[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. 2020/11/30 10:48:44 fuzzer started 2020/11/30 10:48:45 dialing manager at 10.128.0.26:35669 2020/11/30 10:48:46 syscalls: 3267 2020/11/30 10:48:46 code coverage: enabled 2020/11/30 10:48:46 comparison tracing: enabled 2020/11/30 10:48:46 extra coverage: enabled 2020/11/30 10:48:46 setuid sandbox: enabled 2020/11/30 10:48:46 namespace sandbox: enabled 2020/11/30 10:48:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/30 10:48:46 fault injection: enabled 2020/11/30 10:48:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/30 10:48:46 net packet injection: enabled 2020/11/30 10:48:46 net device setup: enabled 2020/11/30 10:48:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/30 10:48:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/30 10:48:46 USB emulation: enabled 2020/11/30 10:48:46 hci packet injection: enabled 2020/11/30 10:48:46 wifi device emulation: enabled 10:52:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x863}]}) syzkaller login: [ 378.584923][ T8290] IPVS: ftp: loaded support on port[0] = 21 [ 379.135825][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 379.345406][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.352803][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.362583][ T8290] device bridge_slave_0 entered promiscuous mode [ 379.375735][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.383786][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.393523][ T8290] device bridge_slave_1 entered promiscuous mode [ 379.440034][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.456756][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.503311][ T8290] team0: Port device team_slave_0 added [ 379.517041][ T8290] team0: Port device team_slave_1 added [ 379.561361][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.568801][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.595139][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.611793][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.619841][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.646150][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.712161][ T8290] device hsr_slave_0 entered promiscuous mode [ 379.722221][ T8290] device hsr_slave_1 entered promiscuous mode [ 380.010172][ T8290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.069051][ T8290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.088925][ T8290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.114539][ T8290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.445264][ T8290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.481476][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.491504][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.517784][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.526818][ T2090] Bluetooth: hci0: command 0x0409 tx timeout [ 380.551640][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.563659][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.573870][ T2090] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.581151][ T2090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.591859][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.616151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.626253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.635892][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.643273][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.714820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.726170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.737749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.748521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.759134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.769643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.786670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.807217][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.817252][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.853636][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.863583][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.881565][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.937688][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.945850][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.984101][ T8290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.048539][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.058834][ T2090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.120891][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.130794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.153652][ T8290] device veth0_vlan entered promiscuous mode [ 381.161640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.171335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.205165][ T8290] device veth1_vlan entered promiscuous mode [ 381.287626][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.297424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 381.307278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.317495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.341488][ T8290] device veth0_macvtap entered promiscuous mode [ 381.365129][ T8290] device veth1_macvtap entered promiscuous mode [ 381.429377][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.439417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.449152][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.458902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.469186][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.496204][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.508079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.518437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.540772][ T8290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.550318][ T8290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.559583][ T8290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.568653][ T8290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.884573][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.892723][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.907380][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.007349][ T8510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.015574][ T8510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.025958][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:52:29 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 382.403220][ T8535] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 10:52:29 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x86240, 0x0) [ 382.585389][ T7] Bluetooth: hci0: command 0x041b tx timeout 10:52:29 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 10:52:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:52:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) [ 383.178717][ T8547] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 10:52:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r1, 0x8}, &(0x7f00000004c0)=0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000280)=""/237, 0x37, 0x222, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5f}, @call={0x85, 0x0, 0x0, 0x84}, @generic={0x4, 0xa, 0x2, 0x0, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1005, &(0x7f00000005c0)=""/4101, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, 0x0}, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x80000000, 0x80000001}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000240)={0x7, 'bridge_slave_1\x00', {0x4}, 0x5fff}) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) [ 383.483914][ T8550] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 383.501119][ T8550] device gretap0 entered promiscuous mode [ 383.578965][ T8550] device gretap0 left promiscuous mode [ 383.896083][ T8550] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 383.914142][ T8550] device gretap0 entered promiscuous mode [ 383.929094][ T8550] device gretap0 left promiscuous mode 10:52:31 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) rt_sigaction(0x1b, &(0x7f0000002200)={&(0x7f0000002180)="f3afc441b9d8c6660fec87feeffffff247aa0f9cf7c403c14273a7fac401f8115b0fc441a85759c6c4c179d7e88fc800ee311b", 0x5, &(0x7f00000021c0)="6445c3c4817d6fe0c4017d756e0044a5f23e3e42d9e88f49d89896a8d203bef3ae660f3a0a10e1c441fc51e88fa85085720b99", {[0xc]}}, &(0x7f00000022c0)={&(0x7f0000002240)="f30f1b5a0ec4017a114978c403796129fb66420f3831a8f9d287f1f2440f5f5e1e6741845ba8dde2c44179d7d56446dda5ecdf0e9d2e0f51e7", 0x0, &(0x7f0000002280)="f3a7f242986564f30fa6c043d384b200000000c462e1b7d2420f0d413d8fa858cea80010000265f00fba3a0047831889dfde"}, 0x8, &(0x7f0000002300)) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1f78, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "67930047c78e"}]}, @NL80211_ATTR_NAN_FUNC={0x1488, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x454, 0xe, 0x0, 0x1, [{0x9f, 0x0, "b0e41921ebe876d766c8ee4d96f22314e993129d99ddb41bdb138e0b706d15b20a805ec968df7ebfe4436625d2833afc6af3c6b533d3a4142ffdddb3206bc22e05d2997404766ec62854baaf520524cf6d32bbe7b542765ed000d1d5d7aa6d3db6fdf3744919605fd073c472c92bad50ef3acbddb31fe4320a8620a448f07f3a5e3638ff9d26cc54508c925a9c7b3a468b02de8b9eaebd50eb66eb"}, {0xe6, 0x0, "0744817570bee70e1d6ac57ea3537bc2bc8e3bfbc2884f512d9899a342245daa63e1b9628577c5b5099c979bcd5fa36d2de8a35a3657331a3463a9d8e6d61627aa40716a47d09bd69d0143ea811a72259b111d2b2ef4424ba445bb734253322197f9d78635d9b6a2dbc98a998b07db907f9102ea4238215145f65e9ec2b691f09ecf396286aa79e3bfe2181d2ba4b7cb41fdaf556695b8435d3af049dee9eee684a553859057d6893d0208639e63482884dd7407f204d213f5b6a32e6d7dc133b6b712205fc8150c3362bb7beb4f0db24125a6f2c27bfe770fd6efdeee2c2fa9fc5f"}, {0x83, 0x0, "ddb7c58e61675f4dbfa42b86514567c39843b93c8392b536107ac464c7dd09fa4c95e34c0d4b9bc9c7aea43e496bdc61ff7cef2abd02d0b841fad3f5295b99d6f90d8c13be8b15d6881635c63a0f4108e34c2d41c243f473aabfb0ec29703b1f4aebbc37a4c5e97f9f92ae5e37d170222e7a9faeb745ca7a8ec578df1bb16e"}, {0x78, 0x0, "d276775ff3f6420eccd6ac0a3ace0c11e2f5bf7722819e2153a45b51d7dc155e3d5dc8a16948973d9649763b659a84490409a0255cc11aac58f0efd5ae77ef548669457cef2d4c331ad624756b43642f35c9a1fff90d9efe60f068db39dce40339219092aac6c855acfd13e3f11fc16e2be90001"}, {0x12, 0x0, "d1413ae2bb76fcc26228299a9cc3"}, {0xb2, 0x0, "aedb9579afcc2a8e52923e9f8ac7b42eececfe698e89b685a34235ac190a5468ca4d66b924b7b9d97fc4a1188862cc3b32724161f4e9af20a87bc5b1a8483fcce0802e305bae0a4f34be4e356360dc965870de87de3e7d3afeac9e3c8bd82e8b0bb0d7011e780fcc86e31424cef6b87e40993f1e520bc18c371c0074a1a400c0bef619efb7f6d322c3d5afa593449b6113d766a8de42992da40b24f957aad876863a86ed441474f04baab9018467"}, {0x4}, {0xc9, 0x0, "c16dde46db4d323b7af4326297da9b6613e804d269f38cc65134cefdbb3ca4327f8a1089419811ba202f3a82c6efb2813079002adb5777f6a2d338df99d0a1cc4215e1f555a48a84971dacc0daac500fad3ff049a50a479aebb1e4f81813155313300645928f99c823a38f2cd70c4ae93c5b55550be11f609b2d09e2a474c56b1ba46b93db0361434a086220502118581c07fa641e42c71d84a60e8f98bbfbcaf360459f7bcb2474d912ac621993748db5c311661a94d27b21effde44db941d67a2a225e8f"}, {0x33, 0x0, "c4fc2022c303870a1229cf3b7af9cd4a09d77bcccd5b39f89ceab4d54c7fae411928ebd3b543ec55f74e6993ca2361"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc, 0xb, "f1d3f48a14c67915"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x25c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x22c, 0xd, 0x0, 0x1, [{0x9, 0x0, "5cb4bbf28a"}, {0x7f, 0x0, "f505abf77a2ba4f539c1206d1cca2733932030495dbcb90d63736840e7076a1f97c5ddd025aadaeb29f7cf3a7d1f958701b5ec3076be225cb0ec416ade8ce6b9a68687ea89fb64a3f0b7cf9ae1a41e29d074b398d05febf58d7c7cd824c943dc5975cd3c63c93c4ced31f39fcae3ac2aa1fc652db4e6b2dc7988f6"}, {0xe5, 0x0, "adae93b8148b192d51d25486217761a622540d8e33d6399d536320a0b8024a363db784c308da4d0f1154251ed353656eb6cc088c8a0400c47b244e9cdbbee912d20e64751c95beca7a595f808204d324a2f8b3ccec8246684af98017094b8e85c347f5a71c71e1b4ee3c5bd82cbdf10aa34fd5c15bbe3aeb101004f4f346fb59166791924868b8f6fa870de034047eb79b97a7b9eeb048d03e1fbc507c8ced41cf753e638f23bb7139cc579f3cc68da6dcd1c72cbb5f2eda489519c77afb6c3c0d24ee232fb5cd256c3fd01d875c0f9c55375856bae4157b2bec6976ada9e5ea7d"}, {0x67, 