last executing test programs: 9m53.242305388s ago: executing program 3 (id=215): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000007f8500000017000000950000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, r0, 0x25, 0x2, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r10, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000a80)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000340)="ef48321ed412beca2e324962490ceb1b44ab016f", 0x14}, {&(0x7f0000000680)="21c54541e26b921930fc5be55f955d2b5dba021c69c75167a9c47e663208b4ad08e1a3109976476fc97c72bba0933f4d4a9fbce883290060c9978c3688513535c16f528caefb85e56cd180dbe1cae2ea4ddddef9cdd43423d6a8bf312bf011a97d61e100611c361bf283ef039ebc4e40d5d709559579b8cadae277986335d1cf9b0276aa1e06d3f3a8928d805a76a4a88bbbc02810a5293f734cccb513203dfd3793b71909218e0b3ff11d32607c17", 0xaf}, {&(0x7f0000000740)}, {&(0x7f0000000840)="940034dbc44599576a4296ac85863a067431676e2e6536c2432209fe46a48f7072d8eae9f4927af7e0f87c9b7e834f", 0x2f}, {&(0x7f0000000880)="de5efb0df22ceb18d2717f938120f4b647e71496281447b7c8ef2060fc15b29d9552fe20dba9296ce70bea3d9bea3dfdaf780e58826c5ef14b781dbdac78615d5d757be7cf6f268bfe56d0663ab9ad6ac8383e48c8ebb5b51f268eaea09e0606de4ed51b444e5827db3b7c71ef2c81d773bc1d6afd55c481fa14bafaa1e83b5e74ce8f", 0x83}, {0x0}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r4, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r8, r11}}}, @rights={{0x10}}], 0x70, 0x2004080}, 0x800) r12 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r12, 0x19f23}], 0x1, 0x20) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 9m51.940445365s ago: executing program 3 (id=218): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, 0x0, 0x101}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x16c, 0x0, 0x5c3ccfcc89a771b5, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x32a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400000}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x124a0a63}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20b5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbe}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdb4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6b}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000000000000700000001440c47f6"], 0x20}, 0x4000) 9m50.409879123s ago: executing program 3 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}}, 0x0) 9m50.224566994s ago: executing program 3 (id=225): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1b00000000000000000000000180000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000098ee5e9732a7f42013ebe886331619a1f2210da40326f6000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x7}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 9m46.702353622s ago: executing program 3 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}}, 0x0) 9m46.559413623s ago: executing program 3 (id=236): prlimit64(0x0, 0x6, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000540)="17000000020001000003d68c5ee17688a20032080100000000000000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59180ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf931ff7f0000ac2dff060115003901deffffffffff9a5aab1756b96409b05f9de7e9000f01000000000002ffff02dfccebf6ba2308400200000000e90544062a80e683f1ba2112ce68bf17a6e0", 0xb8) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 9m30.753741634s ago: executing program 32 (id=236): prlimit64(0x0, 0x6, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000540)="17000000020001000003d68c5ee17688a20032080100000000000000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59180ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf931ff7f0000ac2dff060115003901deffffffffff9a5aab1756b96409b05f9de7e9000f01000000000002ffff02dfccebf6ba2308400200000000e90544062a80e683f1ba2112ce68bf17a6e0", 0xb8) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 1m58.512353672s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) 1m28.103552429s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) 1m10.658056518s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) 50.25566269s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) 31.404651723s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) 6.982983785s ago: executing program 1 (id=2290): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipmr_delroute={0x24, 0x19, 0x5, 0x10000, 0x0, {0x80, 0x20, 0x14, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @empty}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000045) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 6.810982286s ago: executing program 1 (id=2291): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="010000070000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000fffff7ffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6.764905026s ago: executing program 1 (id=2292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001400)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) writev(r1, &(0x7f0000000640)=[{&(0x7f00000006c0)}], 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4) syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) unshare(0x4c000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x9}, {0x20, 0x0, 0xf2, 0x2}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e210000"], 0x150}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040084) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 5.478652272s ago: executing program 0 (id=2299): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.141838709s ago: executing program 5 (id=2300): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 3.98898102s ago: executing program 5 (id=2303): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40000000}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x30}, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x11, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2, 0x0, 0x1, 0x5, 0x33, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x20}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x5, @remote, 0x7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4, 0x36, 0x1, 0xffff, 0x6}, @sadb_x_sec_ctx={0x1b, 0x18, 0xda, 0x1, 0xcc, "55bbe194d7ac180684b1f29589bfa679d60553feab6bb392d89e8503d8e7782537bc3ea851e036de3440f51b1bb70bbcfce3732584e22289b97a70597c9476798a748ab84f6e2527f574cbe4f5c4b5e1ec68f1a0f7da57c4fbbe62a917a4181467aaef9b217cb950a26b73b20927bf35efb7a9a64ffe5e2ce179521a66bc9002760fc67525419aa374016e07250fd0b735bfb6eda8880176028d56df01ac24dbd2a45320416508f80b20a0b886ce252c7489892f3bd4f7686e58aad9bc536226802ed6b2242819c40696de95"}, @sadb_lifetime={0x4, 0x3, 0x6, 0x100000001, 0x9, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd26}]}, 0x198}}, 0x800) 3.834953291s ago: executing program 4 (id=2304): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x11, 0x0, 0x0) 3.741452641s ago: executing program 1 (id=2305): socket(0x1e, 0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b5318f0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c030a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214217b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d37827bab1a32c9d788e9f74ee57012ca5bfd0dc090b59077b7ef4a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76789ae79ccec252203bda7798de237bbe019d70a7a2d8176638fd53465acdd321f5a500", 0x3b5}], 0x1}}], 0x2, 0x0) 3.592388122s ago: executing program 0 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) 3.442393563s ago: executing program 0 (id=2307): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x6}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001800090400000800000000000a0000000000000800000000f3edb7c19bf6167a1505450909f99364f34c046c14e1981fe3c312675940d0fa71b9ae6b44f57a48708282f60330246bc22c0db110ae05768a0f160d0003"], 0x1c}}, 0x4044000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) 3.330674883s ago: executing program 5 (id=2308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe2$watch_queue(&(0x7f0000000240), 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8000000130001000000000000000000e0000002000000000000000000000000fe0000000000000000000000000000aa00000000000000000a0030000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043e67c050000000000000000000000000000000000baab38e308c5e25d37081de76ab4ea92ccf69ec3cd28e938b342133257da1215af3e129d915a4e51e06e5019ff1a6f755d962c77b2cfcd9f862e9a6247173ca6547d90e68d74844dfcdca60749978e539f8d568079f378d533db84c1cc4eaea175967ff3fcde854086afee675dfd7ab37984cd41588078b9da2e81e85418680426175686767e9fa4352e66316b1fc3a4acf08000ef7240d63b5e6863200bad73b315db955796e3707840fdc69864986e0ab67a99f18a384ac2aa80a577f0698bf4adfea3ef4e902a40e7119d0478c1c9241d03082dc60846fd92ee845b22c276fbbd8d16fd0638039f901e1d9103e4831be7a9a9d25de074ad649d8e407af8f027cc14e5d09fd87143e9ce88c8ccf9a8357bd07d6b9ce69e9d01803667f9062f6d44f7d8481e10e2e70a7d46f1248972984d8e72da0cf79f8933766d516a1476c2132948a6693c2508310d3f90131290b349412492f6bd6aa53ad1"], 0xb8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) process_mrelease(0xffffffffffffffff, 0x1000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x144, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x27}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_HASH={0x8, 0x2, 0x5c}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x7}, @multicast2, @loopback}}]}, {0x2d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f9475668"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x5, 0x5, 0x5, 0x1}) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0xbc, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0xbc}, 0x1, 0xba01}, 0x0) 2.374879048s ago: executing program 4 (id=2309): bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c0", 0x20) 2.374606848s ago: executing program 1 (id=2310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8", 0xae}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001bc0)="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", 0x403}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000680)="16275f681d9d51f0d0f249ac08c76fc3efd38b51e7d5100eb1211147b854808993009a338a285e7a8f4c9c5fe9c315e99666acb30b3431cadb3b7affd02f2c31b5d19cdf821d17df1dfac2df2e903cc528fed96700254e28d601ed4f27cc8f32ea6be82ef76d07c53e6ca559c71c49bef0317f001cf11a1ce9107690322b3b92be9de6d70a4795627802e01a539d8b74c10baae3a978c1877334e4b3da2ec96f1c79bc296718c3773b2220f4ec399a23fd", 0xb1}, {&(0x7f0000000740)="c73cee7d753debdb9d1c6fd4c952d4a23628a826b8f7", 0x16}, {&(0x7f0000000780)="12e8a0d6766fdd26e3224d6932ab203013a53128a133cfc132eb304135875e6de1d988af804ef1e636f26820dc3354de288578cdcc75446f9c6364439f557dd260f9061018abf0dfd8c37eebeae68e4851c924bc53e41c6e6b9713a598d68b989226d94644ba317a", 0x68}, {&(0x7f0000000a00)="3733df009604032decfe17ef4feb2cdfb8f31a7c80c9e76540f7d3c19b28197339ed77e862cfa0b8b46efb9e5c20f4e689038a002eb18efef29eeb1f124f174392049e1231c77ff7494d72a3b4f40c17c65330da9bfbfe5f201becc8886c181e6d63505a67c1dee734ff72e7db69d0a5023ba53b4fcb0193231c9ea4ba63821bc40f51377bb0e532272635882a339ef89d1a4c9a2a5a1ea75076122ce08f1ca0a75c47a0f55c0d7ae402fb2ebd11d0af85ffa682186a6a954ce61274ca75618148caa04ee604f92c507f8c91bf2c248f6c64b9000060ec443226e308c3d5c8ad3edb7d106b2e0baad12549ce", 0xec}, {&(0x7f0000000b00)="97f3f4c3e6c8dd60ac540c145b616c57efffe411eb8f5a06b2b65e135134f0428befe90d94586cc2d23f043a8268cdc2c3431d162e97f146ce5d9524b26b", 0x3e}, {&(0x7f0000000800)="3936e9c11b89a56af8d028748c2b9af56be1643244184fa513441589cf46882ce8f8057f5bbea78f5891fdbafafad214b767b75e8e7abcb53145b4635f2d6ff235e327bfb4ffd6ec0597817535033a72e38ece4318bb7a0e3469106a0a8129d4cab3c0e7684f8c2e7c", 0x69}], 0x6}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.372816248s ago: executing program 0 (id=2311): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4048c10}, 0x40c0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r5], 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000200)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600", [0x2]}}) 2.348126408s ago: executing program 5 (id=2312): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(r0, &(0x7f0000000100)=@id, &(0x7f0000000300)=0x10, 0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) 2.273250178s ago: executing program 4 (id=2313): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 1.570708902s ago: executing program 4 (id=2314): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="010000070000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000fffff7ffffff080211000000505050505050"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.459618893s ago: executing program 4 (id=2315): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001400)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) writev(r1, &(0x7f0000000640)=[{&(0x7f00000006c0)}], 0x1) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xb, 0x4) syz_open_dev$vim2m(0x0, 0x9, 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) unshare(0x4c000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x9}, {0x20, 0x0, 0xf2, 0x2}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e210000"], 0x150}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040084) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 1.459192003s ago: executing program 5 (id=2316): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.338823133s ago: executing program 1 (id=2317): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_pwait2(r3, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x80800, "340b7832ceefdab318cf501900d6974a270000c50f0000003ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r4}) ppoll(&(0x7f0000000200)=[{r2}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x40, 0x10, 0x10, "0790fcc6c828d711efba22764d91ef00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x21d, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x79, 0x7d, 0x39, 0xb7, 0x586, 0x1000, 0xc250, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20b, 0x1, 0xf0, 0x14, 0x20, 0x0, [{{0x9, 0x4, 0x83, 0x9, 0xc, 0x62, 0xec, 0x2b, 0xcd, [], [{{0x9, 0x5, 0xe, 0x8, 0x10, 0x87, 0xe0, 0x29, [@generic={0x6c, 0x6, "e5f22563b8ced826cb408ca0419fabacbde004993724400ad45c4b50a645f900251291266a1c6e1178c05c9b988ba2f991d906c85f75bb9eac0eff1cd44212a0de00d25579677efd0086d96287c127ef347aec01e3b025829e1863e7b7959b48fdb4294c784e70d491e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x1, 0x0, 0x9, [@generic={0x6c, 0x24, "922e8243c7eb6a170b41558334d32e4cd3410ea190439f7d239a38d22d7487ac2b7438befcbca547ea7a265911dc3a199af128398bf3ea86c14d7d83c55ca37cbb07893664255d2598920051ca962646dae4ad49d17eab9985d84f88603e917ee1163d24f0b26384c7c6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7f, 0x6, 0x7f, [@generic={0x2d, 0xc, "87754f866bc5ccd554c121560b5cccbe3504f7eb41544eff6e454143ddd6e2f40f3159ddb21883a9a6c846"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x0, 0xc, 0xff, [@generic={0x10, 0x22, "a910154b3c219834b116e463f149"}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x7, 0x4, 0x38, 0xe, 0x6, 0x6, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0xfd, 0x5, [@generic={0x2c, 0x6, "10f658ed2bad571c2d68b442bfecc8a88b3fc142eea54443aabd907dd3b7561023d992a65d5c6e1d58c5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x0, 0x40, 