09", 0x19}], 0x2) 4.825931146s ago: executing program 0 (id=2363): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, 0x0, 0x0) 4.325719488s ago: executing program 6 (id=2372): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000100003051600", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31}, 0x94) 4.302594948s ago: executing program 7 (id=2373): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000740), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) close(0xffffffffffffffff) close(0x4) 4.25762312s ago: executing program 6 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xe, 0x5, 0xe018, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x5, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x2, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x9, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x5, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffc, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020003, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0xb4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x7f, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 4.139811032s ago: executing program 6 (id=2375): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 4.112034093s ago: executing program 7 (id=2376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="2a003300d000"], 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 3.589514265s ago: executing program 5 (id=2385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000033000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000063c000000000000c13c4d04000280040003"], 0x64}}, 0x0) 3.532589027s ago: executing program 5 (id=2386): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xe, 0x5, 0xe018, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x5, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x2, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x9, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x5, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffc, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020003, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0xb4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x7f, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 3.410788169s ago: executing program 5 (id=2387): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000740), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) close(0xffffffffffffffff) close(0x4) 3.293773452s ago: executing program 1 (id=2388): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.239716553s ago: executing program 5 (id=2389): bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.128575326s ago: executing program 5 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r5 = syz_open_pts(r4, 0x141401) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCSETD(r5, 0x5423, 0x0) 1.971259663s ago: executing program 5 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c00000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 1.935011954s ago: executing program 1 (id=2392): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, 0x0, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.658236511s ago: executing program 6 (id=2393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 1.653865931s ago: executing program 7 (id=2394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4f20, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xfffe) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.581249403s ago: executing program 0 (id=2395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.580798772s ago: executing program 1 (id=2396): socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a300000000007000200"], 0xcd0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500feffff00feffffff07000000", @ANYRES32=r0, @ANYBLOB="1a2006000001000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) 1.485158905s ago: executing program 7 (id=2397): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a300000000007000200"], 0xcd0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500feffff00feffffff07000000", @ANYRES32, @ANYBLOB="1a2006000001000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.437829796s ago: executing program 6 (id=2398): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xe, 0x5, 0xe018, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x5, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x2, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x9, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0x5, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x5, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffc, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020003, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0xb4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x7f, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 1.437480326s ago: executing program 0 (id=2399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000280)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.354746438s ago: executing program 1 (id=2400): syz_emit_ethernet(0x3b4, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x1, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706"}, {0x3, 0xa, "17dc3546805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084713475671545e65eb2e9ac946a3f0e2bc4619f91394c03bcfbbb7d71138537d68e2de66393a9f3becd1a9f51a948b5b303f4"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.354124588s ago: executing program 7 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r5 = syz_open_pts(r4, 0x141401) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCSETD(r5, 0x5423, 0x0) 1.284971099s ago: executing program 1 (id=2402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 165.640186ms ago: executing program 7 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002140)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010104}}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x38}}, 0x8000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040), 0x10) 97.616957ms ago: executing program 0 (id=2404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="064b6fbc"], 0x4) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 28.390719ms ago: executing program 6 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="2a003300d000"], 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 0s ago: executing program 1 (id=2406): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000740), 0x0) kernel console output (not intermixed with test programs): vsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.138392][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.147267][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.156184][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.165281][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 75.172931][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 75.186264][ T4277] device veth1_vlan entered promiscuous mode [ 75.205216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.214918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.223719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.234558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.243233][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 75.249275][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 75.252569][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 75.261709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.275854][ T4272] device veth0_vlan entered promiscuous mode [ 75.282389][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.290234][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.295488][ T4272] device veth1_vlan entered promiscuous mode [ 75.320683][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.330646][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.345521][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.356752][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.370262][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.381236][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.394059][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.432010][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.442084][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.451042][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.461149][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.477081][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.495775][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.509113][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.520942][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.533633][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.551060][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.560089][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574948][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585570][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.600863][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.616594][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.639444][ T4277] device veth0_macvtap entered promiscuous mode [ 75.696283][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.709154][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.724523][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.743755][ T4277] device veth1_macvtap entered promiscuous mode [ 75.790014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.800672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.821404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.922232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.932488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.942212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.952220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.962217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.972224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.982224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 75.992219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.002216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.012233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.243183][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 77.243526][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 77.257957][ T4272] device veth0_macvtap entered promiscuous mode [ 77.304199][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.312055][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.323479][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 77.323493][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 77.323522][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 77.368156][ T4272] device veth1_macvtap entered promiscuous mode [ 77.379311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.393280][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.411308][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.422108][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.438322][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.451693][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.467704][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.479601][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.500842][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.512400][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.522837][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.533839][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.544110][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.555206][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.566239][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.576944][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.589057][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.604725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.618355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.629521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.641745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.673437][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.689662][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.700650][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.711542][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.724279][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.735101][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.746949][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.764211][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.777722][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.788039][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.800541][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.813387][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.824157][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.834332][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.845368][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.866769][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.046588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.055586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.076644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.090058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.106869][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116501][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.126593][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.135615][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.148353][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.171345][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.184417][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.198101][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.207281][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.218184][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.257422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.323476][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.331620][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.397618][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.424374][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.443056][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.491390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.761721][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.771464][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.802012][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.809781][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.852763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.860796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.896536][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.945421][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.955096][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.962368][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.970549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.003518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.852901][ T4391] loop0: detected capacity change from 0 to 1024 [ 86.100161][ T4264] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.224093][ T33] cfg80211: failed to load regulatory.db [ 89.047112][ T4406] loop4: detected capacity change from 0 to 512 [ 89.079818][ T4406] EXT4-fs: Ignoring removed orlov option [ 89.218010][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.239841][ T4406] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.574772][ T4416] loop1: detected capacity change from 0 to 512 [ 90.461015][ T4278] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.494147][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 94.909896][ T4439] ======================================================= [ 94.909896][ T4439] WARNING: The mand mount option has been deprecated and [ 94.909896][ T4439] and is ignored by this kernel. Remove the mand [ 94.909896][ T4439] option from the mount to silence this warning. [ 94.909896][ T4439] ======================================================= [ 95.125825][ T4453] loop3: detected capacity change from 0 to 1024 [ 99.325269][ T4475] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.238819][ T4484] loop1: detected capacity change from 0 to 256 [ 100.270909][ T4484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 100.896061][ T4490] fuse: Unknown parameter '0x0000000000000006' [ 101.180473][ T4484] syz.1.35: attempt to access beyond end of device [ 101.180473][ T4484] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 101.297397][ T4484] syz.1.35: attempt to access beyond end of device [ 101.297397][ T4484] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.364086][ T26] audit: type=1800 audit(1787648242.181:2): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 102.553071][ T4501] loop3: detected capacity change from 0 to 512 [ 103.710144][ T4506] loop2: detected capacity change from 0 to 1024 [ 104.964160][ T4262] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.137835][ T4529] fuse: Unknown parameter '0x0000000000000006' [ 109.112384][ T4535] Bluetooth: MGMT ver 1.22 [ 117.949599][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 121.332924][ T4590] loop4: detected capacity change from 0 to 512 [ 121.426838][ T4590] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.58: invalid indirect mapped block 10 (level 1) [ 121.444357][ T4590] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.58: invalid indirect mapped block 8 (level 1) [ 121.458971][ T4590] EXT4-fs (loop4): 1 truncate cleaned up [ 121.464706][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.624228][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 128.560826][ T4628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.73'. [ 132.940697][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.972674][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.447360][ T4691] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 142.996555][ T4696] fuse: Unknown parameter '0x0000000000000006' [ 143.423542][ T4695] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 143.862932][ T4704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.85'. [ 158.123730][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.135201][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.143489][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.168790][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.177914][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.185983][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.837325][ T4764] loop4: detected capacity change from 0 to 1024 [ 159.438759][ T4764] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.100: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.454414][ T4764] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 159.462748][ T4764] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.100: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.477411][ T4764] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 159.486563][ T4764] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.100: Failed to acquire dquot type 0 [ 159.498345][ T4764] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 159.509663][ T4764] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.100: mark_inode_dirty error [ 159.523055][ T4764] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 159.533584][ T4764] EXT4-fs (loop4): 1 orphan inode deleted [ 159.539314][ T4764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.598098][ T9] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.675113][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 159.979465][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 160.046856][ T4773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.102'. [ 160.213073][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 160.668304][ T4757] chnl_net:caif_netlink_parms(): no params data found [ 160.761701][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 160.772504][ T4278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.793634][ T4278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 160.813118][ T4278] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 162.622578][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 163.804585][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.812455][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.821587][ T4757] device bridge_slave_0 entered promiscuous mode [ 163.846052][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.883205][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.931849][ T4757] device bridge_slave_1 entered promiscuous mode [ 164.049013][ T4757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.071379][ T4757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.080841][ T1192] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.188786][ T4757] team0: Port device team_slave_0 added [ 164.207907][ T4757] team0: Port device team_slave_1 added [ 164.292241][ T1192] usb 2-1: Using ep0 maxpacket: 32 [ 164.319378][ T1192] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.358176][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.375656][ T1192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.408222][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.456085][ T1192] usb 2-1: config 0 has no interface number 0 [ 164.475826][ T1192] usb 2-1: config 0 interface 196 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.505528][ T1192] usb 2-1: config 0 interface 196 has no altsetting 0 [ 164.515300][ T4757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.550088][ T1192] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.574361][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.581353][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.608190][ T1192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.637938][ T1192] usb 2-1: Product: syz [ 164.648095][ T1192] usb 2-1: Manufacturer: syz [ 164.654666][ T1192] usb 2-1: SerialNumber: syz [ 165.142718][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 165.237023][ T4798] fuse: Unknown parameter '0x0000000000000006' [ 165.250351][ T1192] usb 2-1: config 0 descriptor?? [ 165.283209][ T1192] usb 2-1: can't set config #0, error -71 [ 165.412089][ T1192] usb 2-1: USB disconnect, device number 2 [ 165.438272][ T4757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.384178][ T4807] libceph: resolve ' [ 166.384178][ T4807] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 166.384178][ T4807] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 167.024801][ T4757] device hsr_slave_0 entered promiscuous mode [ 168.157356][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 168.202800][ T4757] device hsr_slave_1 entered promiscuous mode [ 168.278228][ T4757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.302692][ T4757] Cannot create hsr debugfs directory [ 169.283798][ T4497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.594771][ T4497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.724578][ T4497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.121958][ T4497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.335688][ T4830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.116'. [ 173.376435][ T4757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.600601][ T4757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.678716][ T4757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.685197][ T4757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.879197][ T4852] capability: warning: `syz.4.121' uses 32-bit capabilities (legacy support in use) [ 175.890195][ T4852] fuse: Bad value for 'fd' [ 176.392588][ T4757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.675201][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.829391][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.001681][ T4757] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.060447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.073748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.112435][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.119601][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.329865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.343178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.393105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.431716][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.438941][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.614771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.633374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.670025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.716964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.769226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.975920][ T4875] fuse: Unknown parameter 'fd0x0000000000000006' [ 179.903882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.923912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.944187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.810123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.827751][ T4757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.883235][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.916580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.934217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.649121][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.663202][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.792547][ T4757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.707395][ T4930] fuse: Unknown parameter 'fd0x0000000000000006' [ 189.109498][ T4497] device hsr_slave_0 left promiscuous mode [ 189.129130][ T4497] device hsr_slave_1 left promiscuous mode [ 189.238588][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.258827][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.313784][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.321339][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.392938][ T4497] device bridge_slave_1 left promiscuous mode [ 189.401026][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.456404][ T4497] device bridge_slave_0 left promiscuous mode [ 189.483270][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.599391][ T4497] device veth1_macvtap left promiscuous mode [ 189.638367][ T4497] device veth0_macvtap left promiscuous mode [ 189.659271][ T4497] device veth1_vlan left promiscuous mode [ 189.688727][ T4497] device veth0_vlan left promiscuous mode [ 191.841723][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 191.894961][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 191.897880][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 191.901003][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 194.517057][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523576][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.203387][ T4990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.146'. [ 197.502155][ T4992] fuse: Unknown parameter 'fd0x0000000000000006' [ 198.368076][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 199.261011][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 200.430628][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.793512][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.331749][ T4497] bond0 (unregistering): Released all slaves [ 208.762289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.771088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.877155][ T4757] device veth0_vlan entered promiscuous mode [ 208.913026][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.942635][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.003335][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.030670][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.085850][ T4757] device veth1_vlan entered promiscuous mode [ 209.159132][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.190598][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.213136][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.253070][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.310892][ T4757] device veth0_macvtap entered promiscuous mode [ 209.354824][ T4757] device veth1_macvtap entered promiscuous mode [ 