0x0, "fb08ba2a09bb8a3c5a6dc494b3f8735c634202d9a78479d3f28e5310287a9f155a6ecfd983fa7686b498a8ff7a6166c324042def14569ec4232fe6f0e8a1cdc51e37fb6bb5b81592f40f1be838a103603f0fcef6d3a22b28aa57627ae4d2d27c328a95"}, {0x48, 0x0, "2d31ad391848871d3a1d6e849e37ccf971a388ed7ba160c09f3d399b9651bf2b66cd8a7f0c6b95016623149789420f2dea2a1057e911ec80b6487566a6ba01637b784363"}, {0x4}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x3a4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1b0, 0xe, 0x0, 0x1, [{0x1c, 0x0, "f6380d279bd805a2012fd3825fda4f3d4c598541d5dd780b"}, {0x28, 0x0, "705f7b236af0c3f55cf133a264d9a24e478d39d11324a30e5bf4433f419f39c2720a5a11"}, {0x44, 0x0, "5a1e2fea035dca6615bcfd8af5fabdedf4a49a88b801b9bbabb37744da82596f4d84e9249b6a40ad2d41c1959e86d7534b54c7a798b98459ab138b5f9f84d626"}, {0x31, 0x0, "d3a14b8cefc30bbfae2e9f94f7957bae78995df2a0593c4f540962a4840e421446e211777739b55d95759ba1f6"}, {0xf0, 0x0, "45326cc3038279ea754d87a7d8ea3512792e85ba34c1e46d59100ba7b06455e430af7c3970065cb06c5ca89ffe21a99b3e272ae62bfc9c498e31a9c58c649fed4e3f945c78a158578fcb50752cc129e182641025d76d11a552739d49ba1d83ca30186ef99cd5122f16acee4911d1829b95a92bd3c2a6b6519b38c3face1f39d128902253988d20104b68183262705506e7df4a2b2fcbbe96f895927786a4e8724692022674379fe0a76aeca5bdf31bfcc175d6bc33ce16dcc633e138e198f8ce82af06e9450f727866a65b7c4147ae13f329849686d525396eced95aa258f0f8a6787b0419aa83d25d8585e0"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1e0, 0xe, 0x0, 0x1, [{0x4a, 0x0, "7585f2df6e4adce0853fcdfd1bdaecb6f04777db432c5cd0c6a61c2387a0f060087030e8b223f101ba5611e2fe86491124f522694b138b2f32c27df7dbb40a93220fbe52bfb4"}, {0x77, 0x0, "9f8893d678e45635c3a63b177904d3d0d22f1e168170dd0ddd194e0571a37fb84658141c59e6e94ee8726c0abebdab8fc003f281cb5bbc8921fcfbb21a2b45ab8b03cbdb828268558013d065f4c3d5f92f0291f38bfcbf8f00d583395666979c9b96c14a0803c2c283de5cacb50d7c58b3192d"}, {0x60, 0x0, "3d9940acf7c472cef9d6461184e73f5bbc80190ee91dcd6da9e69c1c7a09201e4d3bc8f80d3265948dfdc35eff23570e627605f9146771c602200e993802304284d0a23094aa50969d66b0581a8622b333a003e862b8d88b21c4c373"}, {0x8e, 0x0, "66a2cbe1a6ec80fc6479cdc30153fc1facbee2a02f59ea08777935c2aa82e8c2c38762df39946701051ec950753487358c7411bfb0c5276ab86c07ec642a88a287a9bd90647a21577a08094b94ea0b93974d0fe9dffc90c3ee0979713e1698ca21e273666e2a07375f01142b679ae3b30827f84e64b97655518f2f7b6fd1a7e9dc8b71bd4c52a149a52f"}, {0x27, 0x0, "9f26adf14afbb90b39e451dfced333db307d7b31bee4242946fc2aff8737ad3688105c"}]}]}, @NL80211_ATTR_NAN_FUNC={0x348, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xb1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x320, 0xd, 0x0, 0x1, [{0x13, 0x0, "dcb2a8dd01b535c4a6184104714770"}, {0x4c, 0x0, "4950e808d1b91de6125adb1e7fe79d060a21b92d737821ed78f11a15ba5a5607d2bdbca7cc7823c66866728ddf70e9aec3aa587bdb4619d5d943285212f3beb5643ed66713f58068"}, {0xc7, 0x0, "4345a422f734dc05cbcfe37a8436809da9f76a6912bcc4d2beb6894fca3ff0de8e4a371a9d666080e4ddac12a529ec21e3eb6994373a25eda268316221d5d859ffe8280814d1a5944e24f30575911c25d068bbb1c4fa7a5d3dee2b1e94cab300644e00aac5b7211c4d9d8739ef6973e42c397ef55a43c0ce3283c37612a9f4ecaf5ccf27e9b3aa90e34d740e6b04f3983817cfd40a3010f1d5ecb2c1fb4f40c691e8508d6b0835edc76c359f4a164dc2f5e0ad79184191013f59eefb35ba3f6a5abee7"}, {0xc9, 0x0, "52d32bd0302748c86584ba811341d87baf4119faaa57afa3b81eb407f514ca0a427e1ddad0d73990ff7e82e6c5da9b00ace94a698494bef079a417d0eb61899bb4f969ca0d6f8a9f8806b84a5c4227666c6e9bc52070b77c0122c52e6a66b8e47e7c992a7e232af9560880f9c5204f23436c408c4c3a90ed2701b5b9096bc25b79177af113e7fd42116bef146c3e5a481bf8e1836aefb3749fd9720646ae060df48afe14fe905b77ee6ec772e9dc50ec3e3010eea81971ab432d4ea95cf52774d75a7c11da"}, {0x42, 0x0, "8c4b96ba5b936c6fbe325abda53d3d686bec418954b01782ddfdbcb55a79aae3c71f609fe3656a429ef3846e3f94bf1fdf34b0c67719129b4052449665d0"}, {0x26, 0x0, "4060c1d46c7b5aca9a5dcea4ae912b02044141f41ad6d09ed552d6a83d86fa7a5ffe"}, {0xbb, 0x0, "cfe0b4ec38dc7f371b8980b342b05a91daf51837c6c1ed67b9f43342b89b0cc3a52bef713d8e10da048ab6a08759e68ce0362b11d309f583eb1233310845e5009d0b039ae304cb2a5241fc953c194584b59f4d83abdc66f38f717fb8dce16c11f091aa4087b68de74849432617ff7265baea8d5c6c0a4285c30a81c4c47ed9c854ef6feac2268965d9495d35caeb42b618943a5497adc185e382e2cadc08bc9ee7b3251e326546a01d3c4ea9b8607434c377e376a6f819"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xa0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5f, 0xb, "13f5162da7dbd11fde9be3bef9caf203af4cc547c9cd06cd1da2a9cce5569879ac8bc00c30ac904c196072f5ad8e1ef8fdb98516e46b3debedf454f5f710241cdd0665e1a15390e38fd9e42f8710ea97b51d75af261fb5d8d69b02"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a87e8682c918"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "817a30324740"}]}, @NL80211_ATTR_NAN_FUNC={0xac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xb9}, @NL80211_NAN_FUNC_SRF={0x9c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x1f78}, 0x1, 0x0, 0x0, 0x14}, 0x20004040) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) 10:52:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x94, 0x4, 0x2, 0x22, @mcast1, @local, 0x0, 0x119b2bd13f637d7, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x4, 0x3f, 0xff, 0x1ff, 0x50, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8000, 0x20, 0x7fffffff}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f0000000700)=ANY=[@ANYBLOB="678fb4b19913e63ffb92ac95d734f3eeea46bc5267320a4c36bc8aa2ff416a235d1e45f9aa64428decea56dfad418013c2736e91acfa6e35bbdbe02ce2a3219c3a743ae49eefd9e6a5db6a1be409842a08a338c8ae71b5cf6d306e7412695c660000000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf25090000006800018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f6d61637674617000000008000300000000000800030001000000080003000000000014000200677265300000000000000000000000001400020076657468305f746f5f7465616d00000008000300030000004000018008000100", @ANYRES32=0x0, @ANYBLOB="14080200dddd078af5f2bc76657468305f766c616e0000000000000800ffff", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r2, @ANYBLOB="14000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="4ba0d25a0000a87a5190cef08329ad738546e688d4cd97538c820b32001c8bfffa43441eb7ac181270613635bd9e91406465232e35ae77315be5a61a40dd2f46eb3df10761602ea43e685c7a160f91318ef68826b5ced5ba237f8c2f9276d58e5c80d7cdcbf7128d", @ANYRES32=r3, @ANYBLOB="0800030002000000140002006361696630000000000000000000000014000200626174616476300000000000000000001c000180080003000000000008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000"], 