Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/08/23 04:42:40 fuzzer started 2020/08/23 04:42:41 dialing manager at 10.128.0.26:37207 2020/08/23 04:42:41 syscalls: 3309 2020/08/23 04:42:41 code coverage: enabled 2020/08/23 04:42:41 comparison tracing: enabled 2020/08/23 04:42:41 extra coverage: enabled 2020/08/23 04:42:41 setuid sandbox: enabled 2020/08/23 04:42:41 namespace sandbox: enabled 2020/08/23 04:42:41 Android sandbox: enabled 2020/08/23 04:42:41 fault injection: enabled 2020/08/23 04:42:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/23 04:42:41 net packet injection: enabled 2020/08/23 04:42:41 net device setup: enabled 2020/08/23 04:42:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/23 04:42:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/23 04:42:41 USB emulation: enabled 2020/08/23 04:42:41 hci packet injection: enabled 04:45:26 executing program 0: syzkaller login: [ 330.732044][ T28] audit: type=1400 audit(1598157926.933:8): avc: denied { execmem } for pid=8489 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 332.237479][ T8490] IPVS: ftp: loaded support on port[0] = 21 [ 332.729340][ T8490] chnl_net:caif_netlink_parms(): no params data found [ 332.942145][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.949637][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.959246][ T8490] device bridge_slave_0 entered promiscuous mode [ 332.982141][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.989864][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.999610][ T8490] device bridge_slave_1 entered promiscuous mode [ 333.050051][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.067087][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.116904][ T8490] team0: Port device team_slave_0 added [ 333.130207][ T8490] team0: Port device team_slave_1 added [ 333.176095][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.183369][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.209485][ T8490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.226610][ T8490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.234719][ T8490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.260848][ T8490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.325876][ T8490] device hsr_slave_0 entered promiscuous mode [ 333.336906][ T8490] device hsr_slave_1 entered promiscuous mode [ 333.669943][ T8490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.686960][ T8490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.707872][ T8490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.726079][ T8490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.024773][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.060304][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.069442][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.091632][ T8490] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.116104][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.126346][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.135759][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.143382][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.156247][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.184107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.193376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.202953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.210216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.220145][ T3740] Bluetooth: hci0: command 0x0409 tx timeout [ 334.280882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.292074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.302955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.313614][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.323983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.334527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.362245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.383599][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.393036][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.424951][ T8490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.438291][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.451632][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.461507][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.519384][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.527067][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.560986][ T8490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.624520][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.634800][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.697514][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.707645][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.731352][ T8490] device veth0_vlan entered promiscuous mode [ 334.740275][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.749362][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.785346][ T8490] device veth1_vlan entered promiscuous mode [ 