209.429142][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.468259][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.508032][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.572422][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.612240][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.648360][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.673272][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.735267][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.785092][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.825015][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.843377][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.866592][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.895564][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.805270][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.851918][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.877187][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.912171][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.955529][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.162412][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.186875][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.224480][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.364256][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.372836][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.994449][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.847841][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.858676][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.867175][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.875299][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.883662][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.891163][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.299046][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 216.963935][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 218.733897][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 219.057826][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.092354][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.100526][ T5071] device bridge_slave_0 entered promiscuous mode [ 219.180036][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.219741][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.273845][ T5071] device bridge_slave_1 entered promiscuous mode [ 219.406571][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.471243][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.615510][ T5071] team0: Port device team_slave_0 added [ 219.736246][ T5071] team0: Port device team_slave_1 added [ 220.035772][ T5115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.168'. [ 220.802642][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 222.507305][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.572248][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.635169][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.769396][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 223.921495][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.964987][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.042405][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.970059][ T5071] device hsr_slave_0 entered promiscuous mode [ 224.993940][ T5071] device hsr_slave_1 entered promiscuous mode [ 225.015455][ T5071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.035167][ T5071] Cannot create hsr debugfs directory [ 227.946000][ T77] device hsr_slave_0 left promiscuous mode [ 228.002610][ T77] device hsr_slave_1 left promiscuous mode [ 228.044461][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.088115][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.138241][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.193782][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.225712][ T77] device bridge_slave_1 left promiscuous mode [ 228.232000][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.327943][ T77] device bridge_slave_0 left promiscuous mode [ 228.337764][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.459169][ T77] device veth1_macvtap left promiscuous mode [ 228.552000][ T77] device veth0_macvtap left promiscuous mode [ 228.575327][ T77] device veth1_vlan left promiscuous mode [ 228.602354][ T77] device veth0_vlan left promiscuous mode [ 233.823924][ T5185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.179'. [ 236.973598][ T77] team0 (unregistering): Port device team_slave_1 removed [ 239.037048][ T77] team0 (unregistering): Port device team_slave_0 removed [ 240.348624][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.512619][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.098778][ T5208] binder: 5207:5208 ioctl 4018620d 0 returned -22 [ 244.197393][ T77] bond0 (unregistering): Released all slaves [ 246.913270][ T5071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.942345][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 246.944131][ T5071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.997922][ T5071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.024928][ T5071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.143780][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.175189][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.202595][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.252483][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.261971][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.408701][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.445637][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.465065][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.480902][ T22] usb 1-1: config 0 descriptor?? [ 248.545206][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.565775][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.604445][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.637028][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 248.676770][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 248.689366][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.696569][ T4847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.729017][ T22] usb 1-1: USB disconnect, device number 2 [ 248.747112][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.898619][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.983011][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.008068][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.015346][ T4847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.057718][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.103181][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.136049][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.169405][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.219293][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.263661][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.303090][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.353454][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.367512][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.413011][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.432802][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.484594][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.528789][ T5271] using random self ethernet address [ 250.592313][ T5271] using random host ethernet address [ 251.886767][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 252.475674][ T5285] fuse: Unknown parameter '0x0000000000000006' [ 252.706014][ T4318] usb 1-1: Dual-Role OTG device on HNP port [ 252.972292][ T4318] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 252.981385][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.071040][ T4318] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 253.285986][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.296679][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.327940][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.176293][ T5307] binfmt_misc: register: failed to install interpreter file ./file0 [ 256.347043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.353420][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.959615][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.132738][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.791570][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.904880][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.963328][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.009600][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.244084][ T5071] device veth0_vlan entered promiscuous mode [ 260.306768][ T5071] device veth1_vlan entered promiscuous mode [ 260.395540][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.448329][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.474352][ T5071] device veth0_macvtap entered promiscuous mode [ 260.535392][ T5071] device veth1_macvtap entered promiscuous mode [ 261.728689][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.792939][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.502179][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.512042][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.702249][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.742199][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.792157][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.822225][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.863892][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.904840][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.946887][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.986228][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.042009][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.078217][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.114085][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.134043][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.165456][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.205412][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.232231][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.262247][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.281893][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.301309][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.402985][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.425385][ T5071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.449891][ T5071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.482162][ T5071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.490933][ T5071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.055233][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.084799][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.132583][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.681062][ T5369] fuse: Unknown parameter '0x0000000000000006' [ 267.184583][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.195690][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.244759][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.185324][ T5398] capability: warning: `syz.4.215' uses deprecated v2 capabilities in a way that may be insecure [ 280.081504][ T5447] fuse: Unknown parameter '0x0000000000000006' [ 283.767057][ T26] audit: type=1800 audit(1787648424.581:3): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.231" name="bmaControls" dev="configfs" ino=38060 res=0 errno=0 [ 306.282332][ T4968] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.292354][ T4968] usb 6-1: Using ep0 maxpacket: 16 [ 307.299693][ T4968] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 307.382124][ T4968] usb 6-1: config 0 has no interface number 0 [ 307.412215][ T4968] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 307.442117][ T4968] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 307.480306][ T4968] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 307.516998][ T4968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.548834][ T4968] usb 6-1: Product: syz [ 307.553696][ T4968] usb 6-1: Manufacturer: syz [ 308.247292][ T4968] usb 6-1: SerialNumber: syz [ 308.352777][ T4968] usb 6-1: config 0 descriptor?? [ 308.389598][ T5611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.413242][ T5611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.701891][ T5611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.772360][ T5611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 309.003309][ T4968] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 309.204496][ T4968] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 309.248243][ T4968] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 310.223209][ T4968] asix: probe of 6-1:0.34 failed with error -71 [ 310.281248][ T4968] usb 6-1: USB disconnect, device number 2 [ 317.220789][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.239178][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.869931][ T5800] sctp: failed to load transform for md5: -2 [ 333.117696][ T5837] sctp: [Deprecated]: syz.0.300 (pid 5837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.117696][ T5837] Use struct sctp_sack_info instead [ 333.443116][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 333.516698][ T5851] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 333.614802][ T5845] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 339.722524][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 348.099930][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 348.126680][ T5909] device ip6erspan0 entered promiscuous mode [ 348.152364][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 348.165533][ T5910] Zero length message leads to an empty skb [ 351.928695][ T5990] device syzkaller0 entered promiscuous mode [ 352.792573][ T6000] netlink: 112 bytes leftover after parsing attributes in process `syz.3.344'. [ 353.085612][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 353.828545][ T6019] syz.4.345 uses obsolete (PF_INET,SOCK_PACKET) [ 357.649556][ T6014] netlink: 'syz.3.344': attribute type 14 has an invalid length. [ 357.881313][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 358.060557][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 358.419482][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.356'. [ 359.943335][ T6097] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 360.092483][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.426921][ T6098] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 361.552355][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 365.040850][ T6151] fuse: Unknown parameter '0x0000000000000006' [ 365.832784][ T6158] netlink: 'syz.5.382': attribute type 1 has an invalid length. [ 365.840983][ T6158] netlink: 'syz.5.382': attribute type 2 has an invalid length. [ 373.442911][ T6234] netlink: 'syz.5.404': attribute type 9 has an invalid length. [ 