0x13c}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000) wait4(0x0, 0x0, 0x80000002, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe7, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000200)={0xfffff3bd, 0x0, 0x7fff, 0x202}) syncfs(r5) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070000053c27000076009e39405cb4aed12f25d85acf4f8f3646023443078ef833cb3fe5b56436568ccc2f7469aed75d492b415b", 0x36}], 0x4, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x228800, 0x82) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f00000001c0)={0xacd, 0x2e48, 0x8, 0xa012, 0x200, 0xffffffff, 0x3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 384.665137][ T7] Bluetooth: hci0: command 0x040f tx timeout 10:52:31 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x50, 0x14, &(0x7f0000000040)="29e58e026ec733b4f70993cb6c4a382eb977eca6fd75c9778f44d6e445ede64cbc2a4a7a169b3e42a4fccf23089875cbe3107ec7a0fbc7e395f9062c3895", {0x6, 0xffff, 0x34343452, 0x6, 0x4, 0x2, 0x7}}) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000540)={'veth1_to_batadv\x00', @ifru_data=&(0x7f0000000500)="84ae2795085657ed1631d5f95233d64442842f8bf10cdc8281e1d9d8f559faff"}) 10:52:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), 0x4) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x2, 0x0, [0xfffffc01, 0x462, 0x0, 0x9, 0x3ff, 0x80000000, 0xfffffff9, 0xb3a]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="00000000000000002400e8df4bbaaf75a5e38be512800b0001006272696467650000010100000000002c7428c5cf58f60016000000ad9f08eb2000000000000000000000000000ca0000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:52:32 executing program 0: r0 = socket(0x1a, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x260) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000012000102000000000a77038f8000000002000700000087"], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000080)}, 0x10) 10:52:32 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @empty, 0x0}, &(0x7f0000000180)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x39a1ca71cfd5a341}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xa4, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) dup2(r5, r0) 10:52:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x8, 0x40, 0xffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xffffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x40}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xbdf}, {0xc, 0x90, 0x3}}]}, 0x154}, 0x1, 0x0, 0x0, 0x815a5a919a20b5ba}, 0x400c000) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="70000000ed03800d26bd7000fcdbdf25b2e5e56428b8083f3ff492877178295d373811613db2b3745da6a0560d6ead64c57fb3e5d309386f14c1d9d3d59de3fdef87c435eb9e94d8e1764aaf9929a24e6ba9b459adcb5f04a6e022101d8114e7289abc578e940bb1ce66ad472ab1859e3f4804423fa4900213020000"], 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x20}}]}, 0x90}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x200200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x15}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) [ 386.006653][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.114008][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:52:33 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120122008edd4908d88419e1bfbdd145010509021200010000000009040000000202"], 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000040)={{0x1, 0x4000, 0xe, 0x1, 0x3, 0x1, 0x4, 0x4, 0x81, 0x8, 0x2, 0x6}, {0x4, 0xf000, 0xf, 0x80, 0x61, 0x8, 0xff, 0x3c, 0x6, 0x5, 0x3, 0x7}, {0x3000, 0x6005, 0xa, 0x2, 0x3f, 0x1f, 0x0, 0x57, 0xe0, 0x7, 0x27, 0x9e}, {0x4001, 0x6000, 0x10, 0xc4, 0x2, 0xf8, 0x2, 0x1, 0x1, 0x2, 0x5, 0x7}, {0x0, 0x2, 0x8, 0xa9, 0x9, 0x5, 0xc8, 0x7, 0x8, 0x5, 0x5, 0x20}, {0x5000, 0x2, 0x3, 0x38, 0x8, 0x9, 0x5, 0x4, 0x3f, 0xb6, 0x1f, 0x6}, {0x0, 0x2, 0x3, 0x7f, 0x0, 0x3f, 0x40, 0xbf, 0x4, 0x0, 0x2, 0x6}, {0x4, 0x4000, 0x8, 0x5b, 0x5, 0x3, 0x80, 0x81, 0x0, 0xc5, 0xb7, 0x4}, {0x5000, 0x9}, {0x4000, 0x1}, 0x4, 0x0, 0x5000, 0x120, 0x3, 0x100, 0x1000, [0x53f, 0x8, 0x4, 0x2]}) [ 386.702874][ T8521] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 386.743473][ T8505] Bluetooth: hci0: command 0x0419 tx timeout [ 386.972634][ T8521] usb 1-1: Using ep0 maxpacket: 8 [ 387.704207][ T8521] usb 1-1: New USB device found, idVendor=84d8, idProduct=e119, bcdDevice=bd.bf [ 387.713507][ T8521] usb 1-1: New USB device strings: Mfr=209, Product=69, SerialNumber=1 [ 387.721879][ T8521] usb 1-1: Product: syz [ 387.726443][ T8521] usb 1-1: Manufacturer: syz [ 387.731182][ T8521] usb 1-1: SerialNumber: syz [ 387.741098][ T8521] usb 1-1: config 0 descriptor?? [ 387.806270][ T8521] cdc_acm 1-1:0.0: Zero length descriptor references [ 387.813319][ T8521] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 388.023808][ T8505] usb 1-1: USB disconnect, device number 2 10:52:35 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x0, 0x3}, {0xfffffff8, 0x7}]}, 0x18, 0xcbaf7df243c4879) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@remote, @broadcast}, &(0x7f00000000c0)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400800, 0x4) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2e, 0x6, 0x0, {0x6, 0x1, 0x5, 0x0, '((\'^\\'}}, 0x2e) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@random='Q', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000240)={0xfffff5b7, 0xffff, 0x100, 0x674, 0x7c, 0x400}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d19, &(0x7f00000002c0)=0x9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r3, 