0x9}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x1, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0xf9, 0xd, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x5, 0x7, 0x8, [@generic={0x2c, 0x23, "d592e743c412ea04da20b93c452abb923cd9ff702b2b8aaf0ecec548a0c32ae53c67a4c053770a523cec"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2c, 0x0, 0x6}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x5, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x3, 0xf7, 0x20, 0x5}, 0x28, &(0x7f0000000200)={0x5, 0xf, 0x28, 0x2, [@generic={0x20, 0x10, 0x2, "befc7b0ef76fa9d8c3143dd29fc5a3940499831cd641ec346209b2f506"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0x6a, &(0x7f00000006c0)=@string={0x6a, 0x3, "bff752bec17eecaf07eaee7b4d7709a7eec25db5db5e61caf91624f9db516493bd73e255018512ffdd3a738abf4612c75fa93f76596ee847ac0832f2c49da84ec1f2d83482df7422c8ea6a299034fe2965dca0505f43e5cda2686a5164544fe7342ad9f6a71e23b1"}}]}) 366.208568ms ago: executing program 4 (id=2318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x40000000}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x30}, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x11, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2, 0x0, 0x1, 0x5, 0x33, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x20}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x5, @remote, 0x7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x4, 0x36, 0x1, 0xffff, 0x6}, @sadb_x_sec_ctx={0x1b, 0x18, 0xda, 0x1, 0xcc, "55bbe194d7ac180684b1f29589bfa679d60553feab6bb392d89e8503d8e7782537bc3ea851e036de3440f51b1bb70bbcfce3732584e22289b97a70597c9476798a748ab84f6e2527f574cbe4f5c4b5e1ec68f1a0f7da57c4fbbe62a917a4181467aaef9b217cb950a26b73b20927bf35efb7a9a64ffe5e2ce179521a66bc9002760fc67525419aa374016e07250fd0b735bfb6eda8880176028d56df01ac24dbd2a45320416508f80b20a0b886ce252c7489892f3bd4f7686e58aad9bc536226802ed6b2242819c40696de95"}, @sadb_lifetime={0x4, 0x3, 0x6, 0x100000001, 0x9, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd26}]}, 0x198}}, 0x800) 299.296289ms ago: executing program 5 (id=2319): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x11, 0x0, 0x0) 174.145449ms ago: executing program 0 (id=2320): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) 127.168869ms ago: executing program 0 (id=2321): socket(0x1e, 0x0, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b5318f0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c030a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214217b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d37827bab1a32c9d788e9f74ee57012ca5bfd0dc090b59077b7ef4a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76789ae79ccec252203bda7798de237bbe019d70a7a2d8176638fd53465acdd321f5a500", 0x3b5}], 0x1}}], 0x2, 0x0) 0s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={r4, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r9], 0x1000f) kernel console output (not intermixed with test programs): nd: link becomes ready [ 530.703284][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.722243][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.722755][ T4425] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.730901][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.753202][ T4425] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.758799][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.763951][ T4425] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 530.796445][ T4425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.800088][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.821114][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.835743][ T4425] usb 2-1: SerialNumber: syz [ 530.838675][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.850230][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.867518][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.888229][T10481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.071140][ T4425] usb 2-1: invalid UAC_HEADER (v1) [ 531.106283][ T4425] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 531.164783][ T4425] usb 2-1: USB disconnect, device number 17 [ 531.798685][ T7935] usb 1-1: USB disconnect, device number 18 [ 531.883019][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.966489][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.992666][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.058119][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.146523][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.161960][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.223440][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.247338][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.266708][T10481] device veth0_vlan entered promiscuous mode [ 533.043422][T10481] device veth1_vlan entered promiscuous mode [ 533.068763][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.104828][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.126328][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.166569][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.236039][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.283491][T10481] device veth0_macvtap entered promiscuous mode [ 533.325851][T10481] device veth1_macvtap entered promiscuous mode [ 533.385114][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.423652][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.436003][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.616881][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.813146][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.011037][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.031483][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.050172][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.061126][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.071256][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 534.084739][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.100993][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.111848][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.120956][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.136152][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.157307][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.255306][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.265871][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.277382][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.278725][ T7] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 534.290539][T10481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.302486][T10481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.312215][T10481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.320955][T10481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.344590][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.368373][ T7] usb 2-1: Product: syz [ 534.375860][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.391284][ T7] usb 2-1: Manufacturer: syz [ 534.395408][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.395988][ T7] usb 2-1: SerialNumber: syz [ 534.582990][ T7] usb 2-1: config 0 descriptor?? [ 535.348328][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 535.394334][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.422195][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.433737][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.535478][ T4903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.567521][T10798] netlink: 'syz.5.1580': attribute type 11 has an invalid length. [ 535.583102][ T4903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.630751][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 535.906483][T10811] loop9: detected capacity change from 0 to 7 [ 535.951974][T10811] Dev loop9: unable to read RDB block 7 [ 535.958156][T10811] loop9: unable to read partition table [ 535.964398][T10811] loop9: partition table beyond EOD, truncated [ 535.971119][T10811] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 536.659683][ T7936] usb 2-1: USB disconnect, device number 18 [ 536.669142][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 536.979056][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.873176][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.940494][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.007795][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.055717][ T33] device hsr_slave_0 left promiscuous mode [ 539.069211][ T33] device hsr_slave_1 left promiscuous mode [ 539.076248][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.088643][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.096901][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.104652][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.113038][ T33] device bridge_slave_1 left promiscuous mode [ 539.119371][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.142772][ T33] device bridge_slave_0 left promiscuous mode [ 539.149013][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.197617][ T33] device veth1_macvtap left promiscuous mode [ 539.206844][ T33] device veth0_macvtap left promiscuous mode [ 539.218307][ T33] device veth1_vlan left promiscuous mode [ 539.229283][ T33] device veth0_vlan left promiscuous mode [ 539.315062][T10892] netlink: 'syz.1.1592': attribute type 11 has an invalid length. [ 540.384328][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.394522][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.407078][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.417357][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.436367][ T4261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 540.492386][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.761456][ T7935] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 540.913995][T10918] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1598'. [ 541.012586][ T7935] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 541.046728][ T7935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.092820][ T7935] usb 1-1: Product: syz [ 541.120817][ T7935] usb 1-1: Manufacturer: syz [ 541.145303][ T7935] usb 1-1: SerialNumber: syz [ 541.233432][ T7935] usb 1-1: config 0 descriptor?? [ 541.471738][ T33] team0 (unregistering): Port device team_slave_1 removed [ 541.498595][ T7935] usb-storage 1-1:0.0: USB Mass Storage device detected [ 541.522556][ T33] team0 (unregistering): Port device team_slave_0 removed [ 541.556868][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.619708][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.004110][ T33] bond0 (unregistering): Released all slaves [ 542.094436][T10917] lo speed is unknown, defaulting to 1000 [ 542.139530][T10911] lo speed is unknown, defaulting to 1000 [ 542.572027][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 543.271098][ T4289] usb 1-1: USB disconnect, device number 19 [ 543.350796][T10911] chnl_net:caif_netlink_parms(): no params data found [ 543.646920][T10956] bridge0: port 3(vlan0) entered blocking state [ 543.654149][T10956] bridge0: port 3(vlan0) entered disabled state [ 543.674401][T10956] device vlan0 entered promiscuous mode [ 543.680301][T10956] device wlan0 entered promiscuous mode [ 543.688902][T10956] bridge0: port 3(vlan0) entered blocking state [ 543.695604][T10956] bridge0: port 3(vlan0) entered forwarding state [ 544.048651][T10974] netlink: 'syz.4.1612': attribute type 12 has an invalid length. [ 544.061293][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.068410][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.112102][T10911] device bridge_slave_0 entered promiscuous mode [ 544.143324][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.239861][T10979] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1611'. [ 544.439801][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.623122][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 544.744072][T10911] device bridge_slave_1 entered promiscuous mode [ 544.841955][T10986] xt_l2tp: v2 doesn't support IP mode [ 544.995376][T10978] lo speed is unknown, defaulting to 1000 [ 546.366325][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.410133][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.514118][T10911] team0: Port device team_slave_0 added [ 546.526235][T10911] team0: Port device team_slave_1 added [ 546.566713][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.575208][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.648675][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.667512][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.682705][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.711316][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 546.717581][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.153178][T10911] device hsr_slave_0 entered promiscuous mode [ 547.173999][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1621'. [ 547.192062][T10911] device hsr_slave_1 entered promiscuous mode [ 547.201947][T10911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.209607][T10911] Cannot create hsr debugfs directory [ 547.341481][ T26] audit: type=1326 audit(1732013067.445:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.5.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 548.771500][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 549.319378][T11033] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1629'. [ 549.586041][T11032] lo speed is unknown, defaulting to 1000 [ 549.903922][T11040] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1634'. [ 550.036442][ T26] audit: type=1326 audit(1732013070.125:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.5.1635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 550.403870][T11026] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1630'. [ 552.079157][T10911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.095572][T10911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 552.153637][T10911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 552.183735][T10911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 553.071643][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.234254][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.255421][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.265260][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.285613][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.295592][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.305947][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.313094][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.328955][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.338248][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.347409][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.354530][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.378331][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.387287][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.397778][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.423233][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.435538][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.444857][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.456024][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.466851][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.475888][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.490781][T10911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.503431][T10911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.517004][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.526165][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.555044][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.684340][ T26] audit: type=1326 audit(1732013073.