334.861160][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.870926][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.880323][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.890308][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.913266][ T8490] device veth0_macvtap entered promiscuous mode [ 334.935203][ T8490] device veth1_macvtap entered promiscuous mode [ 334.996343][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.004832][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.014256][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.023689][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.034055][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.063446][ T8490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.075400][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.085301][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:45:31 executing program 0: 04:45:31 executing program 0: 04:45:32 executing program 0: 04:45:32 executing program 0: 04:45:32 executing program 0: [ 336.300355][ T8711] Bluetooth: hci0: command 0x041b tx timeout 04:45:32 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x904001, &(0x7f0000000880)={[{@commit={'commit'}}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000150a010200000000000000000c00000a08000340000000090c00064000000000000000040c00064000000000000000050900020073797a300000000009000205b4797a32000000000c00064000000000000000020900010073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 336.882291][ T8732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=8732 comm=syz-executor.0 04:45:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x400, {0x0, {0x0, 0xfff}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xa9e, 0x0, 0x1, 0x4000000000000400, 0x0, 0x42c8, 0x0, 0x0, 0x1}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r2}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) get_robust_list(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_matches\x00') syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3f, 0x62, 0x3f, 0x1f, 0x0, 0x8, 0x1c655, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xcf3, 0x76f}, 0x0, 0x1, 0x800a8, 0x7, 0x2, 0x9, 0x8}, r3, 0x3, r5, 0xe) 04:45:34 executing program 0: syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="cd", 0x1, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="6d3402f664b4900e32d5cfab1fda0f3732d4a4874227575e470fd781c1484f186f6d31b631641fdb036478beeeb811476ce972298ac5c70ec79f69c027ced86464ae89f4e7f390583bf726e55dc45ffc44427db48ec72345cc1ba0c617c066359faaf73c17e12013600126b54a01", 0x6e, r0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x7, 0x1, 0x3}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="da0150e9fa"]}) [ 338.368967][ T8711] Bluetooth: hci0: command 0x040f tx timeout [ 338.568888][ T8702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 338.809305][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 338.969618][ T8702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.049661][ T8702] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 339.062766][ T8702] usb 1-1: config 1 interface 0 has no altsetting 0 [ 339.229206][ T8702] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 339.238584][ T8702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.246652][ T8702] usb 1-1: Product: syz [ 339.251517][ T8702] usb 1-1: Manufacturer: syz [ 339.256192][ T8702] usb 1-1: SerialNumber: syz [ 339.553023][ T8702] usb 1-1: USB disconnect, device number 2 04:45:36 executing program 1: ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000000)) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x1b}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8841}, 0x4004006) syncfs(r0) write$midi(r0, &(0x7f0000000240)="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", 0x1000) r2 = open_tree(r0, &(0x7f0000001240)='./file0\x00', 0x88000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001680)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000001300)={0x30c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x130a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe5, 0x3, "1f7840e7ac71fe0c57dff50ac376ac5934ef50d29b65c7d7cd536b28ededb77270838fb14f1ae952cc5786fd368defb593cc44fb73e37037661d6c463bb3e0c2da2fe21299004e670af9d0474f34c6ead3f7a1a0f4177271abe282fa537d9d7f0446a6c47bce4808f6c09bf983f84ee245734d25e53bc7e0bc879791b759cc2f62ea436af465e1a29b958cb900c4db7ae2031f8b2e3e761be2fb268cafcbd6c26209d5a720ae767bba6167bd6a92f3b9eef6ab947ad9e9646f2f41fdc794c0d85215043916ed17fffc6ddf50d8b699c7f86b770b07cda3fb875af052145275df06"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "bbb015fdda71dc3d771a40ec6fcba76595072163f3802073fe203c4916"}}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x190000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x351cae49}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x30c}}, 0x200c041) r4 = signalfd(r0, &(0x7f00000016c0)={[0x9]}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740)='devlink\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000003880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x80, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0xc01) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f00000038c0), &(0x7f0000003900)=0x4) openat$md(0xffffff9c, &(0x7f0000003940)='/dev/md0\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000039c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x2c, r7, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xcf1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x80}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x1) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000003ac0), &(0x7f0000003b00)=0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x40, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x8, 0x1, '!{!\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, '\\)(\'\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x58010) [ 340.450377][ T8711] Bluetooth: hci0: command 0x0419 tx timeout [ 340.549831][ T8702] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 340.789444][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 340.949103][ T8702] usb 1-1: unable to get BOS descriptor or descriptor too short 04:45:37 executing program 0: syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="cd", 0x1, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="6d3402f664b4900e32d5cfab1fda0f3732d4a4874227575e470fd781c1484f186f6d31b631641fdb036478beeeb811476ce972298ac5c70ec79f69c027ced86464ae89f4e7f390583bf726e55dc45ffc44427db48ec72345cc1ba0c617c066359faaf73c17e12013600126b54a01", 0x6e, r0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x7, 0x1, 0x3}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="da0150e9fa"]}) [ 341.108499][ T8702] usb 1-1: unable to read config index 0 descriptor/all [ 341.115682][ T8702] usb 1-1: can't read configurations, error -71 [ 341.818960][ T8702] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.032682][ T8768] IPVS: ftp: loaded support on port[0] = 21 [ 342.070195][ T8702] usb 1-1: Using ep0 maxpacket: 16 [ 342.299525][ T8702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.382051][ T8702] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.395193][ T8702] usb 1-1: config 1 interface 0 has no altsetting 0 [ 342.602427][ T8702] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 342.611790][ T8702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.620739][ T8702] usb 1-1: Product: syz [ 342.624994][ T8702] usb 1-1: Manufacturer: syz [ 342.629828][ T8702] usb 1-1: SerialNumber: syz [ 342.756844][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 342.948701][ T8702] usb 1-1: USB disconnect, device number 4 [ 343.012484][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.020956][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.030555][ T8768] device bridge_slave_0 entered promiscuous mode [ 343.071242][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.079567][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.089132][ T8768] device bridge_slave_1 entered promiscuous mode [ 343.161734][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.180663][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.235824][ T8768] team0: Port device team_slave_0 added [ 343.250705][ T8768] team0: Port device team_slave_1 added [ 343.303209][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.310578][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.337836][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.357095][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.364420][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.392025][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.457844][ T8768] device hsr_slave_0 entered promiscuous mode [ 343.468723][ T8768] device hsr_slave_1 entered promiscuous mode [ 343.477597][ T8768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.485517][ T8768] Cannot create hsr debugfs directory 04:45:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x2b000}], 0x4, 0x402400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='numa_maps\x00') write$9p(r1, &(0x7f0000000240)="691a7cecd79f7b578f0e18156816639733", 0x11) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xd75f, 0x6]) [ 343.892225][ T8768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.912215][ T8768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.947309][ T8768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.968221][ T8711] Bluetooth: hci1: command 0x0409 tx timeout [ 344.012406][ T8768] netdevsim netdevsim1 netdevsim3: renamed from eth3 04:45:40 executing program 0: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800e076000000000c0000000c000000030000ca00002df1e183002402000000000013ca94c997f4f769acf01e1b591f2ee922a7cf735d117941ac4fcbfcf5c6a77e2c896fdb5d9185f443a12e7f4fea49659219bcb4a6f1b1d8bdd6727a62d01c0511fac67bd436feb6cdcd4c65c3c79158bbdd8b3fc2294ecf94cee336f0781e43500151b75e1d9b89b563a295cd5932434da9e4f577afca38dbfdf30c98dcb76099a00a1de6294dbea2ae82180ed371c908aac5cfbbd1f463bb8c48752c2a717051d86d33a5c69b02d3aa3054bf464adbb777db6fefd551001eed748a5bf5077ed4dc4ff96b1aeed86802af489ffa65fa6f3452f0c6129501bcff83aa1a1285c826f9a026"], &(0x7f0000004600)=""/200, 