0x1278, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_complete(0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x804c000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={r0, &(0x7f00000004c0)="01a6cefd8dadaec0a4183e6cddb7f2fa99116188975838a36f7c03a3b0066295e47eae1a6d9ac0542ca77fd48841a94381da578e9ad96f1fa1b9a732d76a3b9c8c27835db0380c3bc84f71358d713e293c457f3bb7718c19944a25e58b", &(0x7f0000000540)=""/73}, 0x20) r6 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x4, 0x20c002) openat$cgroup_type(r6, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x84000) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x80010, r7, 0x83000000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) [ 388.824738][ T8505] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 389.075435][ T8505] usb 1-1: Using ep0 maxpacket: 8 [ 389.452990][ T8505] usb 1-1: unable to read config index 3 descriptor/start: -71 [ 389.460727][ T8505] usb 1-1: can't read configurations, error -71 10:52:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001ca42e89eb000100626f6e64000000000c00028008000f0080000000"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="8000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000037c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}]}}]}, 0x40}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x1, 0x7f, 0x1, @mcast2, @remote, 0x7f28, 0x20, 0x5, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a0, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000890}, 0x805) [ 389.998311][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.008123][ T8616] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 390.364581][ T8625] IPVS: ftp: loaded support on port[0] = 21 10:52:37 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x1b40, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x8) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0xc0) r4 = dup2(r2, r1) capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000080)={0x68000, 0x0, 0x1, 0x7, 0x2}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getgid() r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000140)={0x8, 'veth0_to_bridge\x00', {'macvtap0\x00'}, 0x8}) ioctl$KVM_SMI(r4, 0xaeb7) [ 390.965664][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 391.108410][ T8735] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 391.311996][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.319524][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.329464][ T8625] device bridge_slave_0 entered promiscuous mode 10:52:38 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x11d5, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="bb0e0000000000002c00128009000100766c616e000000001c00028006000100000000000c0002000e0000000a0000000400038008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="efff0300ecffffff5a1e7b35722190cbbb1379ccead5c07800543503acdc219e827adf9a64be338766"], 0x64}}, 0x0) [ 391.445319][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.453132][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.462939][ T8625] device bridge_slave_1 entered promiscuous mode [ 391.603413][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 10:52:38 executing program 0: unshare(0x200) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xc0000}, 0x11000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x270, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) sysinfo(&(0x7f00000000c0)=""/155) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x2000000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vcsa(0x0, 0x2, 0x2021c2) write$P9_RCREATE(r3, &(0x7f0000000180)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x7}, 0x1}}, 0x18) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) [ 391.661602][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.794843][ T8625] team0: Port device team_slave_0 added [ 391.819024][ T8625] team0: Port device team_slave_1 added [ 391.908182][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.915755][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.942181][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.972358][ C0] hrtimer: interrupt took 96524 ns 10:52:39 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x8c}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x20}, @typed={0x8, 0x3c, 0x0, 0x0, @uid}, @nested={0x7f, 0x16, 0x0, 0x1, [@generic="c7ddf674d4ef293da78bacdd12cdd28b480871bc6f71ce5653595c9d851b677bdbfa4076", @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x3ff}, @generic="2d78f77ee20e552c9a4c7c8574c9c5346779759fbc5f6e58fde16941f772a4b8f857feda180c9623a89c621c707173", @typed={0x8, 0x8d, 0x0, 0x0, @pid}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x1}]}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 392.027658][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.035060][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.061409][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.145554][ T8625] device hsr_slave_0 entered promiscuous mode [ 392.176635][ T8625] device hsr_slave_1 entered promiscuous mode [ 392.208557][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.216663][ T8625] Cannot create hsr debugfs directory [ 392.262968][ T8521] Bluetooth: hci1: command 0x0409 tx timeout 10:52:39 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1d, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) [ 392.715769][ T8625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 392.757837][ T8625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.791124][ T8625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.817101][ T8625] netdevsim netdevsim1 netdevsim3: renamed from eth3 10:52:40 executing program 0: r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6b, 0x12001) write(r3, &(0x7f0000000140)="2f127e0696d71b0d8a642bb3ab7effda711d6d9766fc65f1ddd4cdceec3ed6e5e06c70f1c9c32832a4c5c1218fcb53eefbfa86675a88888f37d94536b393470d4d86f68d9510cc9bf57c8c2e1eb3fad004a1e6b168dd7f3e119360d4b7fc82c01991fd0f1049cc69f3731fc300", 0x6d) sendfile(r0, r0, &(0x7f0000000200), 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x3f00, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x200049, 