373.481249][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.404'. [ 373.584947][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.648425][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.655854][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.678048][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.684512][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.881534][ T6382] syz.0.440 (6382) used greatest stack depth: 20608 bytes left [ 399.788824][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 399.891105][ T6457] device vlan2 entered promiscuous mode [ 399.914073][ T6457] device syz_tun entered promiscuous mode [ 399.949464][ T6455] device vlan2 left promiscuous mode [ 399.981279][ T6455] device syz_tun left promiscuous mode [ 405.421019][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 405.601279][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.482'. [ 409.403929][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 411.288136][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.297687][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.660942][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.727087][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.515068][ T6544] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.531944][ T6544] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.551941][ T6544] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.561231][ T6544] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.117559][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.139532][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 430.556289][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.921746][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 433.208573][ T26] audit: type=1326 audit(1787648573.441:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d59e0d9 code=0x7fc00000 [ 433.241177][ T26] audit: type=1800 audit(1787648573.481:5): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.531" name="bmaControls" dev="configfs" ino=39874 res=0 errno=0 [ 433.272155][ T26] audit: type=1326 audit(1787648573.891:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc67d53f459 code=0x7fc00000 [ 439.843031][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.303537][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.502099][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.074088][ T26] audit: type=1326 audit(1787648583.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.3.552" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005599e0d9 code=0x7fc00000 [ 443.958437][ T26] audit: type=1800 audit(1787648583.351:8): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.552" name="bmaControls" dev="configfs" ino=41996 res=0 errno=0 [ 444.184135][ T26] audit: type=1326 audit(1787648583.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.3.552" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f005593f459 code=0x7fc00000 [ 445.180853][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 445.657523][ T26] audit: type=1800 audit(1787648586.471:10): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.557" name="bmaControls" dev="configfs" ino=42007 res=0 errno=0 [ 451.133567][ T26] audit: type=1326 audit(1787648591.421:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 451.162174][ T6808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.267766][ T26] audit: type=1326 audit(1787648591.851:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 457.708549][ T26] audit: type=1800 audit(1787648598.521:13): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.573" name="bmaControls" dev="configfs" ino=41438 res=0 errno=0 [ 459.485342][ T26] audit: type=1800 audit(1787648600.301:14): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.581" name="bmaControls" dev="configfs" ino=42091 res=0 errno=0 [ 467.062163][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.573686][ T26] audit: type=1326 audit(1787648608.821:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.0.584" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 468.642087][ T26] audit: type=1326 audit(1787648609.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.0.584" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 470.557389][ T26] audit: type=1800 audit(1787648611.371:17): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.597" name="bmaControls" dev="configfs" ino=41545 res=0 errno=0 [ 474.493103][ T26] audit: type=1326 audit(1787648614.771:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.5.603" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf159e0d9 code=0x7fc00000 [ 474.731642][ T26] audit: type=1326 audit(1787648615.201:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.5.603" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bf153f459 code=0x7fc00000 [ 481.079795][ T26] audit: type=1326 audit(1787648621.341:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.614" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928419e0d9 code=0x7fc00000 [ 481.618297][ T26] audit: type=1326 audit(1787648621.771:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.614" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f928413f459 code=0x7fc00000 [ 482.718256][ T6982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.118716][ T26] audit: type=1800 audit(1787648623.931:22): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.617" name="bmaControls" dev="configfs" ino=42255 res=0 errno=0 [ 487.860593][ T7023] 9pnet_fd: Insufficient options for proto=fd [ 488.475073][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.603382][ T26] audit: type=1326 audit(1787648632.421:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.0.626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 492.599330][ T26] audit: type=1326 audit(1787648632.421:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.0.626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 497.357297][ T7069] binder_alloc: 7067: binder_alloc_buf, no vma [ 501.484335][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.490722][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.612944][ T7095] 9pnet_fd: Insufficient options for proto=fd [ 509.453993][ T7145] 9pnet_fd: Insufficient options for proto=fd [ 536.102077][ T26] audit: type=1800 audit(1787648676.401:25): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.705" name="bmaControls" dev="configfs" ino=43038 res=0 errno=0 [ 545.341016][ T26] audit: type=1800 audit(1787648685.671:26): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.717" name="bmaControls" dev="configfs" ino=43095 res=0 errno=0 [ 563.036043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.042410][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.724497][ T7481] tipc: Started in network mode [ 571.744526][ T7481] tipc: Node identity 1e6a36eb41bf, cluster identity 4711 [ 571.763770][ T7481] tipc: Enabled bearer , priority 0 [ 572.072604][ T7481] device syzkaller0 entered promiscuous mode [ 572.777230][ T7485] tipc: Resetting bearer [ 572.860447][ T7480] tipc: Resetting bearer [ 574.494864][ T7480] tipc: Disabling bearer [ 574.500930][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.713549][ T4353] tipc: Node number set to 1607808747 [ 580.513519][ T26] audit: type=1800 audit(1787648720.881:27): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.766" name="bmaControls" dev="configfs" ino=42854 res=0 errno=0 [ 587.612031][ T26] audit: type=1800 audit(1787648727.911:28): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.780" name="bmaControls" dev="configfs" ino=43419 res=0 errno=0 [ 588.419988][ T3933] device veth0_macvtap left promiscuous mode [ 588.438298][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.639658][ T7617] tc action pedit 'at' offset 525311 out of bounds [ 596.612921][ T26] audit: type=1800 audit(1787648736.971:29): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.793" name="bmaControls" dev="configfs" ino=42951 res=0 errno=0 [ 598.278282][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 603.028110][ T26] audit: type=1800 audit(1787648743.341:30): pid=7697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.806" name="bmaControls" dev="configfs" ino=43550 res=0 errno=0 [ 605.052765][ T7726] device syzkaller1 entered promiscuous mode [ 612.836593][ T7788] device syzkaller0 entered promiscuous mode [ 613.546352][ T26] audit: type=1800 audit(1787648753.911:31): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.818" name="bmaControls" dev="configfs" ino=44117 res=0 errno=0 [ 623.358640][ T26] audit: type=1800 audit(1787648764.171:32): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="bmaControls" dev="configfs" ino=44157 res=0 errno=0 [ 624.365855][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.373607][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.771623][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.544674][ T26] audit: type=1800 audit(1787648769.871:33): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.852" name="bmaControls" dev="configfs" ino=44207 res=0 errno=0 [ 632.207028][ T7920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.443957][ T26] audit: type=1800 audit(1787648776.811:34): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.869" name="bmaControls" dev="configfs" ino=43925 res=0 errno=0 [ 640.080974][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.210319][ T26] audit: type=1800 audit(1787648783.501:35): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.881" name="bmaControls" dev="configfs" ino=43989 res=0 errno=0 [ 645.634290][ T8012] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.281057][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.885'. [ 651.987600][ T8053] device syzkaller0 entered promiscuous mode [ 653.238893][ T8066] tipc: Started in network mode [ 653.267014][ T8066] tipc: Node identity c6a3974f01f7, cluster identity 4711 [ 653.302214][ T8066] tipc: Enabled bearer , priority 0 [ 653.332587][ T8067] device syzkaller0 entered promiscuous mode [ 654.110215][ T8067] tipc: Resetting bearer [ 654.137913][ T8065] tipc: Resetting bearer [ 654.277522][ T8065] tipc: Disabling bearer [ 656.915055][ T8093] device syzkaller0 entered promiscuous mode [ 657.315358][ T8097] netlink: 'syz.5.913': attribute type 29 has an invalid length. [ 657.367126][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 657.392827][ T8097] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 658.360266][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.915'. [ 660.376711][ T8124] device syzkaller0 entered promiscuous mode [ 660.729432][ T8128] tipc: Started in network mode [ 660.745833][ T8128] tipc: Node identity 72257511d4bb, cluster identity 4711 [ 660.773829][ T8128] tipc: Enabled bearer , priority 0 [ 660.795081][ T8131] device syzkaller0 entered promiscuous mode [ 662.179395][ T4353] tipc: Node number set to 2795402513 [ 662.194003][ T8131] tipc: Resetting bearer [ 663.272285][ T8127] tipc: Resetting bearer [ 663.337491][ T8127] tipc: Disabling bearer [ 667.551275][ T8175] IPv6: addrconf: prefix option has invalid lifetime [ 667.558250][ T8175] IPv6: addrconf: prefix option has invalid lifetime [ 668.566676][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 668.641692][ T8183] Illegal XDP return value 4294967277 on prog (id 94) dev syz_tun, expect packet loss! [ 670.586910][ T26] audit: type=1326 audit(1787648811.401:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.5.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf159e0d9 code=0x7fc00000 [ 670.810658][ T26] audit: type=1326 audit(1787648811.601:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.5.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bf153f459 code=0x7fc00000 [ 675.034467][ T8226] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.842433][ T8231] IPv6: addrconf: prefix option has invalid lifetime [ 675.849141][ T8231] IPv6: addrconf: prefix option has invalid lifetime [ 677.908001][ T8239] device syzkaller0 entered promiscuous mode [ 678.024520][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 680.381946][ T26] audit: type=1326 audit(1787648821.191:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 680.573353][ T26] audit: type=1326 audit(1787648821.391:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 684.415654][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.970'. [ 685.803751][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.810869][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.672578][ T26] audit: type=1326 audit(1787648829.481:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.0.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 688.862086][ T26] audit: type=1326 audit(1787648829.591:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.0.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 694.805567][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 695.507173][ T26] audit: type=1326 audit(1787648836.321:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.4.989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d59e0d9 code=0x7fc00000 [ 695.807959][ T26] audit: type=1326 audit(1787648836.611:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.4.989" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc67d53f459 code=0x7fc00000 [ 696.253828][ T8366] bridge0: port 3(wlan1) entered blocking state [ 696.282372][ T8366] bridge0: port 3(wlan1) entered disabled state [ 696.335126][ T8366] device wlan1 entered promiscuous mode [ 696.370006][ T8366] bridge0: port 3(wlan1) entered blocking state [ 696.376855][ T8366] bridge0: port 3(wlan1) entered forwarding state [ 696.591344][ T8367] bridge0: port 3(wlan1) entered disabled state [ 697.860785][ T8367] device wlan1 left promiscuous mode [ 697.871739][ T8367] bridge0: port 3(wlan1) entered disabled state [ 699.682335][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1002'. [ 701.845573][ T26] audit: type=1326 audit(1787648842.661:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 703.421882][ C0] sched: RT throttling activated [ 703.450872][ T26] audit: type=1326 audit(1787648842.791:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 703.561807][ T26] audit: type=1326 audit(1787648842.791:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc7e193f51d code=0x7fc00000 [ 703.649442][ T26] audit: type=1326 audit(1787648842.791:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.0.