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc791f7e759 code=0x0 [ 554.839548][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.873122][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.901121][T11107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1654'. [ 554.946884][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.015791][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.027404][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.047119][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.058691][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.251349][ T4262] Bluetooth: hci1: command 0x0411 tx timeout [ 555.509115][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.627560][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.709081][T10911] device veth0_vlan entered promiscuous mode [ 555.728272][T11122] xt_l2tp: v2 doesn't support IP mode [ 555.749489][T10911] device veth1_vlan entered promiscuous mode [ 555.790981][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.807252][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.840669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.914133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.953477][T10911] device veth0_macvtap entered promiscuous mode [ 555.968353][T10911] device veth1_macvtap entered promiscuous mode [ 555.998032][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.009695][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.020737][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.031924][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.047173][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.068946][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.100433][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.115753][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.125652][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.143028][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.170108][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.193184][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.207353][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.227779][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.238510][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.252433][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.259799][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.272418][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.281260][ T7936] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 556.291824][T10911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.302608][T10911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.313987][T10911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.325097][T10911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.483766][ T7936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.502238][ T7936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.528731][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.550062][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.562881][ T7936] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.589903][ T7936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.607764][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.632520][ T4460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.633473][ T7936] usb 5-1: SerialNumber: syz [ 556.650286][ T4460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.715814][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.898319][ T7936] usb 5-1: 0:2 : does not exist [ 556.959525][ T7936] usb 5-1: USB disconnect, device number 8 [ 557.010201][ T26] audit: type=1326 audit(1732013077.105:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 557.349484][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.904810][T11175] syz.0.1676[11175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.904910][T11175] syz.0.1676[11175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.923779][T11188] device syzkaller0 entered promiscuous mode [ 562.703212][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.709540][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.839418][ T4590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.033450][ T4590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.207178][ T4590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.681972][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.783728][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.801484][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.810185][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 563.822034][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 563.840049][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 563.898453][ T4590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.905549][T11211] syz.4.1687[11211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.917396][T11211] syz.4.1687[11211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.924156][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 564.413123][T11203] lo speed is unknown, defaulting to 1000 [ 565.488417][T11203] chnl_net:caif_netlink_parms(): no params data found [ 565.901486][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 566.025026][T11238] device vlan2 entered promiscuous mode [ 566.089429][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.135628][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.179379][T11203] device bridge_slave_0 entered promiscuous mode [ 566.237828][T11249] syz.0.1699[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.237928][T11249] syz.0.1699[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.250098][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.277085][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.637309][T11203] device bridge_slave_1 entered promiscuous mode [ 567.029294][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.091655][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.117807][T11203] team0: Port device team_slave_0 added [ 567.295299][T11203] team0: Port device team_slave_1 added [ 567.875242][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.889753][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.988451][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 568.016935][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.109159][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.121253][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.262650][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.326208][T11279] syz.5.1710[11279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.326440][T11279] syz.5.1710[11279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.282217][T11287] loop9: detected capacity change from 0 to 7 [ 569.334890][T11287] Dev loop9: unable to read RDB block 7 [ 569.340714][T11287] loop9: unable to read partition table [ 569.347046][T11287] loop9: partition table beyond EOD, truncated [ 569.353390][T11287] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 570.051314][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 570.092166][ T4590] device hsr_slave_0 left promiscuous mode [ 570.130627][ T4590] device hsr_slave_1 left promiscuous mode [ 570.139089][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.146897][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.158944][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.180764][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.202806][ T4590] device bridge_slave_1 left promiscuous mode [ 570.209475][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.226654][ T4590] device bridge_slave_0 left promiscuous mode [ 570.237918][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.527317][ T4590] device veth1_macvtap left promiscuous mode [ 570.561827][ T4590] device veth0_macvtap left promiscuous mode [ 570.593316][ T4590] device veth1_vlan left promiscuous mode [ 570.632383][ T4590] device veth0_vlan left promiscuous mode [ 571.414273][ T4590] team0 (unregistering): Port device team_slave_1 removed [ 571.456656][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 571.504108][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.548049][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.964345][ T4590] bond0 (unregistering): Released all slaves [ 572.059161][T11203] device hsr_slave_0 entered promiscuous mode [ 572.066332][T11203] device hsr_slave_1 entered promiscuous mode [ 572.073062][T11203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.080725][T11203] Cannot create hsr debugfs directory [ 572.131496][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 572.230945][ T26] audit: type=1326 audit(1732013092.325:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.5.1720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 572.399650][T11315] syz.4.1721[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.399749][T11315] syz.4.1721[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.865302][T11331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1726'. [ 574.963230][T11350] syz.4.1733[11350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.963334][T11350] syz.4.1733[11350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.049516][T11203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.148775][ T26] audit: type=1326 audit(1732013095.245:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.4.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0757e759 code=0x0 [ 575.276800][T11203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.428208][T11203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.865903][T11203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 576.194534][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.321842][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.357119][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.428196][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 576.932238][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 576.941134][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 576.951036][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.958205][ T4460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.967095][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 576.985299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.008438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.027274][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.034460][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.057125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.108072][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.127752][T11384] syz.4.1746[11384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.127924][T11384] syz.4.1746[11384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.131041][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.174784][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.184322][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.235950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.245373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.254454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.264849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.274019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.305646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.325457][T11203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.357731][ T26] audit: type=1326 audit(1732013098.455:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11406 comm="syz.4.1753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0757e759 code=0x0 [ 578.553901][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.569502][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.083990][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.280285][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 579.310227][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.381931][T11418] syz.0.1757[11418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.382030][T11418] syz.0.1757[11418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.405005][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.674727][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.784605][T11203] device veth0_vlan entered promiscuous mode [ 579.828104][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.889791][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.006703][T11203] device veth1_vlan entered promiscuous mode [ 580.155519][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.164705][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.244465][T11203] device veth0_macvtap entered promiscuous mode [ 580.264388][T11203] device veth1_macvtap entered promiscuous mode [ 580.292844][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.312186][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.345285][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.356248][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.372440][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.384090][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.395256][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.409936][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.506794][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.684265][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.894817][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.016885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.041616][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.053688][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 581.074895][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 581.095698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.185484][T11203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.208580][T11203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.313362][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.472368][T11443] device vlan2 entered promiscuous mode [ 581.952194][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.961252][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.978232][T11203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.077231][T11203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.100222][T11203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.293784][T11203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.010037][ T4460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.026547][ T4460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.039502][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.069010][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.092759][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.152390][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.869775][ T4290] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 584.086161][ T4290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.149871][ T4290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.297517][ T4290] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.414804][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.502899][ T4290] usb 1-1: SerialNumber: syz [ 584.805322][ T4649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.842483][ T4290] usb 1-1: 0:2 : does not exist [ 584.849176][T11494] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1782'. [ 584.863879][ T4290] usb 1-1: unit 5 not found! [ 584.921414][ T4290] usb 1-1: USB disconnect, device number 20 [ 585.107369][ T4649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.168186][ T4649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.204804][ T4649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.119628][ T4649] device hsr_slave_0 left promiscuous mode [ 586.126063][ T4649] device hsr_slave_1 left promiscuous mode [ 586.133046][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.140478][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.148290][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.155776][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.165987][ T4649] device bridge_slave_1 left promiscuous mode [ 586.172820][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.182915][ T4649] device bridge_slave_0 left promiscuous mode [ 586.189110][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.212181][ T4649] device veth1_macvtap left promiscuous mode [ 586.218226][ T4649] device veth0_macvtap left promiscuous mode [ 586.224408][ T4649] device veth1_vlan left promiscuous mode [ 586.230191][ T4649] device veth0_vlan left promiscuous mode [ 588.321014][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.349616][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.358971][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.367715][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.381893][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 588.393290][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.476494][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 588.536799][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 588.621417][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.728492][T11541] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1795'. [ 588.773385][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.851372][ T4290] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 589.070033][ T4290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.107030][ T4290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.200311][ T4290] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 589.210564][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 589.218679][ T4290] usb 1-1: SerialNumber: syz [ 589.455288][ T4290] usb 1-1: 0:2 : does not exist [ 589.460188][ T4290] usb 1-1: unit 5 not found! [ 589.490351][ T4290] usb 1-1: USB disconnect, device number 21 [ 589.632016][ T4649] bond0 (unregistering): Released all slaves [ 589.712451][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.785557][T11527] lo speed is unknown, defaulting to 1000 [ 589.894948][T11545] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1798'. [ 590.462642][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 590.866741][T11527] chnl_net:caif_netlink_parms(): no params data found [ 591.006492][T11565] device vlan2 entered promiscuous mode [ 591.134153][T11575] netlink: 'syz.5.1809': attribute type 12 has an invalid length. [ 591.151046][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.158527][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.166926][T11527] device bridge_slave_0 entered promiscuous mode [ 591.175643][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.185388][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.193792][T11527] device bridge_slave_1 entered promiscuous mode [ 591.413999][T11527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.451306][T11585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1812'. [ 591.484306][T11527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.551635][ T7936] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 591.771788][ T7936] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 591.825390][ T7936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.843459][ T7936] usb 5-1: Product: syz [ 591.847669][ T7936] usb 5-1: Manufacturer: syz [ 591.859689][ T7936] usb 5-1: SerialNumber: syz [ 591.868302][ T7936] usb 5-1: config 0 descriptor?? [ 591.924150][T11580] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1808'. [ 591.936109][T11527] team0: Port device team_slave_0 added [ 591.951704][T11527] team0: Port device team_slave_1 added [ 591.997070][ T26] audit: type=1326 audit(1732013112.095:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.1.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d3b7e759 code=0x0 [ 592.022541][T11527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.029782][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.056343][T11527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.195233][T11527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.195801][ T7936] usb-storage 5-1:0.0: USB Mass Storage device detected [ 592.209949][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.421548][ T4295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 592.445316][T11527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.616523][ T4295] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.645815][ T4295] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.983549][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 593.048767][ T4295] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 593.060121][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 593.068934][ T4295] usb 6-1: SerialNumber: syz [ 593.087617][T11527] device hsr_slave_0 entered promiscuous mode [ 593.096173][T11527] device hsr_slave_1 entered promiscuous mode [ 593.110088][T11527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.118344][T11527] Cannot create hsr debugfs directory [ 593.922479][ T4295] usb 6-1: 0:2 : does not exist [ 593.927430][ T4295] usb 6-1: unit 5 not found! [ 593.939577][ T4295] usb 6-1: USB disconnect, device number 5 [ 594.019856][ T7936] usb 5-1: USB disconnect, device number 9 [ 594.114031][T11615] device vlan2 entered promiscuous mode [ 594.128180][T11617] netlink: 'syz.1.1822': attribute type 12 has an invalid length. [ 594.166149][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.290871][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1824'. [ 594.400436][T11527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.418789][T11527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.434353][T11527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.489200][T11527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.680293][ T26] audit: type=1326 audit(1732013114.775:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 595.851924][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 595.862828][T11527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.211404][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.552371][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.643652][T11527] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.666822][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.677159][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.685764][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.692897][ T4590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.722250][T11647] netlink: 'syz.4.1831': attribute type 4 has an invalid length. [ 597.757818][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.780806][ T7936] lo speed is unknown, defaulting to 1000 [ 597.790993][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.807369][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.829654][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.836876][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.847625][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.857496][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.877391][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.890121][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.901471][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 597.909822][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.921102][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.938178][T11660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1836'. [ 597.948661][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.957521][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 597.967716][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 597.976488][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 597.985527][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 597.996436][T11527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.091317][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 598.208385][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.217585][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 598.232186][T11527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.256902][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 598.268163][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 598.285412][ T7] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 598.296425][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.304602][ T7] usb 2-1: Product: syz [ 598.308871][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 598.317524][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 598.325246][ T7] usb 2-1: Manufacturer: syz [ 598.329852][ T7] usb 2-1: SerialNumber: syz [ 598.335989][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 598.345323][ T7] usb 2-1: config 0 descriptor?? [ 598.353881][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 598.364603][T11527] device veth0_vlan entered promiscuous mode [ 598.385992][T11527] device veth1_vlan entered promiscuous mode [ 598.418742][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 598.429196][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 598.438026][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 598.447471][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 598.461689][T11527] device veth0_macvtap entered promiscuous mode [ 598.475200][T11527] device veth1_macvtap entered promiscuous mode [ 598.493982][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.505877][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.517858][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.540601][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.579428][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.605296][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.631737][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 598.641049][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.668748][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.680210][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.691384][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.768910][T11527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.785516][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.799175][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.819947][T11527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.832702][T11527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.848459][T11527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.893504][T11527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.045173][T11679] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1839'. [ 599.144519][T11527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.405877][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 599.442471][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 599.532954][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 599.544106][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 599.553269][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.562230][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 599.576730][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 599.599728][T11678] lo speed is unknown, defaulting to 1000 [ 599.671482][ T22] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 599.737856][ T4649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.749155][ T4649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.790520][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 599.825366][ T4649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.834453][ T4649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.852784][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 599.994189][ T22] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 600.004754][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.014298][ T22] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 600.026039][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 600.043906][ T22] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.055615][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.093261][ T22] usb 1-1: SerialNumber: syz [ 600.563240][ T22] usb 1-1: 0:2 : does not exist [ 600.632212][ T22] usb 1-1: unit 5 not found! [ 600.702013][ T22] usb 1-1: USB disconnect, device number 22 [ 600.759569][T10686] usb 2-1: USB disconnect, device number 19 [ 601.424334][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.810312][T11698] netlink: 'syz.1.1846': attribute type 4 has an invalid length. [ 601.941996][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 603.184488][T11723] lo speed is unknown, defaulting to 1000 [ 603.621342][T11723] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1852'. [ 604.265639][ T26] audit: type=1326 audit(1732013124.365:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.0.1856" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc791f7e759 code=0x0 [ 605.371315][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 605.569465][ T22] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 605.609216][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.641122][ T22] usb 6-1: Product: syz [ 605.652760][ T22] usb 6-1: Manufacturer: syz [ 605.658578][ T22] usb 6-1: SerialNumber: syz [ 605.673574][ T22] usb 6-1: config 0 descriptor?? [ 605.688956][T11754] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1861'. [ 605.909732][ T22] usb-storage 6-1:0.0: USB Mass Storage device detected [ 606.182056][ T7936] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 606.423623][ T7936] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 606.435058][ T7936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.445735][ T7936] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 