0x26, 0xffffffffffffff03, 0x8}, 0x20) 04:45:40 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2880, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r5, 0x0, 0x20000080000001) [ 344.658372][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.701470][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.721302][ T9021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=9021 comm=syz-executor.0 [ 344.779238][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.788838][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.811960][ T9022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=9022 comm=syz-executor.0 [ 344.840061][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.901752][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.911450][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.920718][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.927997][ T8712] bridge0: port 1(bridge_slave_0) entered forwarding state 04:45:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) [ 345.006595][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.016079][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.026024][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.035352][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.042633][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.068952][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.086661][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.132710][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.143262][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.199544][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.209489][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.220096][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 04:45:41 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000340)={0xe2, 0x0, 0x5, 0x1, "6f5849688c5c865bb5eb566ab931c04e7ca52cfe314fe2dbce4b5ada2fcae0dfd428156a1bf00e80c63fd22b606214bb3a09022a0374af20ed7725b3f93027e17953893e0285a9c68ca3d44d28c1fc2a3f3b9ee1f5d727202f85b831bb460b2d1847076e3cddfb4e6831f754cd82ddce4f5d171924406e38f39c4c93f849421edc59f3fe9cd4720a08a4fa138d0b14e23b35598c7023d6a1c0ef04c5437607345b6593388a145e6b5b4d9bb031590420ca89b30a3142b6d370450cc20befffd1f649b5bfe642bab7a00c"}) [ 345.296787][ T8768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.307929][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.322182][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.332023][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.342277][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.352044][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.436988][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.446227][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.454969][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.478595][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.507298][ T9028] tipc: Started in network mode [ 345.512730][ T9028] tipc: Own node identity aaaaaaaaaa31, cluster identity 4711 [ 345.521451][ T9028] tipc: Enabled bearer , priority 10 [ 345.553661][ T9029] tipc: Enabling of bearer rejected, already enabled 04:45:41 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000340)={0xe2, 0x0, 0x5, 0x1, "6f5849688c5c865bb5eb566ab931c04e7ca52cfe314fe2dbce4b5ada2fcae0dfd428156a1bf00e80c63fd22b606214bb3a09022a0374af20ed7725b3f93027e17953893e0285a9c68ca3d44d28c1fc2a3f3b9ee1f5d727202f85b831bb460b2d1847076e3cddfb4e6831f754cd82ddce4f5d171924406e38f39c4c93f849421edc59f3fe9cd4720a08a4fa138d0b14e23b35598c7023d6a1c0ef04c5437607345b6593388a145e6b5b4d9bb031590420ca89b30a3142b6d370450cc20befffd1f649b5bfe642bab7a00c"}) [ 345.656183][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.666604][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.763161][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.772765][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.829162][ T8768] device veth0_vlan entered promiscuous mode [ 345.841927][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.851258][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.891673][ T9033] tipc: Enabling of bearer rejected, already enabled [ 345.926452][ T8768] device veth1_vlan entered promiscuous mode 04:45:42 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000340)={0xe2, 0x0, 0x5, 0x1, "6f5849688c5c865bb5eb566ab931c04e7ca52cfe314fe2dbce4b5ada2fcae0dfd428156a1bf00e80c63fd22b606214bb3a09022a0374af20ed7725b3f93027e17953893e0285a9c68ca3d44d28c1fc2a3f3b9ee1f5d727202f85b831bb460b2d1847076e3cddfb4e6831f754cd82ddce4f5d171924406e38f39c4c93f849421edc59f3fe9cd4720a08a4fa138d0b14e23b35598c7023d6a1c0ef04c5437607345b6593388a145e6b5b4d9bb031590420ca89b30a3142b6d370450cc20befffd1f649b5bfe642bab7a00c"}) [ 346.050998][ T8712] Bluetooth: hci1: command 0x041b tx timeout [ 