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 707.386707][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'. [ 711.515864][ T26] audit: type=1326 audit(1787648852.331:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf159e0d9 code=0x7fc00000 [ 713.422020][ T26] audit: type=1326 audit(1787648852.571:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bf153f459 code=0x7fc00000 [ 713.542550][ T26] audit: type=1326 audit(1787648852.571:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6bf153f51d code=0x7fc00000 [ 713.620157][ T26] audit: type=1326 audit(1787648852.571:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.5.1019" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6bf159e0d9 code=0x7fc00000 [ 714.489360][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1028'. [ 716.242811][ T8499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.419217][ T26] audit: type=1326 audit(1787648860.231:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.0.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 721.454266][ T26] audit: type=1326 audit(1787648860.341:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.0.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e193f459 code=0x7fc00000 [ 722.724955][ T26] audit: type=1326 audit(1787648860.341:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.0.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc7e193f51d code=0x7fc00000 [ 722.829732][ T26] audit: type=1326 audit(1787648860.341:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.0.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc7e199e0d9 code=0x7fc00000 [ 723.222366][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 724.814293][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.172664][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.192058][ T8578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.200922][ T8578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.210612][ T8578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.218560][ T8578] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 732.226110][ T8578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.515275][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 732.702634][ T8580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.978152][ T8575] chnl_net:caif_netlink_parms(): no params data found [ 734.778366][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 736.435695][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.455370][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.514776][ T8575] device bridge_slave_0 entered promiscuous mode [ 736.687920][ T4341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.482044][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 737.518407][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.542356][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.553982][ T8575] device bridge_slave_1 entered promiscuous mode [ 737.649269][ T4341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.863471][ T4341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.963324][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.058131][ T4341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.122281][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.221270][ T8575] team0: Port device team_slave_0 added [ 739.108816][ T8575] team0: Port device team_slave_1 added [ 739.212527][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.219566][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.341951][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.385045][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.419490][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.425569][ T8617] ieee802154 phy0 wpan0: encryption failed: -22 [ 739.521937][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.562056][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 740.525995][ T8575] device hsr_slave_0 entered promiscuous mode [ 740.552530][ T8575] device hsr_slave_1 entered promiscuous mode [ 740.618397][ T8575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.643646][ T8575] Cannot create hsr debugfs directory [ 740.925668][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.971323][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1065'. [ 741.802526][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 742.427362][ T8575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 743.630959][ T8575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 743.686058][ T8575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 743.785083][ T8661] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.800455][ T8575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 744.252346][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.120244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.138620][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.170387][ T8575] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.316994][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.397054][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.427696][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.434907][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.478243][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.547321][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.599019][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.606457][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.687103][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 745.953552][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 745.976492][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 746.949346][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1081'. [ 746.964780][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 746.999646][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 747.077209][ T4341] device hsr_slave_0 left promiscuous mode [ 747.146394][ T4341] device hsr_slave_1 left promiscuous mode [ 747.879957][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.886452][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.055627][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.080232][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.119151][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.712721][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.783068][ T4341] device bridge_slave_1 left promiscuous mode [ 748.801933][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.829995][ T4341] device bridge_slave_0 left promiscuous mode [ 748.861527][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.940184][ T4341] device veth1_macvtap left promiscuous mode [ 748.962055][ T4341] device veth0_macvtap left promiscuous mode [ 749.032838][ T4341] device veth1_vlan left promiscuous mode [ 749.062013][ T4341] device veth0_vlan left promiscuous mode [ 751.961222][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 752.030981][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 752.102498][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.173272][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.390217][ T4341] bond0 (unregistering): Released all slaves [ 753.473722][ T8575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.484620][ T8575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.496554][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.505975][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.514889][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.524306][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.537396][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.546514][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.555745][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.564338][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 753.588399][ T8707] tipc: Enabling of bearer rejected, failed to enable media [ 753.616038][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1091'. [ 755.416969][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 755.433354][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 755.448573][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.127181][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1104'. [ 757.842072][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 757.988487][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 758.019457][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.130833][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 758.146102][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.179382][ T8575] device veth0_vlan entered promiscuous mode [ 758.207298][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.224798][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.263825][ T8825] tipc: Started in network mode [ 758.269264][ T8825] tipc: Node identity 8e2ff180b4be, cluster identity 4711 [ 758.311450][ T8825] tipc: Enabled bearer , priority 0 [ 758.359448][ T8575] device veth1_vlan entered promiscuous mode [ 758.392595][ T8825] tipc: Resetting bearer [ 758.448581][ T8827] device syzkaller0 entered promiscuous mode [ 758.467829][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 758.518693][ T8823] tipc: Resetting bearer [ 758.643911][ T8823] tipc: Disabling bearer [ 758.649950][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.667099][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 758.705993][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 758.746720][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 758.777292][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 758.913023][ T8575] device veth0_macvtap entered promiscuous mode [ 758.933541][ T8575] device veth1_macvtap entered promiscuous mode [ 759.404640][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.425328][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1112'. [ 759.445588][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.495633][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.597843][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.621203][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.650936][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.665405][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.678314][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.700085][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.718699][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 760.456521][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 760.470436][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.483981][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.494805][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.506112][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.516297][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.527045][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.566722][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.589117][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 760.599838][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 760.627749][ T8575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.645435][ T8575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.655039][ T8575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.669423][ T8575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.902803][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.912449][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.024306][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 761.077104][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.104770][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.126000][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.475824][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 764.162656][ T8929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1135'. [ 767.167865][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1142'. [ 768.884740][ T9049] tipc: Enabled bearer , priority 0 [ 768.899520][ T9049] device syzkaller0 entered promiscuous mode [ 768.920712][ T9049] tipc: Resetting bearer [ 768.937637][ T9047] tipc: Resetting bearer [ 769.791315][ T9047] tipc: Disabling bearer [ 771.362043][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1155'. [ 774.505794][ T9107] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1156'. [ 775.102450][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1170'. [ 775.195883][ T9121] tipc: Enabled bearer , priority 0 [ 775.268522][ T9123] device syzkaller0 entered promiscuous mode [ 775.308981][ T9121] tipc: Resetting bearer [ 775.349654][ T9120] tipc: Resetting bearer [ 776.232844][ T9120] tipc: Disabling bearer [ 776.348899][ T4319] tipc: Node number set to 3344209743 [ 782.073859][ T9180] tipc: Enabled bearer , priority 0 [ 782.132691][ T9180] device syzkaller0 entered promiscuous mode [ 782.193166][ T9180] tipc: Resetting bearer [ 782.266032][ T9179] tipc: Resetting bearer [ 782.397954][ T9179] tipc: Disabling bearer [ 782.815619][ T9198] netlink: 'syz.1.1186': attribute type 39 has an invalid length. [ 786.462367][ T9239] device syzkaller0 entered promiscuous mode [ 788.812156][ T26] audit: type=1800 audit(1787648929.161:56): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1201" name="bmaControls" dev="configfs" ino=47954 res=0 errno=0 [ 789.028392][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 798.373364][ T26] audit: type=1800 audit(1787648938.681:57): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1215" name="bmaControls" dev="configfs" ino=48231 res=0 errno=0 [ 800.912727][ T8578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.922643][ T8578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.931414][ T8578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.940508][ T8578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.962431][ T8578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 800.971136][ T8578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.565610][ T9359] chnl_net:caif_netlink_parms(): no params data found [ 801.922088][ T8999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.989885][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.038046][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.059552][ T9359] device bridge_slave_0 entered promiscuous mode [ 802.136477][ T8999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.889277][ T26] audit: type=1326 