606.590173][T11769] lo speed is unknown, defaulting to 1000 [ 606.770256][T11769] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1865'. [ 607.231788][ T7936] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 607.251999][ T22] usb 6-1: USB disconnect, device number 6 [ 607.261600][ T7936] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.301756][ T7936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.330090][ T7936] usb 1-1: SerialNumber: syz [ 607.568762][ T7936] usb 1-1: 0:2 : does not exist [ 607.581128][ T7936] usb 1-1: unit 5 not found! [ 607.634830][ T7936] usb 1-1: USB disconnect, device number 23 [ 607.662740][ T4590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.778461][ T4590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.876142][ T4590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.907148][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.945689][ T4590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.988132][ T4590] device hsr_slave_0 left promiscuous mode [ 608.994909][ T4590] device hsr_slave_1 left promiscuous mode [ 609.002352][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.009760][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.018624][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.026096][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.033854][ T4590] device bridge_slave_1 left promiscuous mode [ 609.040053][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.048315][ T4590] device bridge_slave_0 left promiscuous mode [ 609.054857][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.077052][ T4590] device veth1_macvtap left promiscuous mode [ 609.083156][ T4590] device veth0_macvtap left promiscuous mode [ 609.089193][ T4590] device veth1_vlan left promiscuous mode [ 609.095141][ T4590] device veth0_vlan left promiscuous mode [ 609.327206][T11784] syz.5.1870[11784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.327368][T11784] syz.5.1870[11784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.737263][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.759304][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.769144][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.778623][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.795104][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.802574][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.974708][T11795] fuse: Unknown parameter '0x0000000000000007' [ 610.343792][ T4590] team0 (unregistering): Port device team_slave_1 removed [ 610.714174][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 611.297454][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.339052][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.481567][T11808] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1877'. [ 611.891265][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 612.580298][ T4590] bond0 (unregistering): Released all slaves [ 612.850614][T11791] lo speed is unknown, defaulting to 1000 [ 612.879391][T11820] syz.1.1882[11820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.879481][T11820] syz.1.1882[11820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.003766][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1884'. [ 614.022191][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 614.449481][T11848] fuse: Unknown parameter '0x0000000000000007' [ 614.783514][T11791] chnl_net:caif_netlink_parms(): no params data found [ 614.920633][T11853] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1892'. [ 615.334919][T11852] lo speed is unknown, defaulting to 1000 [ 615.771728][T11861] syz.5.1895[11861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.771826][T11861] syz.5.1895[11861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.941311][T11791] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.982660][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.008171][T11791] device bridge_slave_0 entered promiscuous mode [ 616.051338][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 616.071620][T11791] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.078725][T11791] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.109028][T11791] device bridge_slave_1 entered promiscuous mode [ 616.345506][T11875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 616.787449][T11879] device vlan2 entered promiscuous mode [ 616.833332][T11791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.849182][T11791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.989896][T11791] team0: Port device team_slave_0 added [ 617.022423][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 617.463787][T11896] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1905'. [ 617.555102][T11791] team0: Port device team_slave_1 added [ 617.632335][T11895] lo speed is unknown, defaulting to 1000 [ 618.077968][T11791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.093093][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.131298][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 618.142039][T11791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.205222][T11791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.235522][T11791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.481761][T11791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.637555][T11920] fuse: Unknown parameter '0x0000000000000007' [ 619.884822][T11791] device hsr_slave_0 entered promiscuous mode [ 620.151757][T11791] device hsr_slave_1 entered promiscuous mode [ 620.189864][T11791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.227408][T11791] Cannot create hsr debugfs directory [ 620.649785][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1916'. [ 620.914781][T11931] netlink: 'syz.5.1919': attribute type 2 has an invalid length. [ 620.956733][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1919'. [ 621.036787][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 621.361327][T11943] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1922'. [ 621.926905][T11945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1924'. [ 621.955186][T11942] lo speed is unknown, defaulting to 1000 [ 625.871605][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.878030][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.035901][T11791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 626.122667][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1930'. [ 626.141546][T11791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 626.393190][T11791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 626.416959][T11791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 627.040193][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 627.264476][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1935'. [ 627.632785][T11990] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1936'. [ 627.877685][T11791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.143784][T11988] lo speed is unknown, defaulting to 1000 [ 628.285195][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.306825][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.351548][T11791] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.374127][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.419960][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.440689][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.447819][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.486192][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.532427][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.566107][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.578154][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.585314][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.599424][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.629430][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.655375][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.717768][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.763989][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.822450][T11999] lo speed is unknown, defaulting to 1000 [ 628.834730][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.845178][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.855042][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.864708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.878715][T11791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.928779][T11791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.952592][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.982188][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.343104][T12004] device syzkaller0 entered promiscuous mode [ 632.322604][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1942'. [ 632.342215][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1947'. [ 632.424987][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.437877][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.486203][T11791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.548955][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.582279][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.634541][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.670308][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.702545][T11791] device veth0_vlan entered promiscuous mode [ 632.708583][ T26] audit: type=1326 audit(1732013152.805:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.5.1952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441d37e759 code=0x0 [ 632.713465][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.869686][T12044] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1949'. [ 633.154927][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.375410][T12043] lo speed is unknown, defaulting to 1000 [ 633.409365][T11791] device veth1_vlan entered promiscuous mode [ 633.623903][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.656485][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.665791][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.676807][T11791] device veth0_macvtap entered promiscuous mode [ 633.705115][T11791] device veth1_macvtap entered promiscuous mode [ 633.843080][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.871562][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.909057][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.919751][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.929672][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.940510][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.950730][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.011836][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.691451][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.702151][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.722889][T11791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.734831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.942711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.026332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.061761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.134678][T11791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.172469][T11791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.202183][T11791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.209704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.232400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.387192][T11791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.431201][T11791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.466004][T11791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.501486][T11791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.769615][T12077] device vlan2 entered promiscuous mode [ 635.839078][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.875037][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.899088][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.956148][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.980808][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.070411][T12112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.284665][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 637.121674][ T26] audit: type=1326 audit(1732013157.125:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.1.1967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d3b7e759 code=0x0 [ 638.000935][ T4590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.132216][ T4590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.290027][ T4590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.359856][ T4590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.419856][ T4590] device hsr_slave_0 left promiscuous mode [ 639.426313][ T4590] device hsr_slave_1 left promiscuous mode [ 639.433445][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.440864][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.449232][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.457370][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.465435][ T4590] device bridge_slave_1 left promiscuous mode [ 639.471765][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.527978][ T4590] device bridge_slave_0 left promiscuous mode [ 639.550781][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.747853][ T4590] device veth1_macvtap left promiscuous mode [ 639.757030][ T4590] device veth0_macvtap left promiscuous mode [ 639.767433][ T4590] device veth1_vlan left promiscuous mode [ 639.796527][ T4590] device veth0_vlan left promiscuous mode [ 639.917953][T12163] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1971'. [ 640.482240][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 640.496129][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 640.504776][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 640.515851][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 640.526650][ T4261] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 640.534129][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.906494][ T4590] team0 (unregistering): Port device team_slave_1 removed [ 640.945688][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 640.985271][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.026741][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.417627][ T4590] bond0 (unregistering): Released all slaves [ 641.513452][T12162] lo speed is unknown, defaulting to 1000 [ 641.636228][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 641.787971][T12164] lo speed is unknown, defaulting to 1000 [ 642.164244][ T26] audit: type=1326 audit(1732013162.135:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.1.1981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d3b7e759 code=0x0 [ 642.691498][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 642.794631][T12164] chnl_net:caif_netlink_parms(): no params data found [ 643.178508][T12164] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.204348][T12164] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.213029][T12164] device bridge_slave_0 entered promiscuous mode [ 