346.113717][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.123503][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.149437][ T8768] device veth0_macvtap entered promiscuous mode [ 346.196337][ T8768] device veth1_macvtap entered promiscuous mode [ 346.300603][ T9036] tipc: Enabling of bearer rejected, already enabled [ 346.313596][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 346.324337][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.338937][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.355954][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.365583][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.375173][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.385142][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.422235][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 346.433480][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.447254][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.463430][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.473808][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:45:42 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000340)={0xe2, 0x0, 0x5, 0x1, "6f5849688c5c865bb5eb566ab931c04e7ca52cfe314fe2dbce4b5ada2fcae0dfd428156a1bf00e80c63fd22b606214bb3a09022a0374af20ed7725b3f93027e17953893e0285a9c68ca3d44d28c1fc2a3f3b9ee1f5d727202f85b831bb460b2d1847076e3cddfb4e6831f754cd82ddce4f5d171924406e38f39c4c93f849421edc59f3fe9cd4720a08a4fa138d0b14e23b35598c7023d6a1c0ef04c5437607345b6593388a145e6b5b4d9bb031590420ca89b30a3142b6d370450cc20befffd1f649b5bfe642bab7a00c"}) [ 346.641456][ T8715] tipc: 32-bit node address hash set to aaaa9b00 [ 346.727186][ T9039] tipc: Enabling of bearer rejected, already enabled 04:45:43 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 347.148869][ T9046] tipc: Enabling of bearer rejected, already enabled 04:45:43 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) r5 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 347.474472][ T9051] tipc: Started in network mode [ 347.480172][ T9051] tipc: Own node identity aaaaaaaaaa31, cluster identity 4711 [ 347.488133][ T9051] tipc: Enabled bearer , priority 10 04:45:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="616c6c6f6373697a653d4d2c0013d6494004e1078b98f43c8df176dd094a7012ab728c09104053a57fe8b529e9be807f1fdfd3e10590d78393a18ef9fe3ef81a831b66aaeb434ef911ecfc3306f64fd9d81304b093125a97"]) [ 347.683352][ T9055] tipc: Enabling of bearer rejected, already enabled 04:45:44 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7cc8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000003c0)={0x9, "5ca7a199a9cf8d85f5de2db72dae4baaa49f1784ad31ef3b842f5b15c7979e41", 0x2, 0x0, 0x1, 0x2000000, 0x200, 0x2}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf25010000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timerfd_gettime(r7, &(0x7f0000000040)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x335}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x9bf2c}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x55}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x90}}, 0x0) [ 348.129361][ T8711] Bluetooth: hci1: command 0x040f tx timeout [ 348.208964][ T9065] tipc: Enabling of bearer rejected, already enabled 04:45:44 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x501, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8008005}, 0x240008c0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 348.571088][ T9075] tipc: Enabling of bearer rejected, already enabled [ 348.614151][ T8713] tipc: 32-bit node address hash set to aaaa9b00 04:45:44 executing program 1: r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900002001041cc304000000000109022400010000a0000904000001"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32f, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "34f83b2b"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x80, 0x0, "b9c0f98a", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000068"], 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRESOCT, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xb9b5a088c3fa77db}, 0x88084) 04:45:45 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) connect$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) r4 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 348.988219][ T9080] tipc: Enabling of bearer rejected, already enabled 04:45:45 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 349.290143][ T8711] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 349.342088][ T9085] tipc: Enabling of bearer rejected, already enabled 04:45:45 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 349.537973][ T8711] usb 2-1: Using ep0 maxpacket: 32 [ 349.689302][ T8711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.699701][ T8711] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.712935][ T8711] usb 2-1: New USB device found, idVendor=0401, idProduct=c31c, bcdDevice= 0.04 [ 349.722226][ T8711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.746880][ T9089] tipc: Enabling of bearer rejected, already enabled [ 349.876912][ T8711] usb 2-1: config 0 descriptor?? 