last executing test programs: 3m13.040090844s ago: executing program 3 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m8.092865434s ago: executing program 3 (id=1221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 3m5.501100247s ago: executing program 3 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x188) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x15, 0x4, 0x5, 0xffff32eb, 0x2, 0x5, 0x2d7b, 0x3ff, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd0, 0x80000002], 0x2, 0x4000003}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m2.567341807s ago: executing program 3 (id=1239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 2m58.33087059s ago: executing program 3 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m53.701645172s ago: executing program 3 (id=1282): socket$igmp(0x2, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x133}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) unshare(0x6a040000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x8000) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 2m38.222237266s ago: executing program 32 (id=1282): socket$igmp(0x2, 0x3, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x133}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) unshare(0x6a040000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x8000) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 22.740025221s ago: executing program 4 (id=2629): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) 6.100115244s ago: executing program 0 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "b190a11277a083fc", "7f7f7a75830e874fc6f6f68f39217be89534d65ea56eaf9de57107b38594b13f", "8364ecf5", "28d9a3bd0874d9af"}, 0x38) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) close(0x4) 5.899955428s ago: executing program 0 (id=2741): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) accept4$phonet_pipe(r2, 0x0, 0x0, 0x800) 5.623578775s ago: executing program 0 (id=2743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000500)=0xfffffffc, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x45833af96e4a38ff, 0x0) 4.364997135s ago: executing program 0 (id=2749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 3.984000244s ago: executing program 5 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 3.479702967s ago: executing program 0 (id=2752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ee52}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000874}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 3.435256198s ago: executing program 5 (id=2753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 3.426066098s ago: executing program 1 (id=2754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 3.206959473s ago: executing program 5 (id=2755): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2001, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x31, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x7, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x22}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c102000000061201000000f400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x300}], 0x2}, 0x4005) 3.205435303s ago: executing program 2 (id=2756): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1081, 0x9, 0x1, 0x1040, 0x0, 0x5}, 0x30, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x0, 0xa}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000a00)="b9", 0x1, 0x0, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x7ac7, 0x0, "5dee09000000823a66b8a3fedf0800"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000002c0)={@empty, @multicast2, 0x0}, &(0x7f0000000300)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xd6, 0x0, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x2, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@lsrr={0x83, 0xf, 0x87, [@local, @loopback, @empty]}]}}}}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x80, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004010}, 0x20040091) 3.154116504s ago: executing program 4 (id=2631): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x10001, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x4400c000) sendto(r0, 0x0, 0x0, 0x3c2311157cd73e93, 0x0, 0x0) 2.982612649s ago: executing program 4 (id=2757): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6) 2.981129379s ago: executing program 0 (id=2758): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000800000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3cae}, 0x10}, 0x94) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000d80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x15c}}, 0x24008050) recvmsg(r6, &(0x7f0000000840)={&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/23, 0x17}, 0x21) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.910302961s ago: executing program 1 (id=2759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0xae0, 0x6361, 0x3, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xcb1e72f7487c4292}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.855312932s ago: executing program 5 (id=2760): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @l2tp={0x2, 0x0, @private=0xa010100, 0x2}, @ethernet={0x303, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x9, 0x0, 0x0, 0x0, 0xff2, &(0x7f00000000c0)='lo\x00', 0x1c0ed06b, 0x8e2, 0x9}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.807021893s ago: executing program 4 (id=2761): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x28, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 2.568044478s ago: executing program 2 (id=2762): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg(r3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2.370971504s ago: executing program 4 (id=2763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa81, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x88, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 1.875171635s ago: executing program 1 (id=2765): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.070533065s ago: executing program 4 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffff", 0x45}], 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1], 0x60}}, 0x4000002) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee5, 0x8031, r4, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x8) r5 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x48) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) 1.069493375s ago: executing program 2 (id=2775): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 943.049098ms ago: executing program 1 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000780)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r5) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r7, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0xa888}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 921.680098ms ago: executing program 2 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c0002", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=""/7}, 0x20) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, 0xdb31}], 0x1, 0x40002102, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES8=r1, @ANYBLOB="7d2a55dd73c1832200d9492ac06d91e713743b43e574024ff1a7a806e6cc09c13c8c649950d85bc4c26a58f131894245", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) close(0x3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 875.541019ms ago: executing program 5 (id=2769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ee52}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000874}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, 0x0, 0x24004015) 317.062043ms ago: executing program 2 (id=2770): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2001, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x31, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x7, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x22}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c102000000061201000000f400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x300}], 0x2}, 0x4005) 316.250733ms ago: executing program 1 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000000004a51000000", @ANYRES64=r3, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) 89.989189ms ago: executing program 1 (id=2772): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1081, 0x9, 0x1, 0x1040, 0x0, 0x5}, 0x30, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x0, 0xa}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000a00)="b9", 0x1, 0x0, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x7ac7, 0x0, "5dee09000000823a66b8a3fedf0800"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000002c0)={@empty, @multicast2, 0x0}, &(0x7f0000000300)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xd6, 0x0, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x2, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@lsrr={0x83, 0xf, 0x87, [@local, @loopback, @empty]}]}}}}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x80, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004010}, 0x20040091) 19.84295ms ago: executing program 5 (id=2773): ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 0s ago: executing program 2 (id=2774): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): an1: link becomes ready [ 83.416517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.433496][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.475255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.489155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.521307][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.531175][ T4193] device veth0_macvtap entered promiscuous mode [ 83.553579][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.571421][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.621744][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.637417][ T4193] device veth1_macvtap entered promiscuous mode [ 83.649586][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.666187][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.688769][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.699763][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.715869][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.726302][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.782485][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.818319][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.841227][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.861196][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.889883][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.901416][ T4194] device veth0_vlan entered promiscuous mode [ 83.912062][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.930689][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.951401][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.964198][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.978809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.988285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.998982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.007338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.024963][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.041037][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.053202][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.065832][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.085176][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.105646][ T4192] device veth0_vlan entered promiscuous mode [ 84.114834][ T4194] device veth1_vlan entered promiscuous mode [ 84.129606][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.139926][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.158101][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.169778][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.178474][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.206016][ T4205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.252961][ T4192] device veth1_vlan entered promiscuous mode [ 84.272995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.289888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.298940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.309542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.323875][ T4194] device veth0_macvtap entered promiscuous mode [ 84.337336][ T4194] device veth1_macvtap entered promiscuous mode [ 84.356654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.368709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.385376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.393751][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 84.404053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.448671][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.460252][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.471912][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 84.477637][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.482019][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 84.506633][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 84.513408][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 84.523082][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.532631][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.544601][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.563419][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.575116][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.587356][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.612492][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.621770][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631725][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.642791][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.655439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.665849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.676642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.686540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.696151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.706222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.715276][ T4202] device veth0_vlan entered promiscuous mode [ 84.726189][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.736267][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.772128][ T4202] device veth1_vlan entered promiscuous mode [ 84.777011][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.785997][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.799799][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.807755][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.822039][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.831654][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.856647][ T4192] device veth0_macvtap entered promiscuous mode [ 84.898258][ T4192] device veth1_macvtap entered promiscuous mode [ 84.947194][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.963165][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.977558][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.985944][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.996850][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.008456][ T4205] device veth0_vlan entered promiscuous mode [ 85.021544][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.061834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.071502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.088085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.108653][ T4202] device veth0_macvtap entered promiscuous mode [ 85.120434][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.131970][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.144189][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.155108][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.167549][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.186856][ T4205] device veth1_vlan entered promiscuous mode [ 85.203412][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.224580][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.238791][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.252027][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.265709][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.277734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.292803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.307434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.325949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.339260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.355217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.379432][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.390730][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.399750][ T4202] device veth1_macvtap entered promiscuous mode [ 85.424967][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438605][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.448484][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.458220][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.473422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.483417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.492273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.558844][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.571310][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.571453][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.571474][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.571484][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.571501][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.573782][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.577270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.655095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.713318][ T4205] device veth0_macvtap entered promiscuous mode [ 85.733467][ T4205] device veth1_macvtap entered promiscuous mode [ 85.869218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.965705][ T4279] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.113771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.209816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.315367][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.362663][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.459802][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.478325][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.488767][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.506131][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.516658][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.534087][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548867][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.562669][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.579360][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.592297][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.607313][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.620188][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.635914][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 86.644222][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 86.650430][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 86.656525][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 86.663049][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 86.677033][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.692233][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.703454][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.704752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.728978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.738569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.751792][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.761477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.774874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.788656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.812804][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.826552][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.836234][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.845568][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.893800][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.934892][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.974910][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.010866][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.074290][ T4284] process 'syz.2.6' launched './file1' with NULL argv: empty string added [ 87.086755][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.167000][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.237992][ T4205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.306854][ T4205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.412637][ T4205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.477648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.572789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.975241][ T4205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.051602][ T4205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.115778][ T4205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.186650][ T4205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.450503][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.458669][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.503592][ T4288] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.629523][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.711649][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.719756][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.741158][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.749213][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.851304][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.870927][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.901421][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.909329][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.925990][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.960398][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.989792][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.020471][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.107823][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.149136][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.201475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.210831][ T4296] ip_tables: iptables: counters copy to user failed while replacing table [ 89.288329][ T4296] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 91.109474][ T4311] ======================================================= [ 91.109474][ T4311] WARNING: The mand mount option has been deprecated and [ 91.109474][ T4311] and is ignored by this kernel. Remove the mand [ 91.109474][ T4311] option from the mount to silence this warning. [ 91.109474][ T4311] ======================================================= [ 91.145236][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.425992][ T4313] ODEBUG: Out of memory. ODEBUG disabled [ 92.196205][ T1108] cfg80211: failed to load regulatory.db [ 92.620271][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.013497][ T4334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.089959][ T4339] Zero length message leads to an empty skb [ 93.140202][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 93.722598][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.731291][ T7] usb 4-1: Product: syz [ 93.735699][ T7] usb 4-1: Manufacturer: syz [ 93.740576][ T7] usb 4-1: SerialNumber: syz [ 93.751389][ T7] usb 4-1: config 0 descriptor?? [ 93.793352][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.799705][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 94.010266][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 94.102607][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 94.130254][ T4314] device bond0 entered promiscuous mode [ 94.140126][ T7] dib0700: firmware download failed at 7 with -22 [ 94.201360][ T4314] device bond_slave_0 entered promiscuous mode [ 94.207801][ T4314] device bond_slave_1 entered promiscuous mode [ 94.237733][ T4344] fuse: Unknown parameter 'ÿ1844674407370955161500000000000000000003' [ 94.285934][ T4314] device batadv0 entered promiscuous mode [ 94.307220][ T4314] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.375105][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 94.692577][ T4316] usb 4-1: USB disconnect, device number 2 [ 99.208933][ T4410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.609339][ T4414] fuse: Unknown parameter 'ÿÿ1844674407370955161500000000000000000003' [ 99.760291][ T4276] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.160422][ T4276] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 101.177695][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.236777][ T4276] usb 5-1: Product: syz [ 101.257011][ T4276] usb 5-1: Manufacturer: syz [ 101.303671][ T4276] usb 5-1: SerialNumber: syz [ 101.397753][ T4276] usb 5-1: config 0 descriptor?? [ 102.451375][ T4276] usb 5-1: can't set config #0, error -71 [ 102.468122][ T4276] usb 5-1: USB disconnect, device number 2 [ 102.708302][ T4462] tipc: Started in network mode [ 102.749930][ T4462] tipc: Node identity ac14140f, cluster identity 4711 [ 102.831570][ T4462] tipc: New replicast peer: 255.255.255.255 [ 102.861863][ T4462] tipc: Enabled bearer , priority 10 [ 102.970483][ T4466] fuse: Unknown parameter 'ÿ0000000000000000003900000000000000000003' [ 103.241963][ T4483] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 103.252139][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 103.338636][ T4472] syz.4.50 (4472) used greatest stack depth: 17104 bytes left [ 103.898561][ T21] tipc: Node number set to 2886997007 [ 104.701033][ T4518] fuse: Unknown parameter 'ÿ0000000000000000004600000000000000000003' [ 105.004341][ T4508] raw_sendmsg: syz.3.61 forgot to set AF_INET. Fix it! [ 105.209510][ T4535] device syzkaller0 entered promiscuous mode [ 105.415731][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 106.074822][ T4586] fuse: Unknown parameter 'ÿ0000000000000000004300000000000000000003' [ 107.605702][ T4623] device syzkaller0 entered promiscuous mode [ 107.686882][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a36000: rx timeout, send abort [ 108.187324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a34800: rx timeout, send abort [ 108.196198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a36000: abort rx timeout. Force session deactivation [ 108.657728][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a43800: rx timeout, send abort [ 108.710050][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 108.740547][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061a43800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.757437][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a34800: abort rx timeout. Force session deactivation [ 109.232707][ T4647] fuse: Unknown parameter 'ÿ0000000000000000005500000000000000000003' [ 109.430127][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 109.538987][ T4660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 109.687868][ T4665] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 110.957913][ T4679] Bluetooth: hci0: unsupported parameter 5135 [ 111.032974][ T4679] Bluetooth: hci0: unsupported parameter 8192 [ 111.039250][ T4679] Bluetooth: hci0: unsupported parameter 5135 [ 111.100111][ T4679] Bluetooth: hci0: unsupported parameter 8192 [ 111.194410][ C0] Unknown status report in ack skb [ 111.597691][ T4697] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 112.830201][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.053465][ T4731] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 113.153770][ T1108] usb 1-1: Dual-Role OTG device on HNP port [ 113.195000][ T1108] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 113.214689][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.492784][ T4739] fuse: Unknown parameter 'ÿ0000000000000000008800000000000000000003' [ 113.505964][ T1108] gspca_main: spca501-2.14.0 probing 0000:0000 [ 113.550084][ T1108] gspca_spca501: reg write: error -32 [ 113.555811][ T1108] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 113.606580][ T1108] spca501: probe of 1-1:1.0 failed with error -22 [ 114.858147][ T4764] device bond_slave_0 entered promiscuous mode [ 114.864829][ T4764] device bond_slave_1 entered promiscuous mode [ 114.894027][ T4768] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 115.005600][ T4764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.040745][ T4764] device bond_slave_0 left promiscuous mode [ 115.047128][ T4764] device bond_slave_1 left promiscuous mode [ 115.533850][ T4781] fuse: Unknown parameter 'ÿÿ0000000000000000006200000000000000000003' [ 115.600259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 115.620054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.630104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.640368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.660084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.670044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.681078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.690289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.700052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 115.734139][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d5efc00: rx timeout, send abort [ 116.110296][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d5ec400: rx timeout, send abort [ 116.242554][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d5efc00: abort rx timeout. Force session deactivation [ 116.609229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f35d000: rx timeout, send abort [ 116.618234][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f35d000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.916735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d5ec400: abort rx timeout. Force session deactivation [ 117.329710][ T4808] jffs2: notice: (4808) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.330414][ T4808] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 118.441182][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 