643.253479][T12164] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.304698][T12164] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.366282][T12164] device bridge_slave_1 entered promiscuous mode [ 643.480805][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.528917][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.680043][T12164] team0: Port device team_slave_0 added [ 643.697372][T12164] team0: Port device team_slave_1 added [ 643.779159][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.786503][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.820133][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.854066][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.885371][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.975679][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.295803][T12164] device hsr_slave_0 entered promiscuous mode [ 644.312084][T12164] device hsr_slave_1 entered promiscuous mode [ 644.319645][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.336388][T12164] Cannot create hsr debugfs directory [ 644.831396][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 645.964220][T12239] lo speed is unknown, defaulting to 1000 [ 646.129346][T12239] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1996'. [ 646.839008][T12164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 646.851356][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 646.866479][T12164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 646.890921][T12164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 646.945474][T12164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 647.779148][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.818804][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.836618][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 647.863397][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.044931][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.072008][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.774081][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.781231][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.809664][T12263] device vlan2 entered promiscuous mode [ 648.931265][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 648.963632][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 648.976725][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.002584][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.056625][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.063813][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.075914][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.087545][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.113611][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.146247][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.202813][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.222432][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.233467][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 649.242784][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.252574][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.261215][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.269810][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.288413][T12164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.754484][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.775603][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 650.808932][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.896284][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 650.925739][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 650.986168][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.000248][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.015811][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.041711][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.060848][T12164] device veth0_vlan entered promiscuous mode [ 651.076946][T12164] device veth1_vlan entered promiscuous mode [ 651.096575][T12308] device vlan0 entered promiscuous mode [ 651.140574][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.203908][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.222382][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.252866][T12164] device veth0_macvtap entered promiscuous mode [ 651.291000][T12164] device veth1_macvtap entered promiscuous mode [ 651.323321][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.335285][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.352529][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.363354][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.373484][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.393768][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.405708][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.416800][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.427161][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.450927][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.631801][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.677751][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 651.697730][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 651.738489][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 651.756166][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 651.777717][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.791111][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.816478][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.828859][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 651.854266][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 651.872259][T12164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.887250][T12164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.897438][T12164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.913641][T12164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.110915][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.137845][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.243560][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 652.304881][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.332138][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.348377][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.107124][ T4638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.211699][T12409] lo speed is unknown, defaulting to 1000 [ 655.330965][T12414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2047'. [ 655.527794][ T4638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.662470][ T4638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.785792][ T4638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.697459][ T4638] device hsr_slave_0 left promiscuous mode [ 656.704668][ T4638] device hsr_slave_1 left promiscuous mode [ 656.711528][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.718944][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.727692][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.735306][ T4638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.743274][ T4638] device bridge_slave_1 left promiscuous mode [ 656.749439][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.757778][ T4638] device bridge_slave_0 left promiscuous mode [ 656.764247][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.792681][ T4638] device veth1_macvtap left promiscuous mode [ 656.798691][ T4638] device veth0_macvtap left promiscuous mode [ 656.804843][ T4638] device veth1_vlan left promiscuous mode [ 656.810617][ T4638] device veth0_vlan left promiscuous mode [ 657.375804][ T4638] team0 (unregistering): Port device team_slave_1 removed [ 657.463821][ T4638] team0 (unregistering): Port device team_slave_0 removed [ 657.561750][ T4638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.635895][ T4638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.655573][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.668558][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.689872][ T4245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.700099][ T4245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.715758][ T4245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 657.723718][ T4245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.129968][ T4638] bond0 (unregistering): Released all slaves [ 658.284330][T12429] lo speed is unknown, defaulting to 1000 [ 660.559080][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 660.744857][T12429] chnl_net:caif_netlink_parms(): no params data found [ 661.173001][T12429] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.191225][T12429] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.206365][T12429] device bridge_slave_0 entered promiscuous mode [ 661.220559][T12429] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.228669][T12429] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.241253][T12429] device bridge_slave_1 entered promiscuous mode [ 661.379988][T12471] device syzkaller0 entered promiscuous mode [ 661.397719][T12429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.573045][T12429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.621724][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 664.691799][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 664.873628][T12429] team0: Port device team_slave_0 added [ 664.889697][T12429] team0: Port device team_slave_1 added [ 664.930980][T12429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.999359][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.071445][T12429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.116542][T12429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.127923][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.177910][T12429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.208074][T12501] device veth0_to_hsr entered promiscuous mode [ 665.407349][T12512] device hsr_slave_0 left promiscuous mode [ 665.413873][T12519] xt_l2tp: v2 doesn't support IP mode [ 665.452242][T12429] device hsr_slave_0 entered promiscuous mode [ 665.459409][T12429] device hsr_slave_1 entered promiscuous mode [ 665.466897][T12429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.475417][T12429] Cannot create hsr debugfs directory [ 666.781698][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 667.331915][T12551] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2093'. [ 667.514985][T12429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 667.624719][T12429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.635929][T12429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 667.649703][T12429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 667.815819][T12429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.877716][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.892166][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.934092][T12429] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.986873][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.178428][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.187416][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.194541][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.216134][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.229694][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.258163][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.364819][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.371979][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.407310][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.418100][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 668.619827][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 668.673470][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 668.688677][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 668.708806][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 668.756694][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 668.772200][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.787098][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.137496][ T4245] Bluetooth: hci1: command 0x0411 tx timeout [ 669.174551][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.183360][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.668447][T12592] lo speed is unknown, defaulting to 1000 [ 669.689541][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.697914][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.710649][T12429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.778904][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 669.795814][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 669.856650][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 669.870610][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.900181][T12429] device veth0_vlan entered promiscuous mode [ 669.998668][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 670.026339][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.070635][T12429] device veth1_vlan entered promiscuous mode [ 670.135169][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 670.150349][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 670.166181][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 670.179688][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 670.198072][T12429] device veth0_macvtap entered promiscuous mode [ 670.231620][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 670.256376][T12429] device veth1_macvtap entered promiscuous mode [ 670.340172][T12609] device syzkaller0 entered promiscuous mode [ 670.354594][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.371592][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.382243][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.393342][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.405645][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.416578][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.426600][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.445266][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.458408][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.473207][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.489273][T12429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.610324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.619221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.634540][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.661529][ T22] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 670.720975][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.776582][T12429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.878130][ T22] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 670.918894][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.021657][ T22] usb 1-1: Product: syz [ 671.055364][ T22] usb 1-1: Manufacturer: syz [ 671.105938][ T22] usb 1-1: SerialNumber: syz [ 671.219906][ T22] usb 1-1: config 0 descriptor?? [ 671.467039][ T22] usb-storage 1-1:0.0: USB Mass Storage device detected [ 672.940489][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 