0x0) [ 393.276994][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 10:52:40 executing program 0: syz_usb_connect$uac1(0x2, 0xc7, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0xfc, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, "cf"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "9072db56f5c0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb7, 0x3ff, 0x5, '\"'}, @as_header={0x7, 0x24, 0x1, 0xa9, 0x1, 0x1001}, @as_header={0x7, 0x24, 0x1, 0xff, 0x63, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3f, 0x50da, 0x40, 'J'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x20, 0x3, "e3", "87"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1f, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 393.355462][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.365348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.411570][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.449889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.461077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.470626][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.478161][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.563475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.573375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.583332][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.594355][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.601651][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.611059][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.622157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.666692][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.677572][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.688203][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.700661][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.726236][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.750746][ T8520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.760806][ T8520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.800337][ T8625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.814777][ T8625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.834081][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.843974][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.988117][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.996149][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.005351][ T8520] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 394.041267][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.108282][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 394.118931][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 394.183932][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 394.194158][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 394.219858][ T8625] device veth0_vlan entered promiscuous mode [ 394.229111][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 394.238901][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 394.273998][ T8625] device veth1_vlan entered promiscuous mode [ 394.342968][ T8521] Bluetooth: hci1: command 0x041b tx timeout [ 394.361815][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.371970][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 394.381680][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.391848][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.414794][ T8625] device veth0_macvtap entered promiscuous mode [ 394.434039][ T8520] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 394.443213][ T8520] usb 1-1: config 1 has no interface number 1 [ 394.449469][ T8520] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.463041][ T8520] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 394.476607][ T8625] device veth1_macvtap entered promiscuous mode [ 394.533213][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 394.544020][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.557685][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.566470][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.576164][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 394.585746][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.595854][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.619066][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 394.630402][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.644183][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.654146][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.664343][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.693761][ T8520] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.703223][ T8520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.712994][ T8520] usb 1-1: Product: syz [ 394.717274][ T8520] usb 1-1: Manufacturer: syz [ 394.721984][ T8520] usb 1-1: SerialNumber: syz [ 394.736238][ T8625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.745353][ T8625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.754377][ T8625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.763879][ T8625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.172922][ T8520] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 395.181580][ T8520] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 395.189634][ T8520] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 395.294858][ T8319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.304009][ T8319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.326329][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.347014][ T8520] usb 1-1: USB disconnect, device number 5 [ 395.402151][ T8507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.410245][ T8507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.420819][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.949570][ T8520] usb 1-1: new full-speed USB device number 6 using dummy_hcd 10:52:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0xe, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xa4}}, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 