118.768495][ T4827] device syzkaller0 entered promiscuous mode [ 118.851207][ T4832] fuse: Unknown parameter 'ÿÿ0000000000000000009600000000000000000003' [ 120.293720][ T4866] jffs2: notice: (4866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.283217][ T4878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.171'. [ 121.295008][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 121.706392][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 121.806691][ T4889] fuse: Unknown parameter 'ÿÿ0000000000000000008600000000000000000003' [ 121.836752][ T4896] device syzkaller0 entered promiscuous mode [ 121.848602][ T4896] netlink: 60 bytes leftover after parsing attributes in process `syz.3.177'. [ 121.859268][ T4896] unsupported nlmsg_type 40 [ 121.927074][ T4896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.178459][ T4916] jffs2: notice: (4916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.700264][ T4954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 125.697391][ T4974] Bluetooth: hci0: unsupported parameter 5135 [ 125.807978][ T4974] Bluetooth: hci0: unsupported parameter 8192 [ 125.877441][ T4974] Bluetooth: hci0: unsupported parameter 5135 [ 125.937043][ T4974] Bluetooth: hci0: unsupported parameter 8192 [ 126.080208][ T4981] jffs2: notice: (4981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.867702][ T5001] netlink: 120 bytes leftover after parsing attributes in process `syz.3.210'. [ 126.977607][ T5001] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 127.420763][ T5018] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 127.826669][ T5030] netlink: 84 bytes leftover after parsing attributes in process `syz.0.220'. [ 127.906160][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 128.911731][ T5045] jffs2: notice: (5045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.953759][ T5045] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 132.126981][ T5094] jffs2: notice: (5094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.219958][ T5137] netlink: 136 bytes leftover after parsing attributes in process `syz.2.244'. [ 134.287650][ T5137] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 134.947653][ T5157] jffs2: notice: (5157) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.692702][ T5177] device syzkaller0 entered promiscuous mode [ 137.787936][ T5187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.258'. [ 138.234478][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.240964][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.363234][ T5207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.408149][ T5209] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 141.500068][ C0] Unknown status report in ack skb [ 143.046450][ T5280] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.681307][ T5311] fuse: Unknown parameter 'ÿÿ0000000000000000016600000000000000000003' [ 147.224512][ T5318] jffs2: notice: (5318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.733874][ T5333] xt_CT: No such helper "pptp" [ 150.973295][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.982601][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.060626][ T5345] device bridge_slave_1 left promiscuous mode [ 151.097202][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.388308][ T5345] device bridge_slave_0 left promiscuous mode [ 152.395638][ T5365] fuse: Unknown parameter 'ÿÿ0000000000000000018800000000000000000003' [ 152.420527][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.956769][ T5389] device syzkaller0 entered promiscuous mode [ 153.105376][ T5393] Bluetooth: hci0: unsupported parameter 5135 [ 153.179255][ T5393] Bluetooth: hci0: unsupported parameter 8192 [ 153.223482][ T5393] Bluetooth: hci0: unsupported parameter 5135 [ 153.334071][ T5393] Bluetooth: hci0: unsupported parameter 8192 [ 154.489217][ T5415] Bluetooth: hci0: unsupported parameter 5135 [ 154.520199][ T5415] Bluetooth: hci0: unsupported parameter 8192 [ 154.526373][ T5415] Bluetooth: hci0: unsupported parameter 5135 [ 155.377034][ T5415] Bluetooth: hci0: unsupported parameter 8192 [ 155.519987][ C0] sched: RT throttling activated [ 155.546275][ T5423] device vlan2 entered promiscuous mode [ 155.571167][ T5423] device bridge0 entered promiscuous mode [ 155.778149][ T5427] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.019119][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.027290][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.044567][ T5430] fuse: Unknown parameter 'ÿÿ0000000000000000019500000000000000000003' [ 156.097181][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 156.246397][ T5433] device bridge_slave_1 left promiscuous mode [ 156.257766][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.298875][ T5433] device bridge_slave_0 left promiscuous mode [ 156.323695][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.561802][ T5469] Bluetooth: hci0: unsupported parameter 5135 [ 157.568747][ T5469] Bluetooth: hci0: unsupported parameter 8192 [ 157.575305][ T5469] Bluetooth: hci0: unsupported parameter 5135 [ 157.582069][ T5469] Bluetooth: hci0: unsupported parameter 8192 [ 159.064202][ T5486] fuse: Unknown parameter 'ÿ0000000000000000018000000000000000000003' [ 162.106388][ T5505] device syzkaller0 entered promiscuous mode [ 163.246569][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 164.472660][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 164.856860][ T5559] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.866282][ T5559] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.875159][ T5559] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.883960][ T5559] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.353580][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 165.435209][ T5574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.362'. [ 165.517129][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 165.600806][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.362'. [ 165.656736][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.362'. [ 165.759887][ T5581] device syzkaller0 entered promiscuous mode [ 165.980825][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 166.594815][ T5607] jffs2: notice: (5607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.788795][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 168.226783][ T5619] device syzkaller0 entered promiscuous mode [ 168.395512][ T5627] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 168.571654][ T5640] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 169.772580][ T5653] device syzkaller0 entered promiscuous mode [ 171.617773][ T5668] device syzkaller0 entered promiscuous mode [ 172.887185][ T5683] device syzkaller0 entered promiscuous mode [ 172.952715][ T5702] device syzkaller0 entered promiscuous mode [ 172.992036][ T5699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 173.254020][ T5715] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 173.263025][ T5715] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 174.540369][ T5733] device syzkaller0 entered promiscuous mode [ 174.846684][ T5745] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 176.048697][ T5765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.411'. [ 176.983697][ T5791] device syzkaller0 entered promiscuous mode [ 178.425408][ T5830] fuse: Unknown parameter 'ÿ0000000000000000024800000000000000000003' [ 178.926933][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 179.014293][ T5853] device netdevsim0 entered promiscuous mode [ 179.287909][ T5862] device syzkaller0 entered promiscuous mode [ 179.481347][ T5866] jffs2: notice: (5866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.810218][ T5779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.449597][ T26] audit: type=1800 audit(1787230540.269:2): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.438" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 180.792844][ T5879] device syzkaller0 entered promiscuous mode [ 180.813036][ T5877] device syzkaller0 entered promiscuous mode [ 180.822552][ T5879] netlink: 60 bytes leftover after parsing attributes in process `syz.2.441'. [ 180.855346][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.872575][ T5877] tipc: Started in network mode [ 180.900055][ T5877] tipc: Node identity 929a399c3ebe, cluster identity 4711 [ 180.918522][ T5877] tipc: Enabled bearer , priority 0 [ 181.024828][ T5875] tipc: Resetting bearer [ 181.095093][ T5875] tipc: Disabling bearer [ 181.324100][ T5894] netlink: 277 bytes leftover after parsing attributes in process `syz.3.447'. [ 181.406282][ T5894] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 181.437924][ T5894] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 181.558540][ T5880] fuse: Unknown parameter 'ÿ0000000000000000025100000000000000000003' [ 181.622055][ T5904] jffs2: notice: (5904) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.282413][ T5927] device syzkaller0 entered promiscuous mode [ 182.313892][ T5927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.457'. [ 182.327611][ T5932] tipc: Enabling of bearer rejected, failed to enable media [ 182.389168][ T5928] device syzkaller0 entered promiscuous mode [ 182.632314][ T5945] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 183.661278][ T5955] netlink: 'syz.4.467': attribute type 7 has an invalid length. [ 183.669856][ T5955] netlink: 'syz.4.467': attribute type 8 has an invalid length. [ 184.050193][ T5969] jffs2: notice: (5969) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.157122][ T5977] tipc: Enabling of bearer rejected, failed to enable media [ 184.441047][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 184.542506][ T5992] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 184.578163][ T5992] device ip6gre1 entered promiscuous mode [ 184.603792][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.623637][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.720288][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.819999][ T6001] fuse: Unknown parameter 'ÿ0000000000000000025800000000000000000003' [ 184.888817][ T6004] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 185.030891][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.591192][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 185.670650][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.202088][ T6035] jffs2: notice: (6035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.519328][ T6045] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 186.533793][ T6045] device ip6gre2 entered promiscuous mode [ 186.559517][ T4241] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.567889][ T4241] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.583124][ T21] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.666837][ T4241] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.691705][ T4241] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.874116][ T6052] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 187.293559][ T6054] device syzkaller0 entered promiscuous mode [ 187.911539][ T6061] jffs2: notice: (6061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.791533][ T6014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.792930][ T6084] device syzkaller0 entered promiscuous mode [ 190.196715][ T6095] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 190.579780][ T6102] jffs2: notice: (6102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.767595][ T6105] device syzkaller0 entered promiscuous mode [ 190.870108][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 190.870127][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 191.027686][ T6108] tipc: Started in network mode [ 191.131184][ T6108] tipc: Node identity 7ee5fcce28ca, cluster identity 4711 [ 191.244891][ T6108] tipc: Enabled bearer , priority 0 [ 191.484833][ T6104] tipc: Resetting bearer [ 191.654916][ T6104] tipc: Disabling bearer [ 191.678714][ T26] audit: type=1800 audit(1787230551.499:3): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.510" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 191.986413][ T6130] device syzkaller0 entered promiscuous mode [ 192.792571][ T6142] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 192.824988][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 193.478594][ T6143] IPVS: Error joining to the multicast group [ 193.698429][ T6150] jffs2: notice: (6150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.789712][ T26] audit: type=1800 audit(1787230554.609:4): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.528" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 195.111757][ T6184] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 196.759289][ T6193] device syzkaller0 entered promiscuous mode [ 196.968031][ T4316] Bluetooth: hci0: command 0x0401 tx timeout [ 197.074158][ T6206] jffs2: notice: (6206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.110137][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.365927][ T6216] device syzkaller0 entered promiscuous mode [ 197.571089][ T6216] tipc: Enabled bearer , priority 0 [ 198.158601][ T6215] tipc: Resetting bearer [ 198.277482][ T6215] tipc: Disabling bearer [ 198.558838][ T6245] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 198.668902][ T6244] device syzkaller0 entered promiscuous mode [ 199.672889][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 199.685304][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.843312][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.343327][ T6265] jffs2: notice: (6265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.404418][ T6252] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.877705][ T6252] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.633070][ T6252] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.929225][ T6252] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.150229][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 202.163174][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 202.267992][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 202.359342][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 202.457133][ T6290] netlink: 'syz.2.572': attribute type 6 has an invalid length. [ 202.770729][ T6297] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 202.952882][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'. [ 203.083348][ T6296] device syzkaller0 entered promiscuous mode [ 203.788395][ T6252] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.912376][ T6252] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.938083][ T6252] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.956536][ T6306] jffs2: notice: (6306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 203.989245][ T6252] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.403625][ T6321] tipc: Enabled bearer , priority 0 [ 204.494048][ T6321] device syzkaller0 entered promiscuous mode [ 204.531192][ T6326] device syzkaller0 entered promiscuous mode [ 204.558944][ T6319] tipc: Resetting bearer [ 204.638989][ T6319] tipc: Disabling bearer [ 206.555535][ T6363] jffs2: notice: (6363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.804570][ T6371] device syzkaller0 entered promiscuous mode [ 206.813864][ T6371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.593'. [ 209.331202][ T6419] device syzkaller0 entered promiscuous mode [ 210.177783][ T6431] jffs2: notice: (6431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.480581][ T6438] device syzkaller0 entered promiscuous mode [ 210.571044][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'. [ 211.400316][ T6454] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 212.297443][ T6485] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 212.480092][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.352593][ T6489] jffs2: notice: (6489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.936644][ T6528] device syzkaller0 entered promiscuous mode [ 216.342980][ T6546] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 216.950164][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.576633][ T6555] jffs2: notice: (6555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.516193][ T6584] tipc: Enabled bearer , priority 0 [ 220.641258][ T6583] tipc: Disabling bearer [ 221.249156][ T6606] device syzkaller0 entered promiscuous mode [ 221.446336][ T6609] fuse: Unknown parameter 'ÿ0000000000000000035800000000000000000003' [ 221.643347][ T6622] jffs2: notice: (6622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.339077][ T6644] tipc: Started in network mode [ 223.382654][ T6644] tipc: Node identity 4ae361825355, cluster identity 4711 [ 223.400158][ T6644] tipc: Enabled bearer , priority 0 [ 223.446136][ T6641] tipc: Disabling bearer [ 223.861923][ T6661] fuse: Unknown parameter 'ÿ0000000000000000036700000000000000000003' [ 224.040928][ T6675] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 224.043407][ T6655] device syzkaller0 entered promiscuous mode [ 224.837811][ T6690] jffs2: notice: (6690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 227.440449][ T6723] device syzkaller0 entered promiscuous mode [ 229.757648][ T6756] jffs2: notice: (6756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.619150][ T6780] fuse: Unknown parameter 'ÿ0000000000000000042000000000000000000003' [ 232.975568][ T6792] device syzkaller0 entered promiscuous mode [ 235.078606][ T6840] fuse: Unknown parameter 'ÿ0000000000000000039900000000000000000003' [ 235.212617][ T6849] device syzkaller0 entered promiscuous mode [ 235.247689][ T6849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.684571][ T6860] device syzkaller0 entered promiscuous mode [ 238.344916][ T6900] fuse: Unknown parameter 'ÿ0000000000000000044000000000000000000003' [ 238.378650][ T6906] netlink: 104 bytes leftover after parsing attributes in process `syz.0.735'. [ 238.735295][ T6912] device syzkaller0 entered promiscuous mode [ 238.793041][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.945685][ T6919] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 240.106186][ T6923] device syzkaller0 entered promiscuous mode [ 242.723430][ T6962] fuse: Unknown parameter 'ÿ0000000000000000046200000000000000000003' [ 243.181303][ T6976] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 244.470210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.834341][ T6987] crypto_alloc_aead failed rc=-4 [ 246.692317][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 246.785377][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 246.983202][ T7055] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 250.297987][ T7110] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 251.510247][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 255.924083][ T7176] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 258.866245][ T7215] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 259.911201][ T7225] fuse: Unknown parameter 'ÿ0000000000000000045500000000000000000003' [ 260.503495][ T7246] device syzkaller0 entered promiscuous mode [ 260.591740][ C1] Unknown status report in ack skb [ 260.725277][ T7255] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 260.879178][ T7260] device syzkaller0 entered promiscuous mode [ 261.112167][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.118555][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.255941][ T7275] tipc: Enabled bearer , priority 0 [ 262.283237][ T7285] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 263.346835][ T7273] tipc: Disabling bearer [ 263.598485][ T4249] tipc: Node number set to 2888055196 [ 264.493057][ T7300] Unknown status report in ack skb [ 265.009242][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.833'. [ 265.806968][ T7343] tipc: Enabled bearer , priority 0 [ 266.075945][ T7347] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 266.094180][ T7341] tipc: Disabling bearer [ 267.032826][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 267.102826][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 267.138495][ T7361] batman_adv: batadv0: Adding interface: gretap1 [ 267.164135][ T7361] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.270180][ T7361] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 267.385726][ T7363] netlink: 72 bytes leftover after parsing attributes in process `syz.2.847'. [ 267.766216][ T7376] fuse: Unknown parameter 'ÿ0000000000000000051400000000000000000003' [ 267.789759][ T7379] device syzkaller1 entered promiscuous mode [ 268.798400][ T7411] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 271.032342][ T7436] fuse: Unknown parameter 'ÿ0000000000000000052300000000000000000003' [ 272.138361][ T7481] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 273.870842][ T7516] syzkaller0: tun_net_xmit 1500 [ 273.957689][ T7516] syzkaller0: tun_chr_ioctl cmd 62724 [ 274.788417][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 275.816849][ T7584] device syzkaller0 entered promiscuous mode [ 277.836787][ T7636] device syzkaller0 entered promiscuous mode [ 278.086972][ T7647] device geneve0 entered promiscuous mode [ 278.323082][ C1] Unknown status report in ack skb [ 279.352392][ T7687] device syzkaller0 entered promiscuous mode [ 279.727845][ T7687] tipc: Started in network mode [ 279.920635][ T7687] tipc: Node identity ee051b74ff15, cluster identity 4711 [ 279.928186][ T7687] tipc: Enabled bearer , priority 0 [ 280.058207][ T7685] tipc: Resetting bearer [ 280.189841][ T7685] tipc: Disabling bearer [ 280.377954][ T7701] device syzkaller0 entered promiscuous mode [ 281.217742][ T7720] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 282.991094][ T7742] Bluetooth: hci0: unsupported parameter 5135 [ 282.997300][ T7742] Bluetooth: hci0: unsupported parameter 8192 [ 283.090370][ T7742] Bluetooth: hci0: unsupported parameter 5135 [ 283.156836][ T7742] Bluetooth: hci0: unsupported parameter 8192 [ 283.507714][ T7758] device syzkaller0 entered promiscuous mode [ 283.694490][ T7763] fuse: Unknown parameter 'ÿ0000000000000000052500000000000000000003' [ 284.316762][ T7778] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 284.603035][ T7791] No source specified [ 285.938245][ T7810] fuse: Unknown parameter 'ÿ0000000000000000059400000000000000000003' [ 286.383402][ T7818] device syzkaller0 entered promiscuous mode [ 286.674300][ T7830] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 287.107600][ T7841] No source specified [ 288.935936][ T7861] device syzkaller0 entered promiscuous mode [ 289.127405][ T7879] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 291.361882][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 291.660533][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 292.108425][ T7957] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 292.230510][ T7961] device syzkaller0 entered promiscuous mode [ 293.726967][ T7977] device syzkaller0 entered promiscuous mode [ 295.282004][ T8013] device syzkaller0 entered promiscuous mode [ 296.876253][ T8038] device syzkaller0 entered promiscuous mode [ 297.869095][ T8077] netlink: 'syz.4.1028': attribute type 3 has an invalid length. [ 297.930472][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 299.575569][ T8112] device syzkaller0 entered promiscuous mode [ 301.868738][ T8178] device syzkaller0 entered promiscuous mode [ 303.015933][ T8227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 303.828807][ T8245] Bluetooth: hci0: unsupported parameter 5135 [ 303.859027][ T8245] Bluetooth: hci0: unsupported parameter 8192 [ 303.910195][ T8245] Bluetooth: hci0: unsupported parameter 5135 [ 303.916634][ T8245] Bluetooth: hci0: unsupported parameter 8192 [ 304.612556][ T8259] device syzkaller0 entered promiscuous mode [ 304.632536][ T8259] tipc: Enabled bearer , priority 0 [ 304.819886][ T8258] tipc: Resetting bearer [ 305.639708][ T8258] tipc: Disabling bearer [ 306.578153][ T8282] device syzkaller0 entered promiscuous mode [ 308.870015][ T7372] Bluetooth: hci0: command 0x0401 tx timeout [ 310.979546][ T8367] device syzkaller0 entered promiscuous mode [ 312.313001][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.426479][ T8406] jffs2: notice: (8406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 317.368805][ T8477] jffs2: notice: (8477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.396839][ T8477] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 321.153754][ T8564] jffs2: notice: (8564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 322.550081][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.570636][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.577021][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.284322][ T8638] jffs2: notice: (8638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.317239][ T8704] jffs2: notice: (8704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.581352][ T8706] fuse: Unknown parameter 'ÿ0000000000000000070500000000000000000003' [ 331.023624][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1173'. [ 332.113852][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 332.482758][ T8770] fuse: Unknown parameter 'ÿ0000000000000000074700000000000000000003' [ 334.504485][ T8790] jffs2: notice: (8790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 335.435290][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 336.724727][ T8841] tipc: Enabled bearer , priority 0 [ 336.809715][ T8839] fuse: Unknown parameter 'ÿ0000000000000000076300000000000000000003' [ 336.858172][ T8841] device syzkaller0 entered promiscuous mode [ 337.229442][ T8840] tipc: Resetting bearer [ 337.292824][ T8840] tipc: Disabling bearer [ 338.638241][ T8861] jffs2: notice: (8861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.449497][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1201'. [ 339.599742][ T8878] device syzkaller0 entered promiscuous mode [ 339.647957][ T8878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.305380][ T8894] fuse: Unknown parameter 'ÿ0000000000000000077600000000000000000003' [ 342.214727][ T8919] fuse: Unknown parameter 'ÿ0000000000000000077900000000000000000003' [ 343.593056][ T8941] jffs2: notice: (8941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.509231][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 344.595779][ T8961] device syzkaller0 entered promiscuous mode [ 344.629631][ T8961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.016709][ T8965] fuse: Unknown parameter 'ÿ0000000000000000069300000000000000000003' [ 346.308653][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 347.237632][ T8999] jffs2: notice: (8999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.453236][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1232'. [ 348.247174][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'. [ 348.812978][ T9041] fuse: Unknown parameter 'ÿ000000000000000008010000000000000000000300000000000000000000' [ 352.432195][ T9072] device syzkaller0 entered promiscuous mode [ 352.462804][ T9074] device syzkaller0 entered promiscuous mode [ 352.539010][ T9074] tipc: Enabled bearer , priority 0 [ 352.563252][ T9073] tipc: Resetting bearer [ 352.623911][ T9073] tipc: Disabling bearer [ 354.566988][ T9112] device syzkaller0 entered promiscuous mode [ 354.584990][ T9112] tipc: Enabled bearer , priority 0 [ 354.632213][ T9111] tipc: Resetting bearer [ 354.741496][ T9111] tipc: Disabling bearer [ 355.415438][ T9121] device syzkaller0 entered promiscuous mode [ 355.640311][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1264'. [ 358.543856][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 359.046766][ T9221] fuse: Unknown parameter 'ÿ0000000000000000079800000000000000000003' [ 359.430974][ T4200] Bluetooth: hci4: link tx timeout [ 359.436748][ T4200] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.371344][ T9240] device syzkaller0 entered promiscuous mode [ 360.561707][ T9240] tipc: Enabled bearer , priority 0 [ 360.634389][ T9238] tipc: Resetting bearer [ 360.691295][ T9238] tipc: Disabling bearer [ 360.773074][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 360.813223][ T9261] device syzkaller0 entered promiscuous mode [ 361.641040][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 361.657701][ T9278] fuse: Unknown parameter 'ÿ0000000000000000083900000000000000000003' [ 361.703795][ T9286] jffs2: notice: (9286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.422122][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1302'. [ 362.498574][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 362.591837][ T9320] device syzkaller0 entered promiscuous mode [ 362.921706][ T9335] device syzkaller0 entered promiscuous mode [ 363.723429][ T4240] syzkaller0: tun_net_xmit 76 [ 363.729118][ T4240] syzkaller0: tun_net_xmit 48 [ 363.745947][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1316'. [ 363.758134][ T7371] syzkaller0: tun_net_xmit 76 [ 364.043279][ T9374] device syzkaller0 entered promiscuous mode [ 364.427289][ T9394] jffs2: notice: (9394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 364.802644][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 365.098020][ T4276] syzkaller0: tun_net_xmit 76 [ 365.103635][ T4276] syzkaller0: tun_net_xmit 48 [ 365.125094][ T4294] syzkaller0: tun_net_xmit 76 [ 365.149756][ T9422] device syzkaller0 entered promiscuous mode [ 365.230144][ T4276] syzkaller0: tun_net_xmit 76 [ 365.421447][ T4276] syzkaller0: tun_net_xmit 76 [ 365.855732][ T9432] tipc: Enabling of bearer rejected, failed to enable media [ 365.944238][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 366.688687][ T9469] syzkaller0: tun_chr_ioctl cmd 62724 [ 366.704084][ T4276] syzkaller0: tun_net_xmit 76 [ 366.709217][ T4276] syzkaller0: tun_net_xmit 48 [ 366.725222][ T9467] device syzkaller0 entered promiscuous mode [ 366.732326][ T4243] syzkaller0: tun_net_xmit 76 [ 367.075858][ T9473] Illegal XDP return value 4294967274, expect packet loss! [ 367.934916][ T4243] syzkaller0: tun_net_xmit 76 [ 367.940417][ T4243] syzkaller0: tun_net_xmit 48 [ 367.947858][ T9508] syzkaller0: tun_chr_ioctl cmd 62724 [ 367.960146][ T4243] syzkaller0: tun_net_xmit 76 [ 368.048640][ T9504] device syzkaller0 entered promiscuous mode [ 369.240191][ T4243] syzkaller0: tun_net_xmit 76 [ 369.245136][ T4243] syzkaller0: tun_net_xmit 48 [ 369.260227][ T9553] syzkaller0: tun_chr_ioctl cmd 62724 [ 369.270533][ T4294] syzkaller0: tun_net_xmit 76 [ 369.371446][ T9549] device syzkaller0 entered promiscuous mode [ 369.873126][ T9571] device syzkaller0 entered promiscuous mode [ 370.222032][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 370.593844][ T9592] device syzkaller0 entered promiscuous mode [ 370.733463][ T9599] syzkaller0: tun_chr_ioctl cmd 62724 [ 370.743279][ T4276] syzkaller0: tun_net_xmit 76 [ 370.748211][ T4276] syzkaller0: tun_net_xmit 48 [ 370.770449][ T4243] syzkaller0: tun_net_xmit 76 [ 370.905269][ T9602] device syzkaller0 entered promiscuous mode [ 372.555420][ T9642] device syzkaller0 entered promiscuous mode [ 372.644794][ T9652] device syzkaller0 entered promiscuous mode [ 373.083184][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1404'. [ 374.469194][ T9691] device syzkaller0 entered promiscuous mode [ 374.896593][ T9725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 376.385552][ T9758] syzkaller0: tun_chr_ioctl cmd 62724 [ 376.449736][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 376.848574][ T9777] jffs2: notice: (9777) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 376.878145][ T9770] device syzkaller0 entered promiscuous mode [ 376.897970][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.901383][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 376.908048][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.925190][ T9732] device bridge_slave_0 entered promiscuous mode [ 376.934432][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.941769][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.950771][ T9732] device bridge_slave_1 entered promiscuous mode [ 377.336749][ T4240] Bluetooth: hci5: command 0x0409 tx timeout [ 377.934313][ T26] audit: type=1800 audit(1787230737.759:5): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1433" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 377.942857][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.966966][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.037944][ T9732] team0: Port device team_slave_0 added [ 378.070891][ T9732] team0: Port device team_slave_1 added [ 378.159038][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.173337][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.225427][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.110132][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.130013][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.250687][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.264961][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 379.325559][ T9805] syzkaller0: tun_chr_ioctl cmd 62724 [ 379.380291][ T9732] device hsr_slave_0 entered promiscuous mode [ 379.398659][ T9732] device hsr_slave_1 entered promiscuous mode [ 379.413701][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.429129][ T9732] Cannot create hsr debugfs directory [ 379.595924][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1442'. [ 379.798362][ T9823] jffs2: notice: (9823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 379.840040][ T4249] Bluetooth: hci5: command 0x041b tx timeout [ 380.955166][ T9821] device syzkaller0 entered promiscuous mode [ 381.836018][ T9732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.862144][ T9732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.147076][ T9732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.524609][ T9732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.822512][ T4249] Bluetooth: hci5: command 0x040f tx timeout [ 382.927226][ T9857] device syzkaller0 entered promiscuous mode [ 382.990798][ T9855] device syzkaller0 entered promiscuous mode [ 383.012528][ T9855] tipc: Enabled bearer , priority 0 [ 383.052711][ T9853] tipc: Resetting bearer [ 383.139672][ T9853] tipc: Disabling bearer [ 383.297526][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1455'. [ 383.372312][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.055610][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.090066][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.330533][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.408116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.416984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.481243][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.504377][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.519739][ T9878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 384.550955][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.558306][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.600496][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.741453][ T9887] fuse: Unknown parameter 'ÿ0000000000000000092400000000000000000003' [ 384.880268][ T2289] Bluetooth: hci5: command 0x0419 tx timeout [ 384.912531][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.928766][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.938232][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.945480][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.956113][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.967875][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.978254][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.988667][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.046655][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.161454][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.171252][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.232615][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.274518][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.304173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.336700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.371163][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.929012][ T9930] device syzkaller0 entered promiscuous mode [ 386.972648][ T9930] tipc: Enabled bearer , priority 0 [ 386.991272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.060517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.088975][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1468'. [ 387.100263][ T9929] tipc: Resetting bearer [ 387.128873][ T9929] tipc: Disabling bearer [ 387.168592][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.822077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.843157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.895621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.911929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.945756][ T9732] device veth0_vlan entered promiscuous mode [ 387.961677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.979196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.995537][ T9732] device veth1_vlan entered promiscuous mode [ 388.087650][ T9732] device veth0_macvtap entered promiscuous mode [ 388.161951][ T9732] device veth1_macvtap entered promiscuous mode [ 388.194195][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.214569][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.232217][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.250448][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.267973][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.286925][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.297605][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.343238][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.363913][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.443274][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.499619][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.579218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 388.596419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 388.609567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.624759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.644465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.660210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.669438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.698929][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.719794][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.766679][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.781914][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.792932][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.803943][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.814376][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.826184][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.845169][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.858929][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.876591][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.917719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.929645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.983223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.015821][ T9732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.034418][ T9732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.050219][ T9732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.292728][ T9732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.156788][ T9991] device syzkaller0 entered promiscuous mode [ 390.394948][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.413137][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.526264][ T4608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.537462][ T4608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.581558][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.653420][ T4608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.706593][ T4608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.846949][ T4608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.860039][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.878893][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.887594][ T4608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.931969][T10006] device syzkaller0 entered promiscuous mode [ 390.954486][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.025314][ T4608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.091996][ T4608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.398814][T10019] device syzkaller1 entered promiscuous mode [ 392.909199][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 393.084828][T10039] device syzkaller0 entered promiscuous mode [ 393.200233][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1490'. [ 393.270583][ T4608] tipc: Left network mode [ 393.491123][T10060] netlink: 'syz.5.1492': attribute type 1 has an invalid length. [ 393.525526][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 394.013883][T10083] device syzkaller0 entered promiscuous mode [ 395.360552][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1501'. [ 395.376265][T10102] jffs2: notice: (10102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 396.556312][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 396.642118][T10116] device syzkaller0 entered promiscuous mode [ 398.135991][T10153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.345916][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1516'. [ 398.426627][T10167] device syzkaller0 entered promiscuous mode [ 398.502277][ T4608] device bond0 left promiscuous mode [ 398.518594][ T4608] device bond_slave_0 left promiscuous mode [ 398.554894][ T4608] device bond_slave_1 left promiscuous mode [ 398.588657][ T4608] device batadv0 left promiscuous mode [ 398.604294][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1519'. [ 398.626503][ T4608] device hsr_slave_0 left promiscuous mode [ 398.639776][ T4608] device hsr_slave_1 left promiscuous mode [ 398.670651][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.687200][ T4608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.725675][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.740177][ T4608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.758326][ T4608] device bridge_slave_1 left promiscuous mode [ 398.778038][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.800376][ T4608] device bridge_slave_0 left promiscuous mode [ 398.806740][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.847093][ T4608] device veth1_macvtap left promiscuous mode [ 398.864711][ T4608] device veth0_macvtap left promiscuous mode [ 398.871742][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1520'. [ 398.881019][ T4608] device veth1_vlan left promiscuous mode [ 398.881467][ T4608] device veth0_vlan left promiscuous mode [ 399.456902][ T4608] team0 (unregistering): Port device team_slave_1 removed [ 399.487566][ T4608] team0 (unregistering): Port device team_slave_0 removed [ 399.519593][ T4608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.537881][ T4608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.632457][ T4608] bond0 (unregistering): Released all slaves [ 400.907374][T10199] device syzkaller0 entered promiscuous mode [ 400.936164][T10198] device syzkaller0 entered promiscuous mode [ 400.963244][T10196] device syzkaller0 entered promiscuous mode [ 401.620497][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'. [ 401.658331][T10229] jffs2: notice: (10229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.801172][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1534'. [ 402.777583][ T26] audit: type=1800 audit(1787230762.599:6): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1533" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 402.834155][T10247] device syzkaller0 entered promiscuous mode [ 403.386909][T10263] device syzkaller0 entered promiscuous mode [ 404.076764][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 404.091569][T10282] device syzkaller0 entered promiscuous mode [ 404.257572][T10289] jffs2: notice: (10289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 404.731641][T10298] device syzkaller0 entered promiscuous mode [ 405.381832][T10304] tls_set_device_offload_rx: netdev not found [ 405.460233][ T26] audit: type=1800 audit(1787230765.279:7): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1550" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 405.939811][T10326] device syzkaller0 entered promiscuous mode [ 406.253197][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1562'. [ 406.357157][T10341] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 406.408260][T10341] tipc: Enabled bearer , priority 10 [ 406.530381][T10347] jffs2: notice: (10347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 407.725891][ T26] audit: type=1800 audit(1787230767.549:8): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1565" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 407.852613][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1573'. [ 407.953193][T10377] device syzkaller0 entered promiscuous mode [ 408.073532][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1575'. [ 408.320076][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 408.508918][T10404] jffs2: notice: (10404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 409.806897][T10422] device syzkaller0 entered