672.957020][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 672.971966][T12429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.985564][T12429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.000042][T12429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.017091][T12429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.037511][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2117'. [ 673.197061][T10686] usb 1-1: USB disconnect, device number 24 [ 673.254610][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.281588][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.343329][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.360539][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.372802][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 673.420793][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 673.587543][ T26] audit: type=1326 audit(1732013193.685:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.4.2125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0757e759 code=0x0 [ 676.114893][ T4350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.199794][ T4350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.254128][ T4350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.306409][ T4350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.201501][ T4350] device hsr_slave_0 left promiscuous mode [ 677.207795][ T4350] device hsr_slave_1 left promiscuous mode [ 677.214424][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.221898][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.229471][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.236962][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.244797][ T4350] device bridge_slave_1 left promiscuous mode [ 677.250978][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.260414][ T4350] device bridge_slave_0 left promiscuous mode [ 677.266945][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.287986][ T4350] device veth1_macvtap left promiscuous mode [ 677.294095][ T4350] device veth0_macvtap left promiscuous mode [ 677.300158][ T4350] device veth1_vlan left promiscuous mode [ 677.307248][ T4350] device veth0_vlan left promiscuous mode [ 677.687220][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 677.725972][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 677.769293][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.806350][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.477242][ T26] audit: type=1326 audit(1732013198.575:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.0.2140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc791f7e759 code=0x0 [ 678.677350][ T4350] bond0 (unregistering): Released all slaves [ 679.350881][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.369325][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.386155][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.402633][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.410296][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 679.418127][ T4261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.717595][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2141'. [ 679.736047][T12693] lo speed is unknown, defaulting to 1000 [ 680.531438][T12681] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 680.801038][T12693] chnl_net:caif_netlink_parms(): no params data found [ 680.946402][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.958341][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.970658][T12693] device bridge_slave_0 entered promiscuous mode [ 680.991911][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.999090][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.008007][T12693] device bridge_slave_1 entered promiscuous mode [ 681.047820][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.060775][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.151318][T12693] team0: Port device team_slave_0 added [ 681.170869][T12693] team0: Port device team_slave_1 added [ 681.185504][T12734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2154'. [ 681.227702][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.250180][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.277207][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.295482][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.303301][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.346733][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.400944][T12693] device hsr_slave_0 entered promiscuous mode [ 681.415550][T12693] device hsr_slave_1 entered promiscuous mode [ 681.426776][T12693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.438448][T12693] Cannot create hsr debugfs directory [ 681.538245][ T4245] Bluetooth: hci1: command 0x0409 tx timeout [ 682.344994][ T4289] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 682.691828][ T4289] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 682.700964][ T4289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.709955][ T4289] usb 5-1: Product: syz [ 682.714880][ T4289] usb 5-1: Manufacturer: syz [ 682.722915][ T4289] usb 5-1: SerialNumber: syz [ 682.803264][ T4289] usb 5-1: config 0 descriptor?? [ 682.944749][T12768] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2163'. [ 683.030194][ T4289] usb-storage 5-1:0.0: USB Mass Storage device detected [ 683.045253][T12693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.059822][T12693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.074068][T12693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 683.092890][T12693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 683.210026][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.236256][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.247741][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.259035][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.270220][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.281540][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.291433][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.298578][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.309199][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.320715][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.330100][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.340205][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.347385][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.367730][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.385003][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 683.404447][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 683.425884][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.442099][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.451764][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.466478][T12693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.477668][T12693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.490741][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.500456][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.509286][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.519640][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.528671][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.542640][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.571456][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 683.878580][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 683.890508][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 683.917820][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.988586][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 684.007542][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 684.061579][T12693] device veth0_vlan entered promiscuous mode [ 684.098023][T12693] device veth1_vlan entered promiscuous mode [ 684.137350][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 684.155060][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 684.173218][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 684.186040][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 684.198061][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 684.214982][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 684.900210][T12693] device veth0_macvtap entered promiscuous mode [ 684.912318][T12693] device veth1_macvtap entered promiscuous mode [ 684.942549][T10686] usb 5-1: USB disconnect, device number 10 [ 684.960827][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 684.981985][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.022710][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 685.073916][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 685.094576][ T26] audit: type=1326 audit(1732013205.195:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.4.2175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0757e759 code=0x0 [ 685.103979][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.137572][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.150779][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.168645][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.179128][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.198200][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.258518][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.304817][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.314968][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.326009][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.337550][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.346136][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 685.375758][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.408167][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.815275][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 685.816461][ T26] audit: type=1326 audit(1732013205.915:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.5.2177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f441d37e759 code=0x0 [ 685.857397][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.868129][T12803] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2177'. [ 685.887297][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.132644][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 686.152128][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 686.165386][T12807] lo speed is unknown, defaulting to 1000 [ 686.176004][T12693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.214031][T12693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.223024][T12693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.231880][T12693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.376294][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.392192][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.520447][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 687.532138][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.573492][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.636790][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 687.891619][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 688.571605][ T4290] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 688.640461][T12848] sp0: Synchronizing with TNC [ 688.794837][ T4290] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 688.812152][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.820432][ T4290] usb 5-1: Product: syz [ 688.830767][ T4290] usb 5-1: Manufacturer: syz [ 688.837494][ T4290] usb 5-1: SerialNumber: syz [ 688.870018][ T4290] usb 5-1: config 0 descriptor?? [ 689.091509][ T4290] usb-storage 5-1:0.0: USB Mass Storage device detected [ 689.527982][ T26] audit: type=1326 audit(1732013209.625:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12862 comm="syz.1.2197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d3b7e759 code=0x0 [ 690.672480][T12843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 690.693892][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.700243][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.717861][ T4289] usb 5-1: USB disconnect, device number 11 [ 692.364950][T12899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2210'. [ 692.470301][T12903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2211'. [ 693.155124][T12911] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2214'. [ 694.504296][ T26] audit: type=1326 audit(1732013214.585:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12922 comm="syz.0.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc791f7e759 code=0x0 [ 694.756213][T12112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.948066][T12932] lo speed is unknown, defaulting to 1000 [ 695.088569][T12928] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2220'. [ 695.126409][T12112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.186727][T12112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.299725][T12112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.198156][T12112] device hsr_slave_0 left promiscuous mode [ 696.204709][T12112] device hsr_slave_1 left promiscuous mode [ 696.210970][T12112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.218641][T12112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.229144][T12112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.236623][T12112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.248467][T12112] device bridge_slave_1 left promiscuous mode [ 696.254839][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.263554][T12112] device bridge_slave_0 left promiscuous mode [ 696.269717][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.292702][T12112] device veth1_macvtap left promiscuous mode [ 696.298776][T12112] device veth0_macvtap left promiscuous mode [ 696.305005][T12112] device veth1_vlan left promiscuous mode [ 696.310786][T12112] device veth0_vlan left promiscuous mode [ 696.707686][T12112] team0 (unregistering): Port device team_slave_1 removed [ 696.745165][T12112] team0 (unregistering): Port device team_slave_0 removed [ 696.779462][T12112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.820173][T12112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.378292][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2226'. [ 697.431888][T12112] bond0 (unregistering): Released all slaves [ 697.544576][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.554811][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.564398][T12946] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 697.572497][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.581291][T12946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 697.591259][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.599649][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 697.607462][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.659582][T12952] device syzkaller0 entered promiscuous mode [ 697.753845][T12956] lo speed is unknown, defaulting to 1000 [ 698.981008][T12976] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2231'. [ 699.653248][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 