04:45:46 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 349.922911][ T8711] hub 2-1:0.0: bad descriptor, ignoring hub [ 349.929203][ T8711] hub: probe of 2-1:0.0 failed with error -5 [ 350.123008][ T9078] udc-core: couldn't find an available UDC or it's busy [ 350.130164][ T9078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.154739][ T9096] tipc: Enabling of bearer rejected, already enabled [ 350.207541][ T8711] Bluetooth: hci1: command 0x0419 tx timeout 04:45:46 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 350.525309][ T9100] tipc: Enabling of bearer rejected, already enabled 04:45:46 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 350.734359][ T9103] tipc: Enabling of bearer rejected, already enabled 04:45:47 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 351.012926][ T9108] tipc: Enabling of bearer rejected, already enabled 04:45:47 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:47 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:48 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@int=0x40, 0xfffffec7) timer_create(0x1, &(0x7f0000000000)={0x0, 0x22, 0x0, @thr={&(0x7f0000000380)="fe4764ee4d9df662e763c17af22dc59e51df3b1a84c82f7e7b7fc69363fc834c468c8bb5e5af466525ec5a2455252200ef9b021eda5e97ce72ac2f9399dacc821e38a2dcd2d2e32686039b6fc5ca0dc26bf61e6432a786e24185a2c8cefb63198ff0bcb4a003835047be110ef10c79e978dd8ce584999638ee4f9e2f025b8b06ac11435e4de22ceb6f0d4df1805ff2b467baf9fd90032a24aceedd497e2059bce49bf17be5ecbf4fed0ccb2fd8bb8585a8db9ffd4770d9ace8a3eb4395bb0bcd533a", &(0x7f0000000240)="e2c455924c44d56407db73ef975f7d753a620641743c1bad9be29e711904a45b7a7388cfe7bab4bff3c6c16a193daf7cade44bf52f35a1ce3fa9402951986bbcfe838b156c14ff75e703a29a404e8e415b6b30a42550712d9f78b3223c7f45f1ac7b100be4ec70d997c3fbadea0233d912a14d6ee4e60dd5686c8b828d93b6e591c241aeb11e5c713922df1209"}}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r1 = getpid() openat$autofs(0xffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xc3b2b) openat$vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x12, &(0x7f0000000600)={0x14, 0x1, 0x3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$proc_mixer(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="53594e544820274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e2027434420436170747572652720ff303030303030303030303030303030303030300a2b6603504f0a4449474954414c320a50434d20274d6963204361707475726520537769746368272030303030303030303031303030303030303030300a"], 0x91) r4 = gettid() wait4(r4, &(0x7f00000000c0), 0x40000009, &(0x7f0000000580)) 04:45:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 352.129521][ T8715] usb 2-1: USB disconnect, device number 2 [ 352.357044][ C1] hrtimer: interrupt took 91842 ns [ 352.369780][ T9125] IPVS: ftp: loaded support on port[0] = 21 04:45:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:49 executing program 0: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@int=0x40, 0xfffffec7) timer_create(0x1, &(0x7f0000000000)={0x0, 0x22, 0x0, @thr={&(0x7f0000000380)="fe4764ee4d9df662e763c17af22dc59e51df3b1a84c82f7e7b7fc69363fc834c468c8bb5e5af466525ec5a2455252200ef9b021eda5e97ce72ac2f9399dacc821e38a2dcd2d2e32686039b6fc5ca0dc26bf61e6432a786e24185a2c8cefb63198ff0bcb4a003835047be110ef10c79e978dd8ce584999638ee4f9e2f025b8b06ac11435e4de22ceb6f0d4df1805ff2b467baf9fd90032a24aceedd497e2059bce49bf17be5ecbf4fed0ccb2fd8bb8585a8db9ffd4770d9ace8a3eb4395bb0bcd533a", &(0x7f0000000240)="e2c455924c44d56407db73ef975f7d753a620641743c1bad9be29e711904a45b7a7388cfe7bab4bff3c6c16a193daf7cade44bf52f35a1ce3fa9402951986bbcfe838b156c14ff75e703a29a404e8e415b6b30a42550712d9f78b3223c7f45f1ac7b100be4ec70d997c3fbadea0233d912a14d6ee4e60dd5686c8b828d93b6e591c241aeb11e5c713922df1209"}}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r1 = getpid() openat$autofs(0xffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xc3b2b) openat$vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x12, &(0x7f0000000600)={0x14, 0x1, 0x3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$proc_mixer(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="53594e544820274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e2027434420436170747572652720ff303030303030303030303030303030303030300a2b6603504f0a4449474954414c320a50434d20274d6963204361707475726520537769746368272030303030303030303031303030303030303030300a"], 0x91) r4 = gettid() wait4(r4, &(0x7f00000000c0), 0x40000009, &(0x7f0000000580)) [ 353.082849][ T9154] IPVS: ftp: loaded support on port[0] = 21 04:45:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) [ 353.420472][ T9179] IPVS: ftp: loaded support on port[0] = 21 04:45:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) 04:45:50 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x2, 