promiscuous mode [ 409.946448][T10426] device syzkaller0 entered promiscuous mode [ 410.144748][T10441] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 410.351782][T10452] jffs2: notice: (10452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 411.673764][T10479] device syzkaller0 entered promiscuous mode [ 411.729511][T10485] device syzkaller0 entered promiscuous mode [ 412.036877][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 412.197231][T10508] jffs2: notice: (10508) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 413.401916][ T26] audit: type=1800 audit(1787230773.229:9): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1618" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 413.553979][T10536] device syzkaller0 entered promiscuous mode [ 414.480804][T10564] tipc: Enabled bearer , priority 0 [ 414.538099][T10563] tipc: Disabling bearer [ 414.837275][T10577] device syzkaller0 entered promiscuous mode [ 414.892652][T10586] netlink: 'syz.4.1642': attribute type 11 has an invalid length. [ 415.202433][T10600] device syzkaller0 entered promiscuous mode [ 415.321988][T10607] netlink: 'syz.1.1648': attribute type 4 has an invalid length. [ 415.449558][T10611] tipc: Enabled bearer , priority 0 [ 415.698291][T10623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.810369][T10628] device syzkaller0 entered promiscuous mode [ 415.937948][T10631] device syzkaller0 entered promiscuous mode [ 416.264481][T10647] jffs2: notice: (10647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 416.292223][T10648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1659'. [ 416.661536][ T7371] tipc: Node number set to 1445985486 [ 417.536292][T10667] tipc: Enabled bearer , priority 0 [ 417.575137][T10666] tipc: Disabling bearer [ 417.716948][T10680] ip_tables: iptables: counters copy to user failed while replacing table [ 417.747697][T10678] device geneve2 entered promiscuous mode [ 418.275494][T10700] device syzkaller0 left promiscuous mode [ 418.535605][T10713] jffs2: notice: (10713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 420.029437][T10737] tipc: Enabling of bearer rejected, failed to enable media [ 420.098880][T10734] device syzkaller0 entered promiscuous mode [ 421.612862][T10769] device syzkaller0 entered promiscuous mode [ 421.681793][T10774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.586330][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.594431][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.162266][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.203520][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.759287][T10780] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.768378][T10780] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.778251][T10780] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.788019][T10780] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.200302][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1703'. [ 426.449128][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1710'. [ 426.571049][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1713'. [ 426.621506][T10858] syzkaller0: tun_chr_ioctl cmd 62724 [ 426.627953][ T5319] syzkaller0: tun_net_xmit 76 [ 426.640807][ T5319] syzkaller0: tun_net_xmit 48 [ 426.660156][ T4249] syzkaller0: tun_net_xmit 76 [ 426.720131][ T5319] syzkaller0: tun_net_xmit 76 [ 426.979580][T10871] device syzkaller0 entered promiscuous mode [ 426.997946][T10871] tipc: Started in network mode [ 427.013303][T10871] tipc: Node identity ee341c159a36, cluster identity 4711 [ 427.039153][T10871] tipc: Enabled bearer , priority 0 [ 427.066533][T10869] tipc: Resetting bearer [ 427.160781][T10869] tipc: Disabling bearer [ 427.383362][T10890] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1721'. [ 427.598035][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 427.649707][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 427.797571][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1730'. [ 427.849424][T10917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1730'. [ 427.898817][T10919] syzkaller0: tun_net_xmit 1500 [ 427.926310][ T4276] syzkaller0: tun_net_xmit 76 [ 427.933389][ T4276] syzkaller0: tun_net_xmit 48 [ 427.980302][ T23] syzkaller0: tun_net_xmit 76 [ 427.988723][T10909] syzkaller0: tun_chr_ioctl cmd 62724 [ 428.289649][T10929] tipc: Enabling of bearer rejected, already enabled [ 428.336660][T10936] qfq: no options [ 428.836729][T10954] device syzkaller0 entered promiscuous mode [ 428.988249][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1743'. [ 429.033410][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1743'. [ 429.270727][T10968] device syzkaller0 left promiscuous mode [ 429.315329][T10966] device syzkaller0 entered promiscuous mode [ 429.611697][T10975] qfq: no options [ 429.968095][T10997] device syzkaller0 entered promiscuous mode [ 430.237882][T11016] __nla_validate_parse: 2 callbacks suppressed [ 430.237945][T11016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 430.573139][T11030] syzkaller0: tun_net_xmit 1500 [ 430.595776][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 430.616901][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 430.629438][T11029] netlink: 'syz.1.1763': attribute type 12 has an invalid length. [ 430.640168][T11029] netlink: 'syz.1.1763': attribute type 14 has an invalid length. [ 430.654747][ T4249] syzkaller0: tun_net_xmit 76 [ 430.663997][ T4249] syzkaller0: tun_net_xmit 48 [ 430.670369][T11030] syzkaller0: tun_chr_ioctl cmd 62724 [ 430.690247][ T5319] syzkaller0: tun_net_xmit 76 [ 430.929904][T11041] qfq: no options [ 431.138756][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1770'. [ 431.152592][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'. [ 431.173042][T11047] device syzkaller0 entered promiscuous mode [ 431.198995][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'. [ 431.218951][T11047] tipc: Enabled bearer , priority 0 [ 431.241032][T11045] tipc: Resetting bearer [ 431.375490][T11045] tipc: Disabling bearer [ 431.573331][T11059] device syzkaller0 entered promiscuous mode [ 431.802323][T11074] netem: change failed [ 432.133601][T11084] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 432.168937][T11086] device syzkaller0 entered promiscuous mode [ 432.195601][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 432.288717][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 432.476538][T11096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1785'. [ 432.583617][T11100] device syzkaller0 entered promiscuous mode [ 432.643350][T11100] tipc: Enabled bearer , priority 0 [ 432.689825][T11099] tipc: Resetting bearer [ 432.774277][T11099] tipc: Disabling bearer [ 432.871777][T11111] device syzkaller0 entered promiscuous mode [ 433.203870][T11126] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 433.247332][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1796'. [ 433.325693][T11129] device bond1 entered promiscuous mode [ 433.340840][T11129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.802953][T11145] device syzkaller0 entered promiscuous mode [ 433.863163][T11150] tipc: Enabled bearer , priority 0 [ 433.916697][T11144] tipc: Resetting bearer [ 434.041662][T11144] tipc: Disabling bearer [ 434.560999][T11182] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 434.897332][T11191] device syzkaller0 entered promiscuous mode [ 435.057430][T11193] netlink: 'syz.5.1816': attribute type 21 has an invalid length. [ 435.075314][T11193] netlink: 'syz.5.1816': attribute type 4 has an invalid length. [ 435.290666][T11211] __nla_validate_parse: 3 callbacks suppressed [ 435.290685][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 435.430953][T11210] device syzkaller0 entered promiscuous mode [ 435.598556][T11225] netlink: 'syz.5.1823': attribute type 3 has an invalid length. [ 435.646817][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1823'. [ 435.765251][T11224] netlink: 'syz.0.1822': attribute type 142 has an invalid length. [ 435.992746][T11236] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 436.171522][T11246] device syzkaller0 entered promiscuous mode [ 436.480260][ T4206] Bluetooth: hci5: link tx timeout [ 436.486740][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 436.830850][T11283] netlink: 'syz.4.1844': attribute type 1 has an invalid length. [ 436.851756][T11286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1846'. [ 437.062172][T11295] device syzkaller0 entered promiscuous mode [ 437.246865][T11305] jffs2: notice: (11305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 438.261976][T11323] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 438.760029][T11331] ip_tables: iptables: counters copy to user failed while replacing table [ 438.786906][ T26] audit: type=1800 audit(1787230798.609:10): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1855" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 438.810097][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 439.046995][T11345] device syzkaller0 entered promiscuous mode [ 439.337959][T11359] netlink: 'syz.4.1871': attribute type 21 has an invalid length. [ 439.386054][T11359] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1871'. [ 439.653492][T11359] netlink: 'syz.4.1871': attribute type 4 has an invalid length. [ 439.977743][T11359] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1871'. [ 440.362901][T11377] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 441.202477][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 441.535843][T11422] device syzkaller0 entered promiscuous mode [ 441.971708][T11429] device syzkaller0 left promiscuous mode [ 442.404975][T11438] ip_tables: iptables: counters copy to user failed while replacing table [ 442.496106][T11444] device syzkaller0 entered promiscuous mode [ 444.244764][T11473] jffs2: notice: (11473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 444.722830][T11494] device syzkaller0 entered promiscuous mode [ 445.420443][T11520] device syzkaller0 entered promiscuous mode [ 445.432783][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.439497][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.904183][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 446.032934][T11545] jffs2: notice: (11545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 447.503896][T11590] device syzkaller0 entered promiscuous mode [ 447.668091][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1939'. [ 447.852324][T11609] jffs2: notice: (11609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 449.201566][T11620] device syzkaller0 entered promiscuous mode [ 449.692243][T11635] device syzkaller0 entered promiscuous mode [ 449.927722][T11641] device syzkaller0 entered promiscuous mode [ 450.034084][T11656] syz.5.1955 sent an empty control message without MSG_MORE. [ 450.215754][T11667] jffs2: notice: (11667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 450.238285][T11656] device syzkaller1 entered promiscuous mode [ 451.342882][T11676] device syzkaller0 entered promiscuous mode [ 451.401285][T11679] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1960'. [ 451.440008][T11679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 451.837205][T11691] device syzkaller0 entered promiscuous mode [ 451.884137][T11694] device syzkaller0 entered promiscuous mode [ 452.251812][T11712] jffs2: notice: (11712) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 453.357281][T11717] device syzkaller0 entered promiscuous mode [ 453.441607][ T26] audit: type=1800 audit(1787230813.259:11): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1971" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 453.604361][T11733] device syzkaller0 entered promiscuous mode [ 453.873187][T11743] device syzkaller0 left promiscuous mode [ 453.953618][T11750] device syzkaller0 entered promiscuous mode [ 454.115543][T11757] device syzkaller0 entered promiscuous mode [ 454.325133][T11766] jffs2: notice: (11766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 454.533954][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 454.635271][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1988'. [ 455.333263][T11776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.342232][T11776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.351081][T11776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.359995][T11776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.368834][T11776] device geneve2 entered promiscuous mode [ 455.470129][ T26] audit: type=1800 audit(1787230815.289:12): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1986" name="fillfile" dev="jffs2" ino=2 res=0 errno=0 [ 455.590369][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 455.670051][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.721926][T11793] device syzkaller0 entered promiscuous mode [ 456.288733][T11814] device syzkaller0 entered promiscuous mode [ 456.943398][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 457.180293][T11847] device syzkaller0 entered promiscuous mode [ 457.611167][T11877] device syzkaller0 entered promiscuous mode [ 458.080099][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 458.808515][T11930] device syzkaller0 entered promiscuous mode [ 458.965227][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 459.510668][T11958] device syzkaller0 entered promiscuous mode [ 460.728700][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 460.861875][T11985] device syzkaller0 entered promiscuous mode [ 462.348941][T12017] device syzkaller0 entered promiscuous mode [ 462.391442][T12020] device syzkaller0 entered promiscuous mode [ 462.583295][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 462.901355][T12043] device syzkaller0 entered promiscuous mode [ 464.259403][T12067] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2072'. [ 464.453349][T12076] device syzkaller0 entered promiscuous mode [ 465.904222][T12112] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2085'. [ 466.367876][T12129] device syzkaller0 entered promiscuous mode [ 467.659163][T12165] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2098'. [ 467.704499][T12163] syzkaller0: tun_chr_ioctl cmd 62724 [ 467.713567][ T5222] syzkaller0: tun_net_xmit 76 [ 467.718628][ T5222] syzkaller0: tun_net_xmit 48 [ 467.744075][T12159] device syzkaller0 entered promiscuous mode [ 467.750485][ T23] syzkaller0: tun_net_xmit 76 [ 469.282121][T12188] device syzkaller0 entered promiscuous mode [ 469.415081][T12219] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2113'. [ 469.657684][T12230] device syzkaller0 entered promiscuous mode [ 469.799785][T12241] ipt_CLUSTERIP: Please specify destination IP [ 470.272216][T12261] device syzkaller0 entered promiscuous mode [ 470.459224][T12270] device syzkaller0 entered promiscuous mode [ 471.190677][T12294] device syzkaller0 entered promiscuous mode [ 471.634214][T12322] device syzkaller0 entered promiscuous mode [ 471.841576][T12336] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 472.840588][T12343] device syzkaller0 entered promiscuous mode [ 