701.299747][T12991] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2233'. [ 701.477207][T12990] lo speed is unknown, defaulting to 1000 [ 701.749145][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 701.989338][T12956] chnl_net:caif_netlink_parms(): no params data found [ 702.135068][ T7935] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 702.192844][T12956] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.200187][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.209004][T12956] device bridge_slave_0 entered promiscuous mode [ 702.218277][T12956] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.226838][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.235462][T12956] device bridge_slave_1 entered promiscuous mode [ 702.281943][T12956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.300284][T12956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.120409][ T7935] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 703.129623][ T7935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.138316][ T7935] usb 2-1: Product: syz [ 703.142785][ T7935] usb 2-1: Manufacturer: syz [ 703.147402][ T7935] usb 2-1: SerialNumber: syz [ 703.155006][ T7935] usb 2-1: config 0 descriptor?? [ 703.173171][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'. [ 703.196793][T12956] team0: Port device team_slave_0 added [ 703.214614][T12956] team0: Port device team_slave_1 added [ 703.259901][T12956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.267808][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.295646][T12956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.416890][ T7935] usb-storage 2-1:0.0: USB Mass Storage device detected [ 703.513746][T13024] device syzkaller0 entered promiscuous mode [ 703.541343][T12956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.548355][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.603679][T12956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.673028][T13030] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2244'. [ 703.822423][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 704.666055][ T22] usb 2-1: USB disconnect, device number 20 [ 705.088734][T13043] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2249'. [ 705.891604][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 706.745010][T13042] lo speed is unknown, defaulting to 1000 [ 706.892757][T12956] device hsr_slave_0 entered promiscuous mode [ 706.922114][T12956] device hsr_slave_1 entered promiscuous mode [ 706.932175][T12956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.950517][T12956] Cannot create hsr debugfs directory [ 707.971438][ T4262] Bluetooth: hci1: command 0x0411 tx timeout [ 709.854179][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 710.458116][ T22] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 710.500697][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.537821][ T22] usb 2-1: Product: syz [ 710.577924][ T22] usb 2-1: Manufacturer: syz [ 710.584343][ T22] usb 2-1: SerialNumber: syz [ 710.591030][ T22] usb 2-1: config 0 descriptor?? [ 710.732966][T13096] lo speed is unknown, defaulting to 1000 [ 710.926046][T13096] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2264'. [ 711.337848][ T22] usb-storage 2-1:0.0: USB Mass Storage device detected [ 711.548718][T13100] device syzkaller0 entered promiscuous mode [ 711.569211][ T22] usb 2-1: USB disconnect, device number 21 [ 711.581019][T12506] udevd[12506]: setting owner of /dev/bus/usb/002/021 to uid=0, gid=0 failed: No such file or directory [ 712.352982][T13114] netlink: 'syz.4.2270': attribute type 2 has an invalid length. [ 712.360752][T13114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2270'. [ 714.107147][T12956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.177164][T12956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.221769][T12956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.252583][T12956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 715.544018][T12956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.663598][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 715.707769][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 715.757799][T12956] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.785204][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 715.796390][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 715.805845][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.812975][ T4460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.834129][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 715.931615][T13152] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2279'. [ 716.580793][ T7936] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 716.605596][T13151] lo speed is unknown, defaulting to 1000 [ 717.458986][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 717.484478][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 717.662164][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.669333][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.906930][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.040319][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.175061][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 718.225353][ T7936] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 718.238178][ T7936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.246411][ T7936] usb 2-1: Product: syz [ 718.250592][ T7936] usb 2-1: Manufacturer: syz [ 718.252283][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 718.255939][ T7936] usb 2-1: SerialNumber: syz [ 718.277849][ T7936] usb 2-1: config 0 descriptor?? [ 718.285550][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 718.306998][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 718.316444][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 718.339767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 718.352942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.365688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 718.374951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.384238][T13175] netlink: 'syz.5.2286': attribute type 2 has an invalid length. [ 718.394484][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2286'. [ 718.413092][T12956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 718.468890][ T7936] usb-storage 2-1:0.0: USB Mass Storage device detected [ 718.570375][ T7936] usb 2-1: USB disconnect, device number 22 [ 718.747789][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 718.756067][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.772571][T12956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.840492][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.858941][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.885688][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.902558][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.920153][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.930262][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.942428][T12956] device veth0_vlan entered promiscuous mode [ 718.973527][T12956] device veth1_vlan entered promiscuous mode [ 719.002860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 719.014063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 719.086208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 719.100153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.187333][T12956] device veth0_macvtap entered promiscuous mode [ 719.209538][T12956] device veth1_macvtap entered promiscuous mode [ 719.228889][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.241405][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.253301][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.264660][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.373399][T13202] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2292'. [ 719.431500][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.575224][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.747280][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.866624][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.885547][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.941247][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.983359][T12956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.006051][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 720.022076][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 721.540428][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 721.624966][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 721.682724][T12956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.703484][T12956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.722512][T12956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.746179][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 721.763103][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 721.790377][T12956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.807338][T12956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.818551][T12956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.835004][T12956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.873769][T13230] netlink: 'syz.4.2304': attribute type 2 has an invalid length. [ 721.881984][T13230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2304'. [ 722.132575][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.149608][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.172229][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 722.197713][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.206732][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.218610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 724.671785][T13273] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2315'. [ 725.243268][T13272] lo speed is unknown, defaulting to 1000 [ 725.396105][ T4244] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 725.443580][T13277] netlink: 'syz.5.2319': attribute type 2 has an invalid length. [ 725.451631][T13277] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2319'. [ 725.587285][ T4244] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 725.601385][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.614943][ T4244] usb 2-1: Product: syz [ 725.619160][ T4244] usb 2-1: Manufacturer: syz [ 725.625124][ T4244] usb 2-1: SerialNumber: syz [ 725.637307][ T4244] usb 2-1: config 0 descriptor?? SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=462 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 725.873541][ T4244] usb-storage 2-1:0.0: USB Mass Storage device detected [ 726.334139][ T4244] usb 2-1: USB disconnect, device number 23 [ 726.393485][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.616939][T13283] device syz_tun left promiscuous mode [ 726.750851][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.817718][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.883485][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.749395][ T11] device hsr_slave_0 left promiscuous mode [ 727.755855][ T11] device hsr_slave_1 left promiscuous mode [ 727.762424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.769841][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.778131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.786141][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.793943][ T11] device bridge_slave_1 left promiscuous mode [ 727.800934][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.809788][ T11] device bridge_slave_0 left promiscuous mode [ 727.816959][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.839980][ T11] device veth1_macvtap left promiscuous mode [ 727.846052][ T11] device veth0_macvtap left promiscuous mode [ 727.852519][ T11] device veth1_vlan left promiscuous mode [ 727.858325][ T11] device veth0_vlan left promiscuous mode [ 728.252138][ T11] team0 (unregistering): Port device team_slave_1 removed [ 728.290398][ T11] team0 (unregistering): Port device team_slave_0 removed [ 728.333386][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.373679][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.788626][ T11] bond0 (unregistering): Released all slaves [ 729.244996][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.318724][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.405607][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.458084][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.580145][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.647184][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.706896][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.744501][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.686962][ T11] device wlan0 left promiscuous mode [ 730.694383][ T11] bridge0: port 3(vlan0) entered disabled state [ 730.735339][ T11] device vlan0 left promiscuous mode [ 730.740703][ T11] bridge0: port 3(vlan0) entered disabled state [ 730.988508][ T11] device batadv_slave_0 left promiscuous mode [ 730.997518][ T11] device hsr_slave_0 left promiscuous mode [ 731.004100][ T11] device hsr_slave_1 left promiscuous mode [ 731.010342][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.017884][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.026831][ T11] device bridge_slave_1 left promiscuous mode [ 731.033136][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.041011][ T11] device bridge_slave_0 left promiscuous mode [ 731.047350][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.058225][ T11] device hsr_slave_0 left promiscuous mode [ 731.066915][ T11] device hsr_slave_1 left promiscuous mode [ 731.075473][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.082993][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.090641][ T11] device bridge_slave_1 left promiscuous mode [ 731.097081][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.105323][ T11] device bridge_slave_0 left promiscuous mode [ 731.111570][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.140579][ T11] device veth1_macvtap left promiscuous mode [ 731.146672][ T11] device veth0_macvtap left promiscuous mode [ 731.152782][ T11] device veth1_vlan left promiscuous mode [ 731.158524][ T11] device veth0_vlan left promiscuous mode [ 731.166691][ T11] device veth1_macvtap left promiscuous mode [ 731.172772][ T11] device veth0_macvtap left promiscuous mode [ 731.178817][ T11] device veth1_vlan left promiscuous mode [ 731.184750][ T11] device veth0_vlan left promiscuous mode [ 731.579130][ T11] team0 (unregistering): Port device team_slave_1 removed [ 731.620121][ T11] team0 (unregistering): Port device team_slave_0 removed [ 731.661015][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.698939][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.074699][ T11] bond0 (unregistering): Released all slaves [ 732.407425][ T11] team0 (unregistering): Port device team_slave_1 removed [ 732.448797][ T11] team0 (unregistering): Port device team_slave_0 removed [ 732.485764][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.520929][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.882264][ T11] bond0 (unregistering): Released all slaves