0x0) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004f7000/0x4000)=nil, &(0x7f000041b000/0x3000)=nil, &(0x7f000072c000/0x4000)=nil, &(0x7f000040b000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00009b9000/0x4000)=nil, &(0x7f00009b3000/0x4000)=nil, &(0x7f0000000240)="18bdfd0110c88c31487d97754256fdcd557c9a11a4b7290e7b0c2dcf6c028e303db50082b5f065c97dd9d304553e1212821458e3ad24f7d3697d2228a71d70344c910165c03369621388f3591200e9230f672f93a473e4d8e4ed4d443f4d2cc9af890e142f6952b4d6873e479c2849abe9a2a3ac06907073072532f2359c338f18d20e52952d51759261825d1b01e87f21140323071d6bf580cec3f689cb5bf3d3fd87", 0xa3, r2}, 0x64) shutdown(r0, 0x1) [ 354.216687][ T8555] tipc: TX() has been purged, node left! 04:45:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x2, 0x0) 04:45:50 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x6c, 0x2e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xd}, {0xfff1, 0x2}, {0x7, 0xf}}, [{0x8, 0xb, 0x2f}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xec}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x401}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004041}, 0x801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xffffffffffffffd8, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:45:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x2, 0x0) [ 354.908707][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.932342][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.993221][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.003193][ T9225] ===================================================== [ 355.010245][ T9225] BUG: KMSAN: uninit-value in __nla_validate_parse+0x642/0x46e0 [ 355.017876][ T9225] CPU: 0 PID: 9225 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 355.026445][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.036489][ T9225] Call Trace: [ 355.039922][ T9225] dump_stack+0x21c/0x280 [ 355.044287][ T9225] kmsan_report+0xf7/0x1e0 [ 355.048700][ T9225] __msan_warning+0x58/0xa0 [ 355.053231][ T9225] __nla_validate_parse+0x642/0x46e0 [ 355.058536][ T9225] __nla_parse+0x141/0x150 [ 355.063002][ T9225] fl_set_erspan_opt+0x37a/0xdf0 [ 355.067942][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.073741][ T9225] fl_set_key+0x7e8c/0xb590 [ 355.078279][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.083469][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.089325][ T9225] fl_change+0x13b9/0x7f80 [ 355.093736][ T9225] ? kmsan_set_origin_checked+0x95/0xf0 [ 355.099325][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.104517][ T9225] ? idr_find+0x9a/0xc0 [ 355.108683][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.113950][ T9225] tc_new_tfilter+0x370e/0x5940 [ 355.118828][ T9225] ? fl_put+0x50/0x50 [ 355.122844][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.128662][ T9225] ? tcf_gate_entry_destructor+0x40/0x40 [ 355.134318][ T9225] rtnetlink_rcv_msg+0xea0/0x18c0 [ 355.139370][ T9225] ? xmit_one+0x514/0x750 [ 355.143737][ T9225] ? __local_bh_enable_ip+0x97/0x1d0 [ 355.149101][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.154314][ T9225] ? local_bh_enable+0x36/0x40 [ 355.159071][ T9225] ? __dev_queue_xmit+0x41a8/0x4470 [ 355.164261][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.170067][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.175272][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.180462][ T9225] ? kmsan_set_origin_checked+0x95/0xf0 [ 355.186002][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.191194][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.197047][ T9225] netlink_rcv_skb+0x6d7/0x7e0 [ 355.201810][ T9225] ? rtnetlink_bind+0x140/0x140 [ 355.206659][ T9225] rtnetlink_rcv+0x50/0x60 [ 355.211071][ T9225] netlink_unicast+0x11c8/0x1490 [ 355.216004][ T9225] ? rtnetlink_net_exit+0x90/0x90 [ 355.221030][ T9225] netlink_sendmsg+0x173a/0x1840 [ 355.226019][ T9225] ____sys_sendmsg+0xc82/0x1240 [ 355.230877][ T9225] ? netlink_getsockopt+0x17e0/0x17e0 [ 355.236244][ T9225] __sys_sendmmsg+0x808/0xf70 [ 355.240945][ T9225] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 355.246829][ T9225] ? __msan_poison_alloca+0xf0/0x120 [ 355.252163][ T9225] ? _copy_to_user+0x1bf/0x260 [ 355.256966][ T9225] ? put_old_timespec32+0x231/0x2d0 [ 355.262157][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.267369][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.272560][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.277794][ T9225] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 355.283166][ T9225] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 355.288714][ T9225] __do_fast_syscall_32+0x2af/0x480 [ 355.293947][ T9225] do_fast_syscall_32+0x6b/0xd0 [ 355.298794][ T9225] do_SYSENTER_32+0x73/0x90 [ 355.303329][ T9225] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 355.309643][ T9225] RIP: 0023:0xf7f4a549 [ 355.313696][ T9225] Code: Bad RIP value. [ 355.317757][ T9225] RSP: 002b:00000000f55230cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 355.326157][ T9225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 355.334135][ T9225] RDX: 00000000675dec16 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.342113][ T9225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.350086][ T9225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.358049][ T9225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.366020][ T9225] [ 355.368333][ T9225] Uninit was created at: [ 355.372599][ T9225] kmsan_internal_poison_shadow+0x66/0xd0 [ 355.378307][ T9225] kmsan_slab_alloc+0x8a/0xe0 [ 355.383045][ T9225] __kmalloc_node_track_caller+0xeab/0x12e0 [ 355.388930][ T9225] __alloc_skb+0x35f/0xb30 [ 355.393335][ T9225] netlink_sendmsg+0xdb9/0x1840 [ 355.398171][ T9225] ____sys_sendmsg+0xc82/0x1240 [ 355.403011][ T9225] __sys_sendmmsg+0x808/0xf70 [ 355.407698][ T9225] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 355.413163][ T9225] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 355.418713][ T9225] __do_fast_syscall_32+0x2af/0x480 [ 355.423911][ T9225] do_fast_syscall_32+0x6b/0xd0 [ 355.429021][ T9225] do_SYSENTER_32+0x73/0x90 [ 355.433515][ T9225] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 355.439860][ T9225] ===================================================== [ 355.446781][ T9225] Disabling lock debugging due to kernel taint [ 355.452917][ T9225] Kernel panic - not syncing: panic_on_warn set ... [ 355.459502][ T9225] CPU: 0 PID: 9225 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 355.469463][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.479600][ T9225] Call Trace: [ 355.482908][ T9225] dump_stack+0x21c/0x280 [ 355.487286][ T9225] panic+0x4d7/0xef7 [ 355.491222][ T9225] ? add_taint+0x17c/0x210 [ 355.495638][ T9225] kmsan_report+0x1df/0x1e0 [ 355.500136][ T9225] __msan_warning+0x58/0xa0 [ 355.504635][ T9225] __nla_validate_parse+0x642/0x46e0 [ 355.509944][ T9225] __nla_parse+0x141/0x150 [ 355.514360][ T9225] fl_set_erspan_opt+0x37a/0xdf0 [ 355.519304][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.525104][ T9225] fl_set_key+0x7e8c/0xb590 [ 355.529617][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.534850][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.540650][ T9225] fl_change+0x13b9/0x7f80 [ 355.545132][ T9225] ? kmsan_set_origin_checked+0x95/0xf0 [ 355.550713][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.555920][ T9225] ? idr_find+0x9a/0xc0 [ 355.560078][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.565273][ T9225] tc_new_tfilter+0x370e/0x5940 [ 355.570135][ T9225] ? fl_put+0x50/0x50 [ 355.574144][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.579941][ T9225] ? tcf_gate_entry_destructor+0x40/0x40 [ 355.585580][ T9225] rtnetlink_rcv_msg+0xea0/0x18c0 [ 355.590603][ T9225] ? xmit_one+0x514/0x750 [ 355.594928][ T9225] ? __local_bh_enable_ip+0x97/0x1d0 [ 355.600207][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.605505][ T9225] ? local_bh_enable+0x36/0x40 [ 355.610282][ T9225] ? __dev_queue_xmit+0x41a8/0x4470 [ 355.615476][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.621289][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.626510][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.631702][ T9225] ? kmsan_set_origin_checked+0x95/0xf0 [ 355.637243][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.642453][ T9225] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.648252][ T9225] netlink_rcv_skb+0x6d7/0x7e0 [ 355.653013][ T9225] ? rtnetlink_bind+0x140/0x140 [ 355.657867][ T9225] rtnetlink_rcv+0x50/0x60 [ 355.662364][ T9225] netlink_unicast+0x11c8/0x1490 [ 355.667315][ T9225] ? rtnetlink_net_exit+0x90/0x90 [ 355.672349][ T9225] netlink_sendmsg+0x173a/0x1840 [ 355.677297][ T9225] ____sys_sendmsg+0xc82/0x1240 [ 355.682149][ T9225] ? netlink_getsockopt+0x17e0/0x17e0 [ 355.687528][ T9225] __sys_sendmmsg+0x808/0xf70 [ 355.692213][ T9225] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 355.698094][ T9225] ? __msan_poison_alloca+0xf0/0x120 [ 355.703383][ T9225] ? _copy_to_user+0x1bf/0x260 [ 355.708154][ T9225] ? put_old_timespec32+0x231/0x2d0 [ 355.713345][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.718535][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.723751][ T9225] ? kmsan_get_metadata+0x116/0x180 [ 355.728947][ T9225] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 355.734318][ T9225] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 355.739857][ T9225] __do_fast_syscall_32+0x2af/0x480 [ 355.745054][ T9225] do_fast_syscall_32+0x6b/0xd0 [ 355.749898][ T9225] do_SYSENTER_32+0x73/0x90 [ 355.754397][ T9225] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 355.760723][ T9225] RIP: 0023:0xf7f4a549 [ 355.764794][ T9225] Code: Bad RIP value. [ 355.768844][ T9225] RSP: 002b:00000000f55230cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 355.777249][ T9225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 355.785326][ T9225] RDX: 00000000675dec16 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.793305][ T9225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.801283][ T9225] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.809246][ T9225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.818502][ T9225] Kernel Offset: disabled [ 355.822847][ T9225] Rebooting in 86400 seconds..