396.364336][ T8520] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 396.373567][ T8520] usb 1-1: config 1 has no interface number 1 [ 396.379901][ T8520] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.393268][ T8520] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 396.425311][ T8521] Bluetooth: hci1: command 0x040f tx timeout 10:52:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000006c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x80040) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 396.653198][ T8917] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 10:52:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') r0 = memfd_create(&(0x7f0000000300)='\x00\xc1\xf9\xe7\x92\xc2\xe8\x82\x8e\t\x92\x84\x13\x11^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\xbc\xd4\x00&YY*\xa0,\x80\xef\x9e\xd7sY\x1b\x9c\b\x9b\x89\x82\x9dc\x06=\"\x8e\x10\x10\xa40\x8bJ\a\xc6\xe3K\x1a(\x9a\x7fXP\xdd\x1a\xae\b<\xc0\xee\xf8\x11\xd1<,T?\x80-\x9f\xc0[<\xe3(\xd1\xb7}\xa1:\x95m\xcf\x83t\xaa\xaa\x80\x06_\xb0\x81\xee\xdfa\xcd#\xaf\xb5=\xa1\x80\xbc\x89X\xd2\x1et\xee\x99A}\xf8\x1dN\xc6\xb1\x87\xd7\xb7\xfa\x94zt\xe9eI\xac[\xad\\b\x13\x9e\x7f\x01\xfd\xd4\x03\x82', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x16, 0x1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1e, 0x5, 0x0) r7 = socket(0x1e, 0x2, 0x0) bind(r7, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r6, &(0x7f0000000000)=@name, 0x10) recvfrom$packet(r6, &(0x7f0000000240)=""/152, 0x98, 0x10027, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100c2800000000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00020005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc) [ 396.802672][ T8520] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.811882][ T8520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.821073][ T8520] usb 1-1: Product: syz 10:52:43 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, &(0x7f0000000100)=0x80) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x4b5, 0x3f, 0x30b8}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'tunl0\x00'}) [ 396.906299][ T8520] usb 1-1: can't set config #1, error -71 [ 396.934180][ T8520] usb 1-1: USB disconnect, device number 6 10:52:44 executing program 0: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x4c, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 10:52:44 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x400, 0x70bd30, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000300)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56e, 0xfc, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) uname(&(0x7f0000000100)=""/101) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="202210f3ffffa87cc09092da20a20000821bb1000000"], 0x0}, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000340)={0x200, 0x8, 0x4, 0x80000000, 0x1000, 0x7fffffff}) [ 397.437820][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.484576][ C1] ===================================================== [ 397.491574][ C1] BUG: KMSAN: uninit-value in INET_ECN_decapsulate+0x345/0x1db0 [ 397.499228][ C1] CPU: 1 PID: 8941 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 397.507912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.517986][ C1] Call Trace: [ 397.521301][ C1] [ 397.524177][ C1] dump_stack+0x21c/0x280 [ 397.528521][ C1] kmsan_report+0xf7/0x1e0 [ 397.532957][ C1] __msan_warning+0x5f/0xa0 [ 397.537477][ C1] INET_ECN_decapsulate+0x345/0x1db0 [ 397.542775][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 397.548861][ C1] ? eth_type_trans+0x553/0xc10 [ 397.553733][ C1] geneve_rx+0x2103/0x2980 [ 397.558183][ C1] ? __iptunnel_pull_header+0xc0e/0xda0 [ 397.563753][ C1] geneve_udp_encap_recv+0x105c/0x1340 [ 397.569233][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.575332][ C1] udp_queue_rcv_one_skb+0x193a/0x1af0 [ 397.580924][ C1] ? __udp4_lib_lookup+0x620/0xc40 [ 397.586066][ C1] ? geneve_gro_complete+0x350/0x350 [ 397.591385][ C1] udp_queue_rcv_skb+0x282/0x1050 [ 397.596446][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 397.602278][ C1] __udp4_lib_rcv+0x399d/0x5880 [ 397.607153][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 397.612465][ C1] udp_rcv+0x5c/0x70 [ 397.616376][ C1] ? udp_v4_early_demux+0x2580/0x2580 [ 397.621770][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 397.627255][ C1] ip_local_deliver+0x583/0x8d0 [ 397.632124][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 397.637178][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 397.642853][ C1] ip_rcv+0x5c3/0x840 [ 397.646860][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 397.651755][ C1] __netif_receive_skb+0x1ec/0x640 [ 397.656921][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 397.662576][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 397.668237][ C1] process_backlog+0x523/0xc10 [ 397.673388][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 397.678701][ C1] napi_poll+0x420/0x1010 [ 397.683065][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 397.688725][ C1] net_rx_action+0x35c/0xd40 [ 397.693354][ C1] ? net_tx_action+0xd30/0xd30 [ 397.698146][ C1] __do_softirq+0x1a9/0x6fa [ 397.702684][ C1] asm_call_irq_on_stack+0xf/0x20 [ 397.707718][ C1] [ 397.710685][ C1] do_softirq_own_stack+0x6e/0x90 [ 397.715762][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 397.720983][ C1] local_bh_enable+0x36/0x40 [ 397.725623][ C1] __dev_queue_xmit+0x3a9b/0x4520 [ 397.730678][ C1] dev_queue_xmit+0x4b/0x60 [ 397.735201][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 397.740528][ C1] packet_sendmsg+0x86f9/0x99d0 [ 397.745427][ C1] ? propagate_entity_load_avg+0x4c/0x1320 [ 397.751272][ C1] ? kmsan_get_metadata+0x116/0x180 [ 397.756502][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 397.762185][ C1] ? kmsan_get_metadata+0x116/0x180 [ 397.767406][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 397.773241][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.779366][ C1] ? aa_sk_perm+0x9a8/0xed0 [ 397.783912][ C1] ? packet_getsockopt+0x1120/0x1120 [ 397.789308][ C1] __sys_sendto+0x9dc/0xc80 [ 397.793858][ C1] ? kmsan_get_metadata+0x116/0x180 [ 397.799090][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 397.805141][ C1] __se_sys_sendto+0x107/0x130 [ 397.809966][ C1] __x64_sys_sendto+0x6e/0x90 [ 397.814682][ C1] do_syscall_64+0x9f/0x140 [ 397.819222][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 397.825146][ C1] RIP: 0033:0x45deb9 [ 397.829073][ C1] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.848913][ C1] RSP: 002b:00007fe308062c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 397.857449][ C1] RAX: ffffffffffffffda RBX: 000000000002eb40 RCX: 000000000045deb9 [ 397.865442][ C1] RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000003 [ 397.873485][ C1] RBP: 000000000118bf78 R08: 00000000200002c0 R09: 0000000000000014 [ 397.881479][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 397.889480][ C1] R13: 000000000169fb7f R14: 00007fe3080639c0 R15: 000000000118bf2c [ 397.897473][ C1] [ 397.899809][ C1] Uninit was created at: [ 397.904081][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 397.909824][ C1] kmsan_slab_alloc+0x8d/0xe0 [ 397.914554][ C1] __kmalloc_node_track_caller+0xc61/0x15f0 [ 397.920462][ C1] __alloc_skb+0x309/0xae0 [ 397.924900][ C1] alloc_skb_with_frags+0x1f3/0xc20 [ 397.930131][ C1] sock_alloc_send_pskb+0xc73/0xe40 [ 397.935362][ C1] packet_sendmsg+0x6aa3/0x99d0 [ 397.940267][ C1] __sys_sendto+0x9dc/0xc80 [ 397.944782][ C1] __se_sys_sendto+0x107/0x130 [ 397.949559][ C1] __x64_sys_sendto+0x6e/0x90 [ 397.954387][ C1] do_syscall_64+0x9f/0x140 [ 397.958905][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 397.964793][ C1] ===================================================== [ 397.971728][ C1] Disabling lock debugging due to kernel taint [ 397.977912][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 397.984524][ C1] CPU: 1 PID: 8941 Comm: syz-executor.0 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 397.994626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.004788][ C1] Call Trace: [ 398.008088][ C1] [ 398.010959][ C1] dump_stack+0x21c/0x280 [ 398.015311][ C1] panic+0x4c8/0xea7 [ 398.019240][ C1] ? add_taint+0x17c/0x210 [ 398.023692][ C1] kmsan_report+0x1da/0x1e0 [ 398.028219][ C1] __msan_warning+0x5f/0xa0 [ 398.032766][ C1] INET_ECN_decapsulate+0x345/0x1db0 [ 398.038077][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 398.044174][ C1] ? eth_type_trans+0x553/0xc10 [ 398.049059][ C1] geneve_rx+0x2103/0x2980 [ 398.053500][ C1] ? __iptunnel_pull_header+0xc0e/0xda0 [ 398.059093][ C1] geneve_udp_encap_recv+0x105c/0x1340 [ 398.064570][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 398.070754][ C1] udp_queue_rcv_one_skb+0x193a/0x1af0 [ 398.076238][ C1] ? __udp4_lib_lookup+0x620/0xc40 [ 398.081381][ C1] ? geneve_gro_complete+0x350/0x350 [ 398.086699][ C1] udp_queue_rcv_skb+0x282/0x1050 [ 398.091753][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 398.097580][ C1] __udp4_lib_rcv+0x399d/0x5880 [ 398.102455][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 398.107773][ C1] udp_rcv+0x5c/0x70 [ 398.111697][ C1] ? udp_v4_early_demux+0x2580/0x2580 [ 398.117094][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 398.122588][ C1] ip_local_deliver+0x583/0x8d0 [ 398.127474][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 398.132524][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 398.138175][ C1] ip_rcv+0x5c3/0x840 [ 398.142182][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 398.146969][ C1] __netif_receive_skb+0x1ec/0x640 [ 398.152122][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 398.157788][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 398.163455][ C1] process_backlog+0x523/0xc10 [ 398.168281][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 398.173678][ C1] napi_poll+0x420/0x1010 [ 398.178063][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 398.183756][ C1] net_rx_action+0x35c/0xd40 [ 398.188408][ C1] ? net_tx_action+0xd30/0xd30 [ 398.193234][ C1] __do_softirq+0x1a9/0x6fa [ 398.197793][ C1] asm_call_irq_on_stack+0xf/0x20 [ 398.202840][ C1] [ 398.205901][ C1] do_softirq_own_stack+0x6e/0x90 [ 398.210988][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 398.216222][ C1] local_bh_enable+0x36/0x40 [ 398.220851][ C1] __dev_queue_xmit+0x3a9b/0x4520 [ 398.225923][ C1] dev_queue_xmit+0x4b/0x60 [ 398.230457][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 398.235768][ C1] packet_sendmsg+0x86f9/0x99d0 [ 398.240649][ C1] ? propagate_entity_load_avg+0x4c/0x1320 [ 398.246482][ C1] ? kmsan_get_metadata+0x116/0x180 [ 398.251712][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 398.257379][ C1] ? kmsan_get_metadata+0x116/0x180 [ 398.262607][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 398.268445][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 398.274555][ C1] ? aa_sk_perm+0x9a8/0xed0 [ 398.279164][ C1] ? packet_getsockopt+0x1120/0x1120 [ 398.284547][ C1] __sys_sendto+0x9dc/0xc80 [ 398.289214][ C1] ? kmsan_get_metadata+0x116/0x180 [ 398.294457][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 398.300301][ C1] __se_sys_sendto+0x107/0x130 [ 398.305105][ C1] __x64_sys_sendto+0x6e/0x90 [ 398.309936][ C1] do_syscall_64+0x9f/0x140 [ 398.314484][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 398.320535][ C1] RIP: 0033:0x45deb9 [ 398.324457][ C1] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.344097][ C1] RSP: 002b:00007fe308062c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 398.352549][ C1] RAX: ffffffffffffffda RBX: 000000000002eb40 RCX: 000000000045deb9 [ 398.360577][ C1] RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000003 [ 398.368574][ C1] RBP: 000000000118bf78 R08: 00000000200002c0 R09: 0000000000000014 [ 398.376663][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 398.384660][ C1] R13: 000000000169fb7f R14: 00007fe3080639c0 R15: 000000000118bf2c [ 398.393320][ C1] Kernel Offset: disabled [ 398.397663][ C1] Rebooting in 86400 seconds..