audit(1787648943.171:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a60f9e0d9 code=0x7fc00000 [ 802.940666][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.962109][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.019239][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 803.027873][ T26] audit: type=1326 audit(1787648943.781:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a60f3f459 code=0x7fc00000 [ 803.091483][ T9359] device bridge_slave_1 entered promiscuous mode [ 803.891999][ T26] audit: type=1326 audit(1787648943.781:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0a60f3f51d code=0x7fc00000 [ 803.923767][ T8999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.954921][ T26] audit: type=1326 audit(1787648943.781:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a60f9e0d9 code=0x7fc00000 [ 804.116612][ T8999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.181792][ T9359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.205117][ T9359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.332077][ T9359] team0: Port device team_slave_0 added [ 804.393412][ T9359] team0: Port device team_slave_1 added [ 804.488629][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.561455][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.644758][ T9359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.723167][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.730188][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.394688][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 805.416752][ T9359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.551579][ T8999] tipc: Left network mode [ 806.198271][ T26] audit: type=1800 audit(1787648946.511:62): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1233" name="bmaControls" dev="configfs" ino=49266 res=0 errno=0 [ 806.515464][ T9359] device hsr_slave_0 entered promiscuous mode [ 806.544266][ T9359] device hsr_slave_1 entered promiscuous mode [ 806.572259][ T9359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.591937][ T9359] Cannot create hsr debugfs directory [ 807.553153][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 807.554899][ T26] audit: type=1326 audit(1787648948.081:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a60f9e0d9 code=0x7fc00000 [ 807.807641][ T26] audit: type=1326 audit(1787648948.411:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a60f3f459 code=0x7fc00000 [ 808.540871][ T26] audit: type=1326 audit(1787648948.411:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0a60f3f51d code=0x7fc00000 [ 808.685012][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.693168][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.731949][ T26] audit: type=1326 audit(1787648948.411:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.6.1238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a60f9e0d9 code=0x7fc00000 [ 809.001316][ T9359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 809.046096][ T9359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 809.169517][ T9359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 809.216187][ T9359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 810.061879][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 813.687309][ T9359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.774740][ T9359] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.872250][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1245'. [ 814.401787][ T26] audit: type=1800 audit(1787648954.681:67): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1245" name="bmaControls" dev="configfs" ino=49381 res=0 errno=0 [ 814.507841][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 814.540577][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 814.614762][ T8999] device hsr_slave_0 left promiscuous mode [ 814.672808][ T8999] device hsr_slave_1 left promiscuous mode [ 814.730277][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.750461][ T8999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.794929][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.820418][ T8999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.847459][ T8999] device bridge_slave_1 left promiscuous mode [ 814.866532][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.901032][ T8999] device bridge_slave_0 left promiscuous mode [ 814.912635][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.005125][ T8999] device veth1_macvtap left promiscuous mode [ 815.018029][ T8999] device veth1_vlan left promiscuous mode [ 815.036662][ T8999] device veth0_vlan left promiscuous mode [ 820.042704][ T8999] team0 (unregistering): Port device team_slave_1 removed [ 820.276395][ T8999] team0 (unregistering): Port device team_slave_0 removed [ 820.397202][ T8999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.657076][ T8999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.972536][ T8999] bond0 (unregistering): Released all slaves [ 823.167893][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.232595][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.957992][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.965146][ T8988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.124743][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 824.583477][ T26] audit: type=1800 audit(1787648964.941:68): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1255" name="bmaControls" dev="configfs" ino=49429 res=0 errno=0 [ 824.773120][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 824.812406][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.852144][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.901075][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.908271][ T8988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.967227][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 824.983748][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 825.023837][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 825.092105][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 825.118542][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 825.148474][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 825.212580][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 825.296447][ T9359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.388072][ T9359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.422890][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 825.462737][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 826.632580][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 826.652281][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 826.688036][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.018652][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.039900][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 829.244384][ T9359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.030557][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 833.068307][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 834.294244][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 834.322794][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 834.387394][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 834.415100][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 834.450576][ T9359] device veth0_vlan entered promiscuous mode [ 834.495860][ T9359] device veth1_vlan entered promiscuous mode [ 834.636138][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 834.664698][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 834.709787][ T9359] device veth0_macvtap entered promiscuous mode [ 834.742639][ T9359] device veth1_macvtap entered promiscuous mode [ 834.820494][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.901871][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.958846][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.007445][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.066947][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.096875][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.153554][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.213221][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.262580][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 835.317850][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.763472][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.809134][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.840220][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.876223][ T9656] fuse: Bad value for 'fd' [ 836.882648][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.940686][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.991113][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.031229][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.122960][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.158731][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 837.178351][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.878606][ T9359] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.898959][ T9359] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.922031][ T9359] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.972633][ T9359] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.463279][ T8986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.492318][ T8986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.536898][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 840.622010][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.629883][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.680450][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 843.692462][ T9713] fuse: Bad value for 'fd' [ 847.259784][ T9753] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1295'. [ 852.568298][ T9803] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1311'. [ 854.462644][ T9840] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 854.868160][ T9851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.244272][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1322'. [ 857.202409][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 862.841935][ T9897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.538557][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.653297][ T9976] tipc: Started in network mode [ 865.679970][ T9976] tipc: Node identity 1, cluster identity 7 [ 865.707218][ T9976] tipc: Node number set to 1 [ 865.717821][ T9976] tipc: Cannot configure node identity twice [ 866.681276][ T9993] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1354'. [ 866.712931][ T9993] ksmbd: Unknown IPC event: 1, ignore. [ 870.125913][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.126024][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.763212][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.057033][T10092] device syzkaller0 entered promiscuous mode [ 874.506318][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.264955][T10144] device syzkaller0 entered promiscuous mode [ 880.362495][ T4289] Bluetooth: hci1: command 0x0405 tx timeout [ 880.484287][T10173] loop7: detected capacity change from 0 to 1024 [ 880.502663][T10170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.572236][T10145] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.714199][T10213] tipc: Started in network mode [ 884.719134][T10213] tipc: Node identity a6916e4e45c1, cluster identity 4711 [ 885.367461][T10213] tipc: Enabled bearer , priority 0 [ 885.562718][T10212] tipc: Disabling bearer [ 891.197089][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.486289][T10299] tipc: Enabled bearer , priority 0 [ 892.543086][T10298] tipc: Disabling bearer [ 894.853291][T10337] tipc: Enabled bearer , priority 0 [ 894.887962][T10339] device syzkaller0 entered promiscuous mode [ 894.961637][T10335] tipc: Disabling bearer [ 896.512259][T10362] device syzkaller0 entered promiscuous mode [ 898.550292][T10388] device syzkaller0 entered promiscuous mode [ 903.401486][ T3933] device veth1_vlan left promiscuous mode [ 903.452077][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 903.545066][T10425] sctp: [Deprecated]: syz.7.1455 (pid 10425) Use of int in max_burst socket option deprecated. [ 903.545066][T10425] Use struct sctp_assoc_value instead [ 905.380323][T10449] device syzkaller0 entered promiscuous mode [ 907.721461][T10467] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.1473'. [ 908.774658][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1475'. [ 911.173806][T10504] loop7: detected capacity change from 0 to 1024 [ 915.233936][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 917.420605][T10551] device syzkaller0 entered promiscuous mode [ 917.507899][T10565] tipc: Enabling of bearer rejected, failed to enable media [ 920.990125][T10624] device syzkaller0 entered promiscuous mode [ 924.296732][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 927.077992][T10689] tipc: Enabling of bearer rejected, failed to enable media [ 928.204885][T10722] tipc: Enabled bearer , priority 0 [ 928.359264][T10722] device syzkaller0 entered promiscuous mode [ 928.374173][T10722] tipc: Resetting bearer [ 928.407372][T10718] tipc: Resetting bearer [ 931.565200][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.571582][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.190911][T10718] tipc: Disabling bearer [ 935.215927][T10756] tipc: Enabled bearer , priority 0 [ 935.223001][T10752] device syzkaller0 entered promiscuous mode [ 935.254638][T10758] tipc: Resetting bearer [ 935.302387][T10745] tipc: Resetting bearer [ 935.362024][T10745] tipc: Disabling bearer [ 935.379878][T10807] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1539'. [ 938.316444][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 940.120251][T10864] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1546'. [ 940.126595][T10862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.452344][T10877] device syzkaller0 entered promiscuous mode [ 941.576787][T10877] tipc: Enabled bearer , priority 0 [ 941.599444][T10877] tipc: Resetting bearer [ 941.627345][T10875] tipc: Resetting bearer [ 942.892684][T10875] tipc: Disabling bearer [ 943.260013][T10896] tipc: Enabled bearer , priority 0 [ 943.292644][T10896] device syzkaller0 entered promiscuous mode [ 943.462999][T10904] tipc: Resetting bearer [ 943.519364][T10895] tipc: Resetting bearer [ 943.665376][T10895] tipc: Disabling bearer [ 946.192342][T10925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.858235][T10941] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1565'. [ 948.173802][T10950] device syzkaller0 entered promiscuous mode [ 948.216866][T10954] tipc: Enabling of bearer rejected, failed to enable media [ 948.241579][T10950] tipc: Enabled bearer , priority 0 [ 949.406450][T10950] tipc: Resetting bearer [ 949.451291][T10949] tipc: Resetting bearer [ 949.502770][T10949] tipc: Disabling bearer [ 950.753362][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.330305][T10997] loop7: detected capacity change from 0 to 1024 [ 954.066063][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 955.387625][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.695358][T11044] 9pnet_fd: Insufficient options for proto=fd [ 956.104883][T11054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1598'. [ 957.374000][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.409950][T11054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.458439][T11054] bond0 (unregistering): Released all slaves [ 958.460265][T11084] 9pnet_fd: Insufficient options for proto=fd [ 961.180874][T11116] device syzkaller0 entered promiscuous mode [ 961.320022][T11119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.457206][T11129] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 963.318138][T11141] 9pnet_fd: Insufficient options for proto=fd [ 963.333561][T11133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.127850][T11169] device syzkaller0 entered promiscuous mode [ 968.053140][T11217] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1641'. [ 969.597481][T11231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.168835][T11255] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1652'. [ 974.886290][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'. [ 974.925608][T11313] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1665'. [ 978.083941][T11338] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1673'. [ 980.627761][T11387] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1683'. [ 982.104147][T11397] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1687'. [ 983.551409][T11438] device syzkaller0 entered promiscuous mode [ 983.677428][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'. [ 985.736706][T11466] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1698'. [ 988.310866][T11511] device syzkaller0 entered promiscuous mode [ 988.639925][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1710'. [ 992.776649][ T3933] device veth0_macvtap left promiscuous mode [ 992.829082][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 992.888510][T11554] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1714'. [ 993.006365][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.019257][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.023648][T11608] device syzkaller0 entered promiscuous mode [ 997.179543][T11611] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1732'. [ 997.314978][T11615] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1723'. [ 1002.743638][T11676] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1747'. [ 1003.892459][T11697] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1746'. [ 1004.225757][T11706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.074644][T11793] sctp: [Deprecated]: syz.5.1775 (pid 11793) Use of int in max_burst socket option deprecated. [ 1012.074644][T11793] Use struct sctp_assoc_value instead [ 1012.129372][T11794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1012.158809][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1771'. [ 1013.247934][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.255184][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.958152][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.072395][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.586806][T11814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.601677][T11814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.636052][T11814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.676484][T11814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.353981][T11840] tipc: Enabled bearer , priority 0 [ 1016.368002][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 1016.368434][T11836] device syzkaller0 entered promiscuous mode [ 1016.385209][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 1016.411621][T11884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1789'. [ 1016.521833][ T4273] Bluetooth: hci0: command 0x0401 tx timeout [ 1016.592344][T11836] tipc: Resetting bearer [ 1016.649066][T11836] tipc: Disabling bearer [ 1016.663992][T11887] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1018.417520][T11943] device syzkaller0 entered promiscuous mode [ 1018.470579][T11943] tipc: Enabled bearer , priority 0 [ 1018.515090][T11946] sctp: [Deprecated]: syz.7.1806 (pid 11946) Use of int in max_burst socket option deprecated. [ 1018.515090][T11946] Use struct sctp_assoc_value instead [ 1018.563815][T11942] tipc: Resetting bearer [ 1018.736708][T11942] tipc: Disabling bearer [ 1020.189300][T11959] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1810'. [ 1020.208668][T11968] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1020.278772][T11969] netlink: 'syz.5.1813': attribute type 2 has an invalid length. [ 1023.523756][T12032] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.1828'. [ 1031.067690][T12155] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1036.453894][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1882'. [ 1036.768803][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1885'. [ 1036.968332][T12258] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1887'. [ 1038.311387][T12267] tipc: Enabled bearer , priority 0 [ 1038.525693][T12267] device syzkaller0 entered promiscuous mode [ 1038.557574][T12267] tipc: Resetting bearer [ 1038.607042][T12264] tipc: Resetting bearer [ 1038.662076][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1895'. [ 1039.393382][T12309] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1892'. [ 1041.082567][T12264] tipc: Disabling bearer [ 1041.103090][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 1041.142643][T12312] sctp: [Deprecated]: syz.6.1899 (pid 12312) Use of int in max_burst socket option deprecated. [ 1041.142643][T12312] Use struct sctp_assoc_value instead [ 1042.662441][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1907'. [ 1043.182678][T12354] sctp: [Deprecated]: syz.7.1912 (pid 12354) Use of int in max_burst socket option deprecated. [ 1043.182678][T12354] Use struct sctp_assoc_value instead [ 1043.284128][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 1043.640507][T12368] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1915'. [ 1045.555393][T12384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1920'. [ 1045.602245][T12384] unsupported nlmsg_type 40 [ 1045.692557][T12389] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1047.620454][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 1047.714814][T12416] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1931'. [ 1049.139946][T12450] device syzkaller0 entered promiscuous mode [ 1049.437376][T12460] device syzkaller0 entered promiscuous mode [ 1049.898419][T12477] device syzkaller0 entered promiscuous mode [ 1051.171993][T12506] sctp: [Deprecated]: syz.0.1962 (pid 12506) Use of int in max_burst socket option deprecated. [ 1051.171993][T12506] Use struct sctp_assoc_value instead [ 1051.945275][T12524] bridge0: port 3(syz_tun) entered blocking state [ 1051.981916][T12524] bridge0: port 3(syz_tun) entered disabled state [ 1052.010087][T12524] device syz_tun entered promiscuous mode [ 1052.028977][T12524] bridge0: port 3(syz_tun) entered blocking state [ 1052.035610][T12524] bridge0: port 3(syz_tun) entered forwarding state [ 1052.391108][T12541] device syzkaller0 entered promiscuous mode [ 1052.767448][T12550] sctp: [Deprecated]: syz.0.1974 (pid 12550) Use of int in max_burst socket option deprecated. [ 1052.767448][T12550] Use struct sctp_assoc_value instead [ 1052.786243][T12552] device syzkaller0 entered promiscuous mode [ 1054.455044][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.464014][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.729257][T12589] sctp: [Deprecated]: syz.1.1987 (pid 12589) Use of int in max_burst socket option deprecated. [ 1054.729257][T12589] Use struct sctp_assoc_value instead [ 1055.300106][T12601] device syzkaller0 entered promiscuous mode [ 1056.996633][T12614] bridge0: port 3(syz_tun) entered disabled state [ 1057.063208][T12614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.070610][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.216254][T12631] sctp: [Deprecated]: syz.5.1998 (pid 12631) Use of int in max_burst socket option deprecated. [ 1057.216254][T12631] Use struct sctp_assoc_value instead [ 1058.373957][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.435045][T12614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.934381][T12614] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.951986][T12614] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.971569][T12614] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.991889][T12614] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.316037][T12663] device syzkaller0 entered promiscuous mode [ 1059.410774][T12678] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2007'. [ 1059.870457][T12701] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.2013'. [ 1062.278462][T12727] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2021'. [ 1062.781278][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.788807][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.703097][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.742213][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.247986][T12722] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.257028][T12722] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.266577][T12722] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.275730][T12722] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.587644][T12840] tipc: Enabled bearer , priority 0 [ 1067.609545][T12840] tipc: Resetting bearer [ 1067.637324][T12838] tipc: Disabling bearer [ 1068.048631][T12871] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2061'. [ 1068.272206][T12883] tipc: Enabled bearer , priority 0 [ 1068.302620][T12881] tipc: Disabling bearer [ 1068.432758][T12890] tipc: Enabled bearer , priority 0 [ 1068.465795][T12890] tipc: Resetting bearer [ 1068.497209][T12889] tipc: Disabling bearer [ 1068.526103][T12892] tipc: Enabled bearer , priority 10 [ 1068.684415][T12896] tipc: Enabling of bearer rejected, failed to enable media [ 1068.706524][T12899] device syzkaller0 entered promiscuous mode [ 1068.914239][T12905] device syzkaller0 entered promiscuous mode [ 1070.256697][ T4319] tipc: Node number set to 3813699150 [ 1070.567809][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2081'. [ 1070.627464][T12934] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2081'. [ 1070.646434][T12939] tipc: Enabled bearer , priority 0 [ 1070.662223][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2081'. [ 1070.675700][T12939] tipc: Resetting bearer [ 1070.710362][T12935] tipc: Disabling bearer [ 1072.024599][T12951] device syzkaller0 entered promiscuous mode [ 1073.603361][T12968] device syzkaller0 entered promiscuous mode [ 1073.672975][T12971] tipc: Enabled bearer , priority 0 [ 1073.736716][T12969] tipc: Disabling bearer [ 1073.950932][T12977] device syzkaller1 entered promiscuous mode [ 1074.208296][T12985] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2096'. [ 1074.340757][T12989] tipc: Enabling of bearer rejected, failed to enable media [ 1074.650102][T13005] device syzkaller0 entered promiscuous mode [ 1075.902498][T13028] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.2112'. [ 1076.168538][T13040] tipc: Enabling of bearer rejected, failed to enable media [ 1076.214203][T13041] device syzkaller0 entered promiscuous mode [ 1076.637144][T13060] sock: sock_set_timeout: `syz.7.2123' (pid 13060) tries to set negative timeout [ 1077.769460][T13074] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2129'. [ 1078.035416][T13081] tipc: Enabled bearer , priority 0 [ 1078.073777][T13085] device syzkaller0 entered promiscuous mode [ 1078.085324][T13081] tipc: Resetting bearer [ 1078.237242][T13080] tipc: Disabling bearer [ 1078.276750][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 1079.809880][T13112] device syzkaller0 entered promiscuous mode [ 1080.790790][T13134] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2149'. [ 1080.823297][T13138] device syzkaller0 entered promiscuous mode [ 1081.087934][T13144] tipc: Enabled bearer , priority 0 [ 1082.057341][T13144] device syzkaller0 entered promiscuous mode [ 1082.093632][T13144] tipc: Resetting bearer [ 1082.143698][T13158] tipc: Enabled bearer , priority 0 [ 1082.161437][T13158] tipc: Resetting bearer [ 1082.210020][T13156] tipc: Disabling bearer [ 1082.236433][T13162] device syzkaller0 entered promiscuous mode [ 1082.288721][T13141] tipc: Resetting bearer [ 1082.718271][T13177] sctp: [Deprecated]: syz.0.2159 (pid 13177) Use of int in max_burst socket option deprecated. [ 1082.718271][T13177] Use struct sctp_assoc_value instead [ 1082.848870][T13180] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2160'. [ 1084.615351][T13141] tipc: Disabling bearer [ 1084.737148][T13184] tipc: Enabling of bearer rejected, failed to enable media [ 1085.587655][T13209] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2169'. [ 1085.811089][T13212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2169'. [ 1085.840660][T13218] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1085.993016][T13227] device syzkaller0 entered promiscuous mode [ 1086.133584][T13232] tipc: Enabled bearer , priority 0 [ 1086.287252][T13232] device syzkaller0 entered promiscuous mode [ 1086.314365][T13232] tipc: Resetting bearer [ 1086.348760][T13245] netlink: 'syz.7.2179': attribute type 1 has an invalid length. [ 1086.369066][T13245] netlink: 'syz.7.2179': attribute type 7 has an invalid length. [ 1086.388678][T13245] netlink: 'syz.7.2179': attribute type 8 has an invalid length. [ 1086.400837][T13229] tipc: Resetting bearer [ 1088.323306][T13229] tipc: Disabling bearer [ 1088.631408][T13275] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 1088.651451][T13275] netlink: 'syz.1.2187': attribute type 7 has an invalid length. [ 1088.669155][T13275] netlink: 'syz.1.2187': attribute type 8 has an invalid length. [ 1088.710118][T13275] device syzkaller0 entered promiscuous mode [ 1088.911528][T13289] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2190'. [ 1089.008503][T13288] device syzkaller0 entered promiscuous mode [ 1091.598749][T13338] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1091.715820][T13342] netlink: 'syz.6.2206': attribute type 1 has an invalid length. [ 1091.752297][T13342] netlink: 'syz.6.2206': attribute type 7 has an invalid length. [ 1091.774850][T13342] netlink: 'syz.6.2206': attribute type 8 has an invalid length. [ 1091.816541][T13342] device syzkaller0 entered promiscuous mode [ 1092.211985][T13374] device syzkaller0 entered promiscuous mode [ 1096.125348][T13424] tipc: Enabling of bearer rejected, failed to enable media [ 1096.486801][T13439] device syzkaller0 entered promiscuous mode [ 1096.568925][T13442] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2233'. [ 1099.297939][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.305418][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.697051][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.731535][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.027830][T13469] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.036847][T13469] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.046104][T13469] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.055486][T13469] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.156602][T13486] tipc: Enabling of bearer rejected, failed to enable media [ 1100.440229][T13501] device syzkaller0 entered promiscuous mode [ 1103.328738][T13565] netlink: 'syz.1.2265': attribute type 2 has an invalid length. [ 1103.373082][T13570] device syzkaller0 entered promiscuous mode [ 1103.516591][T13565] netlink: 'syz.1.2265': attribute type 2 has an invalid length. [ 1103.875352][T13596] device syzkaller0 entered promiscuous mode [ 1104.175785][T13605] device syzkaller0 entered promiscuous mode [ 1104.541643][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2281'. [ 1104.684225][T13631] device syzkaller0 entered promiscuous mode [ 1104.856248][T13647] device syzkaller0 entered promiscuous mode [ 1106.086110][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1106.138412][T13716] device syzkaller0 entered promiscuous mode [ 1106.897156][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 1106.993967][T13756] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2314'. [ 1108.222746][T13667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1108.587431][T13784] netlink: 'syz.5.2326': attribute type 2 has an invalid length. [ 1108.938311][T13799] device syzkaller0 entered promiscuous mode [ 1108.952533][T13803] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2333'. [ 1109.122676][T13815] device syzkaller0 entered promiscuous mode [ 1109.238497][T13820] team0: Port device wlan0 added [ 1109.380145][T13828] device syzkaller0 entered promiscuous mode [ 1109.620318][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2346'. [ 1110.030649][T13845] device syzkaller0 entered promiscuous mode [ 1111.943838][T13805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.435778][T13881] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2362'. [ 1113.847645][T13901] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2372'. [ 1116.173224][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.179584][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.409612][T13877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1118.241392][T13989] [ 1118.243790][T13989] ====================================================== [ 1118.250815][T13989] WARNING: possible circular locking dependency detected [ 1118.257934][T13989] syzkaller #0 Not tainted [ 1118.262353][T13989] ------------------------------------------------------ [ 1118.269373][T13989] syz.0.2404/13989 is trying to acquire lock: [ 1118.275455][T13989] ffff888054434350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x529/0xcc0 [ 1118.284782][T13989] [ 1118.284782][T13989] but task is already holding lock: [ 1118.292158][T13989] ffff888054435510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 1118.302881][T13989] [ 1118.302881][T13989] which lock already depends on the new lock. [ 1118.302881][T13989] [ 1118.313302][T13989] [ 1118.313302][T13989] the existing dependency chain (in reverse order) is: [ 1118.322338][T13989] [ 1118.322338][T13989] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1118.331141][T13989] __mutex_lock+0x12d/0xae0 [ 1118.336259][T13989] nfc_urelease_event_work+0x120/0x310 [ 1118.342291][T13989] process_one_work+0x8ab/0x1160 [ 1118.347860][T13989] worker_thread+0xaf5/0x12a0 [ 1118.353093][T13989] kthread+0x29d/0x330 [ 1118.357699][T13989] ret_from_fork+0x1f/0x30 [ 1118.362736][T13989] [ 1118.362736][T13989] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1118.370589][T13989] __mutex_lock+0x12d/0xae0 [ 1118.375637][T13989] nfc_register_device+0x38/0x300 [ 1118.381209][T13989] nci_register_device+0x89f/0x9f0 [ 1118.386860][T13989] virtual_ncidev_open+0x55/0xc0 [ 1118.392447][T13989] misc_open+0x31f/0x390 [ 1118.397297][T13989] chrdev_open+0x585/0x5f0 [ 1118.402316][T13989] do_dentry_open+0x7dd/0x10b0 [ 1118.407705][T13989] path_openat+0x2674/0x2f10 [ 1118.412917][T13989] do_filp_open+0x1ee/0x420 [ 1118.418006][T13989] do_sys_openat2+0x14b/0x4f0 [ 1118.423500][T13989] __x64_sys_openat+0x135/0x160 [ 1118.428999][T13989] do_syscall_64+0x4c/0xa0 [ 1118.434051][T13989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.440552][T13989] [ 1118.440552][T13989] -> #1 (nci_mutex){+.+.}-{3:3}: [ 1118.447674][T13989] __mutex_lock+0x12d/0xae0 [ 1118.452735][T13989] virtual_nci_close+0x13/0x40 [ 1118.458057][T13989] nci_dev_up+0x976/0xd90 [ 1118.462928][T13989] nfc_dev_up+0x15d/0x310 [ 1118.467791][T13989] nfc_genl_dev_up+0x85/0xd0 [ 1118.473017][T13989] genl_family_rcv_msg_doit+0x22f/0x350 [ 1118.479180][T13989] genl_rcv_msg+0x601/0x790 [ 1118.484232][T13989] netlink_rcv_skb+0x1ef/0x440 [ 1118.489631][T13989] genl_rcv+0x24/0x40 [ 1118.495290][T13989] netlink_unicast+0x7ad/0x920 [ 1118.500651][T13989] netlink_sendmsg+0x8ad/0xbd0 [ 1118.505965][T13989] ____sys_sendmsg+0x5ed/0x9a0 [ 1118.511370][T13989] ___sys_sendmsg+0x2a2/0x360 [ 1118.516608][T13989] __se_sys_sendmsg+0x1c3/0x2b0 [ 1118.522016][T13989] do_syscall_64+0x4c/0xa0 [ 1118.527083][T13989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.533620][T13989] [ 1118.533620][T13989] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 1118.541328][T13989] __lock_acquire+0x2d18/0x7c40 [ 1118.546828][T13989] lock_acquire+0x1bb/0x4a0 [ 1118.551888][T13989] __mutex_lock+0x12d/0xae0 [ 1118.556950][T13989] nci_start_poll+0x529/0xcc0 [ 1118.562165][T13989] nfc_start_poll+0x141/0x2c0 [ 1118.567418][T13989] nfc_genl_start_poll+0x1d7/0x340 [ 1118.573073][T13989] genl_family_rcv_msg_doit+0x22f/0x350 [ 1118.579164][T13989] genl_rcv_msg+0x601/0x790 [ 1118.584213][T13989] netlink_rcv_skb+0x1ef/0x440 [ 1118.589534][T13989] genl_rcv+0x24/0x40 [ 1118.594059][T13989] netlink_unicast+0x7ad/0x920 [ 1118.599419][T13989] netlink_sendmsg+0x8ad/0xbd0 [ 1118.604757][T13989] ____sys_sendmsg+0x5ed/0x9a0 [ 1118.610093][T13989] ___sys_sendmsg+0x2a2/0x360 [ 1118.615328][T13989] __se_sys_sendmsg+0x1c3/0x2b0 [ 1118.620821][T13989] do_syscall_64+0x4c/0xa0 [ 1118.625759][T13989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.632639][T13989] [ 1118.632639][T13989] other info that might help us debug this: [ 1118.632639][T13989] [ 1118.642879][T13989] Chain exists of: [ 1118.642879][T13989] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 1118.642879][T13989] [ 1118.657159][T13989] Possible unsafe locking scenario: [ 1118.657159][T13989] [ 1118.664620][T13989] CPU0 CPU1 [ 1118.670052][T13989] ---- ---- [ 1118.675437][T13989] lock(&genl_data->genl_data_mutex); [ 1118.680922][T13989] lock(nfc_devlist_mutex); [ 1118.688061][T13989] lock(&genl_data->genl_data_mutex); [ 1118.696148][T13989] lock(&ndev->req_lock); [ 1118.700594][T13989] [ 1118.700594][T13989] *** DEADLOCK *** [ 1118.700594][T13989] [ 1118.708752][T13989] 4 locks held by syz.0.2404/13989: [ 1118.713964][T13989] #0: ffffffff8ddbce30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1118.722182][T13989] #1: ffffffff8ddbcc48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 1118.731185][T13989] #2: ffff888054435510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 1118.742335][T13989] #3: ffff888054435100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 1118.751478][T13989] [ 1118.751478][T13989] stack backtrace: [ 1118.757362][T13989] CPU: 1 PID: 13989 Comm: syz.0.2404 Not tainted syzkaller #0 [ 1118.764803][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.774874][T13989] Call Trace: [ 1118.778369][T13989] [ 1118.781373][T13989] dump_stack_lvl+0x188/0x24e [ 1118.786117][T13989] ? load_image+0x410/0x410 [ 1118.790666][T13989] ? show_regs_print_info+0x12/0x12 [ 1118.795906][T13989] ? print_circular_bug+0x12b/0x1a0 [ 1118.801142][T13989] check_noncircular+0x296/0x330 [ 1118.806133][T13989] ? add_chain_block+0x9b0/0x9b0 [ 1118.811114][T13989] ? lockdep_lock+0xf1/0x1f0 [ 1118.815740][T13989] ? _find_first_zero_bit+0xd2/0x100 [ 1118.821147][T13989] __lock_acquire+0x2d18/0x7c40 [ 1118.826033][T13989] ? kasan_set_track+0x4b/0x70 [ 1118.830907][T13989] ? nfc_llcp_general_bytes+0x39/0x160 [ 1118.836412][T13989] ? genl_family_rcv_msg_doit+0x22f/0x350 [ 1118.842339][T13989] ? netlink_unicast+0x7ad/0x920 [ 1118.847321][T13989] ? netlink_sendmsg+0x8ad/0xbd0 [ 1118.852434][T13989] ? ____sys_sendmsg+0x5ed/0x9a0 [ 1118.857413][T13989] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 1118.862473][T13989] ? do_syscall_64+0x4c/0xa0 [ 1118.867103][T13989] ? verify_lock_unused+0x140/0x140 [ 1118.872344][T13989] ? mark_lock+0x94/0x320 [ 1118.876712][T13989] lock_acquire+0x1bb/0x4a0 [ 1118.881253][T13989] ? nci_start_poll+0x529/0xcc0 [ 1118.886132][T13989] ? kasan_quarantine_put+0xd4/0x210 [ 1118.891515][T13989] ? __might_sleep+0xd0/0xd0 [ 1118.896185][T13989] ? read_lock_is_recursive+0x10/0x10 [ 1118.901590][T13989] ? slab_free_freelist_hook+0x133/0x1b0 [ 1118.907515][T13989] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 1118.912654][T13989] ? __kmem_cache_free+0xb6/0x200 [ 1118.917705][T13989] __mutex_lock+0x12d/0xae0 [ 1118.922238][T13989] ? nci_start_poll+0x529/0xcc0 [ 1118.927203][T13989] ? nfc_llcp_general_bytes+0x160/0x160 [ 1118.932863][T13989] ? nfc_get_device+0x82/0xd0 [ 1118.937579][T13989] ? nci_start_poll+0x529/0xcc0 [ 1118.942457][T13989] ? nfc_release+0x253/0x2e0 [ 1118.947168][T13989] ? mutex_lock_nested+0x10/0x10 [ 1118.952132][T13989] ? kobject_put+0x416/0x450 [ 1118.956781][T13989] ? _raw_spin_unlock+0x24/0x40 [ 1118.961657][T13989] nci_start_poll+0x529/0xcc0 [ 1118.966347][T13989] ? __mutex_trylock_common+0x15c/0x260 [ 1118.971918][T13989] ? nci_dev_down+0x40/0x40 [ 1118.976440][T13989] ? trace_contention_end+0x5f/0x170 [ 1118.981839][T13989] ? __mutex_lock+0x1ab/0xae0 [ 1118.986540][T13989] ? trace_contention_end+0x5f/0x170 [ 1118.991860][T13989] ? __mutex_lock+0x1ab/0xae0 [ 1118.996557][T13989] ? nfc_start_poll+0x4f/0x2c0 [ 1119.001350][T13989] ? mutex_lock_nested+0x10/0x10 [ 1119.006309][T13989] ? mutex_lock_nested+0x10/0x10 [ 1119.011303][T13989] ? nfc_get_device+0x82/0xd0 [ 1119.016001][T13989] ? nfc_release+0x2e0/0x2e0 [ 1119.020610][T13989] nfc_start_poll+0x141/0x2c0 [ 1119.025307][T13989] nfc_genl_start_poll+0x1d7/0x340 [ 1119.030442][T13989] genl_family_rcv_msg_doit+0x22f/0x350 [ 1119.036009][T13989] ? end_current_label_crit_section+0x170/0x170 [ 1119.042410][T13989] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1119.048301][T13989] ? bpf_lsm_capable+0x5/0x10 [ 1119.053052][T13989] ? security_capable+0x85/0xb0 [ 1119.057944][T13989] genl_rcv_msg+0x601/0x790 [ 1119.062437][T13989] ? genl_bind+0x360/0x360 [ 1119.066846][T13989] ? nfc_genl_dev_down+0xd0/0xd0 [ 1119.071793][T13989] netlink_rcv_skb+0x1ef/0x440 [ 1119.076572][T13989] ? genl_bind+0x360/0x360 [ 1119.080979][T13989] ? netlink_ack+0x1160/0x1160 [ 1119.085859][T13989] ? down_read+0x1a8/0x2d0 [ 1119.090272][T13989] genl_rcv+0x24/0x40 [ 1119.094339][T13989] netlink_unicast+0x7ad/0x920 [ 1119.099100][T13989] netlink_sendmsg+0x8ad/0xbd0 [ 1119.103852][T13989] ? netlink_getsockopt+0x550/0x550 [ 1119.109039][T13989] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1119.114576][T13989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1119.119847][T13989] ? security_socket_sendmsg+0x7c/0xa0 [ 1119.125384][T13989] ? netlink_getsockopt+0x550/0x550 [ 1119.130657][T13989] ____sys_sendmsg+0x5ed/0x9a0 [ 1119.135442][T13989] ? __sys_sendmsg_sock+0x30/0x30 [ 1119.140456][T13989] ? __import_iovec+0x306/0x510 [ 1119.145326][T13989] ? import_iovec+0x6f/0xa0 [ 1119.149837][T13989] ___sys_sendmsg+0x2a2/0x360 [ 1119.154524][T13989] ? __sys_sendmsg+0x2a0/0x2a0 [ 1119.159311][T13989] __se_sys_sendmsg+0x1c3/0x2b0 [ 1119.164313][T13989] ? __x64_sys_sendmsg+0x80/0x80 [ 1119.169289][T13989] ? lockdep_hardirqs_on+0x94/0x140 [ 1119.174517][T13989] do_syscall_64+0x4c/0xa0 [ 1119.178941][T13989] ? clear_bhb_loop+0x60/0xb0 [ 1119.183642][T13989] ? clear_bhb_loop+0x60/0xb0 [ 1119.188327][T13989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1119.194233][T13989] RIP: 0033:0x7fc7e199e0d9 [ 1119.198712][T13989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.218366][T13989] RSP: 002b:00007fc7e2872028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.226837][T13989] RAX: ffffffffffffffda RBX: 00007fc7e1c26090 RCX: 00007fc7e199e0d9 [ 1119.234827][T13989] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1119.242801][T13989] RBP: 00007fc7e1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1119.250777][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.258755][T13989] R13: 00007fc7e1c26128 R14: 00007fc7e1c26090 R15: 00007fff9b956a68 [ 1119.266724][T13989] [ 1121.103035][T13989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1121.111819][T13989] nci: nci_start_poll: failed to set local general bytes [ 1121.119514][T13984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512