473.082134][T12360] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.204306][T12366] device syzkaller0 entered promiscuous mode [ 474.548159][T12393] device syzkaller0 entered promiscuous mode [ 474.575749][T12397] netlink: 2248 bytes leftover after parsing attributes in process `syz.1.2174'. [ 475.813338][T12420] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 475.902473][T12428] netlink: 'syz.2.2184': attribute type 3 has an invalid length. [ 475.975018][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 476.109921][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 476.312666][T12440] device syzkaller0 entered promiscuous mode [ 477.736780][T12471] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 478.704066][T12479] device syzkaller0 entered promiscuous mode [ 479.130632][T12494] device syzkaller0 entered promiscuous mode [ 479.275308][T12499] device syzkaller0 entered promiscuous mode [ 479.410993][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 479.430778][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 480.109254][T12533] device syzkaller0 entered promiscuous mode [ 480.233674][T12532] device syzkaller0 entered promiscuous mode [ 480.267644][T12545] team0: Device xfrm0 is of different type [ 481.175950][T12582] device syzkaller0 entered promiscuous mode [ 481.193707][T12584] device syzkaller0 entered promiscuous mode [ 481.936518][T12618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.263709][T12632] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 482.340750][T12632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.414119][T12637] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 482.427171][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 483.349991][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 483.590585][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2290'. [ 483.988732][T12709] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 484.149127][T12722] netlink: 'syz.5.2300': attribute type 1 has an invalid length. [ 484.219004][T12722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.317825][T12726] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 484.413174][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 485.010311][T12772] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 485.137097][T12772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.190670][T12775] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 485.225505][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 488.798005][T12895] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 489.054118][T12911] netlink: 'syz.2.2353': attribute type 11 has an invalid length. [ 489.113021][T12907] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 489.325011][T12924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2359'. [ 489.577193][T12940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input36 [ 489.847831][ T4200] Bluetooth: hci5: link tx timeout [ 489.853780][ T4200] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 489.862587][ T4200] Bluetooth: hci5: link tx timeout [ 489.867791][ T4200] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 489.906564][T12954] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 490.170184][T12969] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 490.197603][T12972] device syzkaller0 entered promiscuous mode [ 490.265115][T12972] tipc: Enabling of bearer rejected, failed to enable media [ 490.745185][T13004] syzkaller0: tun_chr_ioctl cmd 62724 [ 490.782812][ T4294] syzkaller0: tun_net_xmit 76 [ 490.788797][ T4294] syzkaller0: tun_net_xmit 48 [ 490.816309][ T23] syzkaller0: tun_net_xmit 76 [ 491.119065][T13021] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 491.487331][T13039] device syzkaller0 entered promiscuous mode [ 491.529241][T13039] tipc: Enabling of bearer rejected, failed to enable media [ 491.702990][T13047] device syzkaller0 left promiscuous mode [ 491.948084][ T7373] Bluetooth: hci5: command 0x0406 tx timeout [ 492.289743][T13069] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 492.469677][T13083] device syzkaller0 entered promiscuous mode [ 492.533495][T13088] tipc: Enabling of bearer rejected, failed to enable media [ 492.908655][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'. [ 493.605205][T13141] tipc: Enabling of bearer rejected, failed to enable media [ 493.757855][T13146] device syzkaller0 entered promiscuous mode [ 494.299433][T13173] netlink: 'syz.1.2433': attribute type 6 has an invalid length. [ 494.468723][T13173] tc action pedit 'at' offset 5 out of bounds [ 494.788083][T13193] device syzkaller0 entered promiscuous mode [ 494.967970][T13204] tipc: Enabling of bearer rejected, already enabled [ 495.600531][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 495.855419][T13250] IPv6: NLM_F_REPLACE set, but no existing node found! [ 496.982464][T13297] device macvlan0 entered promiscuous mode [ 497.011261][T13297] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 497.079254][T13297] netlink: 'syz.2.2469': attribute type 2 has an invalid length. [ 497.272955][T13297] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 497.330470][T13319] netlink: 'syz.1.2474': attribute type 13 has an invalid length. [ 497.856666][T13338] device syzkaller0 left promiscuous mode [ 498.220665][T13340] device syzkaller0 entered promiscuous mode [ 498.248831][T13347] device syzkaller0 entered promiscuous mode [ 498.388740][T13364] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 499.792404][T13396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2498'. [ 499.909773][T13404] tipc: Enabling of bearer rejected, failed to enable media [ 500.106171][T13414] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2506'. [ 500.139169][T13417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 501.325926][T13457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 501.523772][T13467] netlink: 'syz.4.2521': attribute type 6 has an invalid length. [ 501.576331][T13467] device syzkaller0 left promiscuous mode [ 501.633751][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 501.764147][T13481] device syzkaller0 entered promiscuous mode [ 502.030162][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 502.083121][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2533'. [ 502.131881][T13496] device syzkaller0 entered promiscuous mode [ 502.389581][T13517] netlink: 'syz.0.2537': attribute type 6 has an invalid length. [ 502.462569][T13517] tc action pedit 'at' offset 5 out of bounds [ 502.587546][T13519] device syzkaller0 entered promiscuous mode [ 502.658476][T13525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2539'. [ 503.326379][T13554] device syzkaller0 entered promiscuous mode [ 505.154709][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 505.300150][T13597] device syzkaller0 entered promiscuous mode [ 505.323103][T13599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2567'. [ 505.637246][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 505.777920][T13618] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2572'. [ 505.800150][T13618] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2572'. [ 505.841706][T13618] device syzkaller0 entered promiscuous mode [ 506.077160][T13633] device syzkaller0 entered promiscuous mode [ 506.482086][T13658] device syzkaller0 left promiscuous mode [ 506.739333][T13668] device syzkaller0 entered promiscuous mode [ 506.842793][T13677] device syzkaller0 entered promiscuous mode [ 506.872997][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.879553][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.056336][T13677] tipc: Enabling of bearer rejected, already enabled [ 508.539001][T13743] device syzkaller0 entered promiscuous mode [ 508.996439][T13774] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.306742][T13785] __nla_validate_parse: 2 callbacks suppressed [ 509.306763][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2620'. [ 510.025736][T13811] device syzkaller0 entered promiscuous mode [ 510.488567][T13827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'. [ 511.139569][T13851] device syzkaller0 entered promiscuous mode [ 511.630065][T13836] chnl_net:caif_netlink_parms(): no params data found [ 511.972695][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.013409][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.027724][T13836] device bridge_slave_0 entered promiscuous mode [ 512.074099][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.094748][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.130269][T13836] device bridge_slave_1 entered promiscuous mode [ 512.249043][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.291881][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.378427][T13836] team0: Port device team_slave_0 added [ 512.398263][T13836] team0: Port device team_slave_1 added [ 512.444289][T13891] device syzkaller0 entered promiscuous mode [ 512.455087][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.467860][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.500220][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.526868][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.536604][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.597883][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.871319][ T4249] Bluetooth: hci1: command 0x0409 tx timeout [ 514.163703][T13836] device hsr_slave_0 entered promiscuous mode [ 514.172232][T13836] device hsr_slave_1 entered promiscuous mode [ 514.181099][T13836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.200082][T13836] Cannot create hsr debugfs directory [ 514.683288][T13913] device syzkaller0 entered promiscuous mode [ 514.720579][ T4588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.883047][ T4588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.949934][ T4294] Bluetooth: hci1: command 0x041b tx timeout [ 515.053679][ T4588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.144205][T13941] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2665'. [ 515.163630][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2667'. [ 515.173264][T13941] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2665'. [ 515.191578][T13941] device syzkaller0 entered promiscuous mode [ 515.384628][ T4588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.236041][T13966] netlink: 'syz.2.2671': attribute type 6 has an invalid length. [ 516.537065][T13977] device syzkaller0 entered promiscuous mode [ 516.639433][ T4588] tipc: Disabling bearer [ 516.669698][ T4588] tipc: Left network mode [ 516.801112][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2678'. [ 516.965459][T13997] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 516.988682][T13997] device netdevsim0 left promiscuous mode [ 517.030356][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 517.056469][T13997] team0: Port device netdevsim0 added [ 517.127804][T14003] device syzkaller0 entered promiscuous mode [ 517.822533][T14022] device syzkaller0 entered promiscuous mode [ 517.868776][T14033] netlink: 'syz.2.2687': attribute type 6 has an invalid length. [ 519.110022][ T5222] Bluetooth: hci1: command 0x0419 tx timeout [ 519.218032][T13836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 519.251097][T13836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.296145][T13836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 519.360378][T13836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.513110][T14080] Cannot find set identified by id 0 to match [ 519.669278][ T4588] device hsr_slave_0 left promiscuous mode [ 519.688199][ T4588] device hsr_slave_1 left promiscuous mode [ 519.706019][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.718619][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.734384][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.748918][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.768645][ T4588] device veth1_macvtap left promiscuous mode [ 519.783451][ T4588] device veth0_macvtap left promiscuous mode [ 519.794186][ T4588] device veth1_vlan left promiscuous mode [ 519.805886][ T4588] device veth0_vlan left promiscuous mode [ 519.922164][ T4588] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 519.934385][ T4588] bond2 (unregistering): Released all slaves [ 519.953016][ T4588] bond1 (unregistering): Released all slaves [ 520.092423][ T4588] team0 (unregistering): Port device team_slave_1 removed [ 520.108438][ T4588] team0 (unregistering): Port device team_slave_0 removed [ 520.127806][ T4588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.138498][T14063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.236460][ T4588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.435284][ T4588] bond0 (unregistering): Released all slaves [ 520.712107][T14102] device syzkaller0 entered promiscuous mode [ 520.808564][T13836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.829580][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.838627][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.853178][T14106] device syzkaller0 entered promiscuous mode [ 520.875149][T13836] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.020187][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.029274][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.084371][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.091852][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.163893][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.076748][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.127937][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.154060][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.161308][ T4579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.216155][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.243774][T14135] ip_tables: iptables: counters copy to user failed while replacing table [ 522.260716][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.281431][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.299686][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.321621][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.342756][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.365369][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.437563][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.461143][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.504923][T14139] device syzkaller0 entered promiscuous mode [ 522.516423][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.532114][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.552203][T13836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.965368][T14156] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2723'. [ 524.068502][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.103506][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.136289][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.351038][T14176] device syzkaller0 entered promiscuous mode [ 524.530310][T14185] device syzkaller0 entered promiscuous mode [ 524.581030][T14183] tipc: Enabled bearer , priority 0 [ 524.673368][T14185] tipc: Resetting bearer [ 525.734068][T14182] tipc: Resetting bearer [ 526.220067][T14182] tipc: Disabling bearer [ 526.420351][ T5222] tipc: Node number set to 431382914 [ 526.886469][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.906030][T14215] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.915452][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.079539][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.098576][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.121386][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.150575][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.179609][T13836] device veth0_vlan entered promiscuous mode [ 527.229169][T13836] device veth1_vlan entered promiscuous mode [ 527.375932][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.394449][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.430320][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.471697][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.506169][T13836] device veth0_macvtap entered promiscuous mode [ 527.609036][T13836] device veth1_macvtap entered promiscuous mode [ 527.689299][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.736053][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.778814][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.834982][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.879636][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.926454][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.968979][T13836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.987416][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.003950][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.041157][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.077970][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.162431][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.198171][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.239981][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.273226][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.303987][T13836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.358182][T13836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.403197][T13836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.443988][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.465089][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.498280][T13836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.529416][T13836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.559879][T13836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.611469][T13836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.653397][T14252] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 528.886441][T14261] device syzkaller0 entered promiscuous mode [ 529.097845][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.173482][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.227255][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.250201][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.291557][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.299324][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.336649][T14274] device syzkaller0 entered promiscuous mode [ 529.378396][T14277] device syzkaller0 entered promiscuous mode [ 529.597017][T14284] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2755'. [ 529.610225][T14284] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2755'. [ 529.934033][T14299] netlink: 'syz.0.2758': attribute type 5 has an invalid length. [ 529.973474][T14303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 531.153573][ T1512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 531.293793][T14296] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 531.869179][T14348] device syzkaller0 entered promiscuous mode [ 531.888315][T14357] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2768'. [ 531.905432][T14357] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2768'. [ 532.246752][T14364] device syzkaller0 entered promiscuous mode [ 532.485929][T14374] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2770'. [ 532.518892][T14374] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2770'. [ 532.673638][T14337] chnl_net:caif_netlink_parms(): no params data found [ 532.712104][T14386] device syzkaller0 left promiscuous mode [ 532.732401][T14386] ================================================================== [ 532.741128][T14386] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 532.751192][T14386] Read of size 2 at addr ffff88805e8d59fb by task syz.2.2774/14386 [ 532.759238][T14386] [ 532.761672][T14386] CPU: 0 PID: 14386 Comm: syz.2.2774 Not tainted syzkaller #0 [ 532.769192][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.779402][T14386] Call Trace: [ 532.782776][T14386] [ 532.785852][T14386] dump_stack_lvl+0x188/0x250 [ 532.790858][T14386] ? show_regs_print_info+0x20/0x20 [ 532.797173][T14386] ? _printk+0xda/0x130 [ 532.801670][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 532.807997][T14386] ? load_image+0x410/0x410 [ 532.812699][T14386] print_address_description+0x60/0x2d0 [ 532.818406][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 532.824719][T14386] kasan_report+0xdf/0x130 [ 532.829434][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 532.835756][T14386] ieee80211_monitor_select_queue+0x23a/0x240 [ 532.841897][T14386] ? ieee80211_recalc_smps_work+0x20/0x20 [ 532.847680][T14386] netdev_core_pick_tx+0x12c/0x300 [ 532.852960][T14386] __dev_queue_xmit+0x797/0x2e50 [ 532.859356][T14386] ? __might_sleep+0xf0/0xf0 [ 532.864168][T14386] ? dev_queue_xmit+0x20/0x20 [ 532.868992][T14386] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 532.874784][T14386] ? packet_cached_dev_get+0x270/0x270 [ 532.880335][T14386] packet_sendmsg+0x3c8f/0x4fd0 [ 532.885370][T14386] ? __might_sleep+0xf0/0xf0 [ 532.890219][T14386] ? aa_sk_perm+0x7dc/0x910 [ 532.895097][T14386] ? packet_getsockopt+0x9a0/0x9a0 [ 532.900368][T14386] ? unpack_trans_table+0x606/0x1690 [ 532.905906][T14386] ? apparmor_socket_sendmsg+0x88/0x230 [ 532.911782][T14386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 532.917231][T14386] ? security_socket_sendmsg+0x7c/0xa0 [ 532.922989][T14386] ? packet_getsockopt+0x9a0/0x9a0 [ 532.928304][T14386] ____sys_sendmsg+0x5be/0x8f0 [ 532.933226][T14386] ? __sys_sendmsg_sock+0x30/0x30 [ 532.938335][T14386] ? import_iovec+0x6f/0xa0 [ 532.942955][T14386] ___sys_sendmsg+0x236/0x2e0 [ 532.947837][T14386] ? __sys_sendmsg+0x290/0x290 [ 532.952828][T14386] __se_sys_sendmsg+0x1b7/0x2a0 [ 532.957857][T14386] ? __x64_sys_sendmsg+0x80/0x80 [ 532.962945][T14386] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 532.969712][T14386] ? lockdep_hardirqs_on+0x94/0x140 [ 532.975102][T14386] do_syscall_64+0x4c/0xa0 [ 532.979772][T14386] ? clear_bhb_loop+0x30/0x80 [ 532.984636][T14386] ? clear_bhb_loop+0x30/0x80 [ 532.989384][T14386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.995662][T14386] RIP: 0033:0x7f9d3d29e0d9 [ 533.000296][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.020319][T14386] RSP: 002b:00007f9d3b4f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.028911][T14386] RAX: ffffffffffffffda RBX: 00007f9d3d525fa0 RCX: 00007f9d3d29e0d9 [ 533.037038][T14386] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 533.045178][T14386] RBP: 00007f9d3d335024 R08: 0000000000000000 R09: 0000000000000000 [ 533.053213][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.061263][T14386] R13: 00007f9d3d526038 R14: 00007f9d3d525fa0 R15: 00007ffffc951b78 [ 533.069424][T14386] [ 533.072609][T14386] [ 533.074983][T14386] Allocated by task 4205: [ 533.079455][T14386] __kasan_kmalloc+0xaf/0xe0 [ 533.084297][T14386] device_add+0xb2/0x1050 [ 533.088774][T14386] device_create+0x266/0x300 [ 533.093659][T14386] mac80211_hwsim_new_radio+0x2e3/0x4050 [ 533.099494][T14386] hwsim_new_radio_nl+0xa7d/0xc50 [ 533.104937][T14386] genl_rcv_msg+0xd0b/0xfa0 [ 533.109706][T14386] netlink_rcv_skb+0x1e9/0x430 [ 533.114751][T14386] genl_rcv+0x24/0x40 [ 533.118977][T14386] netlink_unicast+0x78f/0x940 [ 533.124001][T14386] netlink_sendmsg+0x8ba/0xbe0 [ 533.128891][T14386] __sys_sendto+0x46d/0x620 [ 533.133459][T14386] __x64_sys_sendto+0xda/0xf0 [ 533.138214][T14386] do_syscall_64+0x4c/0xa0 [ 533.142691][T14386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.148641][T14386] [ 533.151016][T14386] The buggy address belongs to the object at ffff88805e8d5800 [ 533.151016][T14386] which belongs to the cache kmalloc-512 of size 512 [ 533.165637][T14386] The buggy address is located 507 bytes inside of [ 533.165637][T14386] 512-byte region [ffff88805e8d5800, ffff88805e8d5a00) [ 533.179081][T14386] The buggy address belongs to the page: [ 533.184909][T14386] page:ffffea00017a3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e8d4 [ 533.195453][T14386] head:ffffea00017a3500 order:2 compound_mapcount:0 compound_pincount:0 [ 533.203929][T14386] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 533.212066][T14386] raw: 00fff00000010200 0000000000000000 0000000200000001 ffff888016c41c80 [ 533.220924][T14386] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 533.229555][T14386] page dumped because: kasan: bad access detected [ 533.236116][T14386] page_owner tracks the page as allocated [ 533.241931][T14386] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, ts 88917022778, free_ts 27483812612 [ 533.262092][T14386] get_page_from_freelist+0x24f6/0x2670 [ 533.267759][T14386] __alloc_pages+0x1ee/0x480 [ 533.272409][T14386] new_slab+0xc0/0x4b0 [ 533.276531][T14386] ___slab_alloc+0x807/0xdd0 [ 533.281177][T14386] __kmalloc_node_track_caller+0x13d/0x3a0 [ 533.287311][T14386] __alloc_skb+0x22c/0x750 [ 533.291838][T14386] skb_copy+0x122/0x6f0 [ 533.296758][T14386] mac80211_hwsim_tx_frame_no_nl+0xc88/0x15c0 [ 533.302985][T14386] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 533.308516][T14386] mac80211_hwsim_beacon_tx+0x4d0/0x900 [ 533.314216][T14386] __iterate_interfaces+0x225/0x4c0 [ 533.319746][T14386] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 533.327184][T14386] mac80211_hwsim_beacon+0x9b/0x180 [ 533.332450][T14386] __hrtimer_run_queues+0x4ea/0xb60 [ 533.337833][T14386] hrtimer_run_softirq+0x176/0x240 [ 533.343013][T14386] handle_softirqs+0x336/0x830 [ 533.347976][T14386] page last free stack trace: [ 533.352700][T14386] free_unref_page_prepare+0x637/0x6c0 [ 533.358302][T14386] free_unref_page+0x8f/0x2a0 [ 533.363042][T14386] free_contig_range+0x96/0xf0 [ 533.367876][T14386] destroy_args+0xef/0xa00 [ 533.372423][T14386] debug_vm_pgtable+0x321/0x380 [ 533.377326][T14386] do_one_initcall+0x272/0x730 [ 533.382179][T14386] do_initcall_level+0x13d/0x1f0 [ 533.387210][T14386] do_initcalls+0x4b/0x90 [ 533.391602][T14386] kernel_init_freeable+0x3d5/0x560 [ 533.396914][T14386] kernel_init+0x19/0x1b0 [ 533.401391][T14386] ret_from_fork+0x1f/0x30 [ 533.405861][T14386] [ 533.408229][T14386] Memory state around the buggy address: [ 533.413908][T14386] ffff88805e8d5880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.422295][T14386] ffff88805e8d5900: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.430456][T14386] >ffff88805e8d5980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.438564][T14386] ^ [ 533.446594][T14386] ffff88805e8d5a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.454710][T14386] ffff88805e8d5a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.462824][T14386] ================================================================== [ 533.471082][T14386] Disabling lock debugging due to kernel taint [ 533.477502][T14386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 533.484998][T14386] CPU: 0 PID: 14386 Comm: syz.2.2774 Tainted: G B syzkaller #0 [ 533.493902][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.504124][T14386] Call Trace: [ 533.507540][T14386] [ 533.510605][T14386] dump_stack_lvl+0x188/0x250 [ 533.515365][T14386] ? show_regs_print_info+0x20/0x20 [ 533.520618][T14386] ? load_image+0x410/0x410 [ 533.525189][T14386] panic+0x2f8/0x850 [ 533.529142][T14386] ? bpf_jit_dump+0xd0/0xd0 [ 533.533702][T14386] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 533.539651][T14386] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 533.545622][T14386] ? _raw_spin_unlock+0x40/0x40 [ 533.550571][T14386] ? print_memory_metadata+0x314/0x400 [ 533.556139][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 533.562524][T14386] check_panic_on_warn+0x80/0xa0 [ 533.567920][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 533.574232][T14386] end_report+0x6d/0xf0 [ 533.578586][T14386] kasan_report+0x102/0x130 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.583327][T14386] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 533.589723][T14386] ieee80211_monitor_select_queue+0x23a/0x240 [ 533.595918][T14386] ? ieee80211_recalc_smps_work+0x20/0x20 [ 533.601889][T14386] netdev_core_pick_tx+0x12c/0x300 [ 533.603149][ T5222] Bluetooth: hci3: command 0x0409 tx timeout [ 533.607069][T14386] __dev_queue_xmit+0x797/0x2e50 [ 533.618220][T14386] ? __might_sleep+0xf0/0xf0 [ 533.622880][T14386] ? dev_queue_xmit+0x20/0x20 [ 533.627608][T14386] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 533.633223][T14386] ? packet_cached_dev_get+0x270/0x270 [ 533.638752][T14386] packet_sendmsg+0x3c8f/0x4fd0 [ 533.643671][T14386] ? __might_sleep+0xf0/0xf0 [ 533.648327][T14386] ? aa_sk_perm+0x7dc/0x910 [ 533.652890][T14386] ? packet_getsockopt+0x9a0/0x9a0 [ 533.658064][T14386] ? unpack_trans_table+0x606/0x1690 [ 533.663419][T14386] ? apparmor_socket_sendmsg+0x88/0x230 [ 533.669030][T14386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 533.674438][T14386] ? security_socket_sendmsg+0x7c/0xa0 [ 533.680053][T14386] ? packet_getsockopt+0x9a0/0x9a0 [ 533.685230][T14386] ____sys_sendmsg+0x5be/0x8f0 [ 533.690054][T14386] ? __sys_sendmsg_sock+0x30/0x30 [ 533.695300][T14386] ? import_iovec+0x6f/0xa0 [ 533.699861][T14386] ___sys_sendmsg+0x236/0x2e0 [ 533.704602][T14386] ? __sys_sendmsg+0x290/0x290 [ 533.709528][T14386] __se_sys_sendmsg+0x1b7/0x2a0 [ 533.715143][T14386] ? __x64_sys_sendmsg+0x80/0x80 [ 533.720145][T14386] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 533.726469][T14386] ? lockdep_hardirqs_on+0x94/0x140 [ 533.731769][T14386] do_syscall_64+0x4c/0xa0 [ 533.736241][T14386] ? clear_bhb_loop+0x30/0x80 [ 533.740971][T14386] ? clear_bhb_loop+0x30/0x80 [ 533.745716][T14386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.751675][T14386] RIP: 0033:0x7f9d3d29e0d9 [ 533.756140][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.776162][T14386] RSP: 002b:00007f9d3b4f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.784819][T14386] RAX: ffffffffffffffda RBX: 00007f9d3d525fa0 RCX: 00007f9d3d29e0d9 [ 533.792936][T14386] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 533.801060][T14386] RBP: 00007f9d3d335024 R08: 0000000000000000 R09: 0000000000000000 [ 533.809088][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.817109][T14386] R13: 00007f9d3d526038 R14: 00007f9d3d525fa0 R15: 00007ffffc951b78 [ 533.825532][T14386] [ 533.829096][T14386] Kernel Offset: disabled [ 533.833594][T14386] Rebooting in 86400 seconds..