Warning: Permanently added '10.128.1.32' (ECDSA) to the list of known hosts. 2021/02/01 16:34:29 fuzzer started 2021/02/01 16:34:29 dialing manager at 10.128.0.26:43687 2021/02/01 16:34:29 syscalls: 3465 2021/02/01 16:34:29 code coverage: enabled 2021/02/01 16:34:29 comparison tracing: enabled 2021/02/01 16:34:29 extra coverage: enabled 2021/02/01 16:34:29 setuid sandbox: enabled 2021/02/01 16:34:29 namespace sandbox: enabled 2021/02/01 16:34:29 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/01 16:34:29 fault injection: enabled 2021/02/01 16:34:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/01 16:34:29 net packet injection: enabled 2021/02/01 16:34:29 net device setup: enabled 2021/02/01 16:34:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/02/01 16:34:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/01 16:34:29 USB emulation: enabled 2021/02/01 16:34:29 hci packet injection: enabled 2021/02/01 16:34:29 wifi device emulation: enabled 2021/02/01 16:34:29 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/01 16:34:30 fetching corpus: 50, signal 49689/53281 (executing program) 2021/02/01 16:34:30 fetching corpus: 100, signal 77672/82684 (executing program) 2021/02/01 16:34:30 fetching corpus: 150, signal 92314/98764 (executing program) 2021/02/01 16:34:30 fetching corpus: 200, signal 107855/115556 (executing program) 2021/02/01 16:34:30 fetching corpus: 250, signal 122188/131048 (executing program) 2021/02/01 16:34:31 fetching corpus: 300, signal 133252/143253 (executing program) 2021/02/01 16:34:31 fetching corpus: 350, signal 145760/156748 (executing program) 2021/02/01 16:34:31 fetching corpus: 400, signal 151653/163756 (executing program) 2021/02/01 16:34:31 fetching corpus: 450, signal 158424/171571 (executing program) 2021/02/01 16:34:31 fetching corpus: 500, signal 164430/178588 (executing program) 2021/02/01 16:34:31 fetching corpus: 550, signal 170752/185905 (executing program) 2021/02/01 16:34:32 fetching corpus: 600, signal 174692/190926 (executing program) 2021/02/01 16:34:32 fetching corpus: 650, signal 181299/198397 (executing program) 2021/02/01 16:34:32 fetching corpus: 700, signal 188882/206676 (executing program) 2021/02/01 16:34:32 fetching corpus: 750, signal 195796/214276 (executing program) 2021/02/01 16:34:32 fetching corpus: 800, signal 203978/222994 (executing program) 2021/02/01 16:34:33 fetching corpus: 850, signal 207915/227762 (executing program) 2021/02/01 16:34:33 fetching corpus: 900, signal 213412/233920 (executing program) 2021/02/01 16:34:33 fetching corpus: 950, signal 220756/241715 (executing program) 2021/02/01 16:34:33 fetching corpus: 1000, signal 225309/246960 (executing program) 2021/02/01 16:34:33 fetching corpus: 1050, signal 229535/251868 (executing program) 2021/02/01 16:34:33 fetching corpus: 1100, signal 232929/255982 (executing program) 2021/02/01 16:34:34 fetching corpus: 1150, signal 238503/262015 (executing program) 2021/02/01 16:34:34 fetching corpus: 1200, signal 241746/265896 (executing program) 2021/02/01 16:34:34 fetching corpus: 1250, signal 245145/269855 (executing program) 2021/02/01 16:34:34 fetching corpus: 1300, signal 250382/275454 (executing program) 2021/02/01 16:34:34 fetching corpus: 1350, signal 254066/279596 (executing program) 2021/02/01 16:34:35 fetching corpus: 1400, signal 257401/283492 (executing program) 2021/02/01 16:34:35 fetching corpus: 1450, signal 260155/286774 (executing program) 2021/02/01 16:34:35 fetching corpus: 1500, signal 262674/289850 (executing program) 2021/02/01 16:34:35 fetching corpus: 1550, signal 266186/293739 (executing program) 2021/02/01 16:34:35 fetching corpus: 1600, signal 270235/298068 (executing program) 2021/02/01 16:34:35 fetching corpus: 1650, signal 273499/301701 (executing program) 2021/02/01 16:34:36 fetching corpus: 1700, signal 276314/304947 (executing program) 2021/02/01 16:34:36 fetching corpus: 1750, signal 278468/307556 (executing program) 2021/02/01 16:34:36 fetching corpus: 1800, signal 282074/311393 (executing program) 2021/02/01 16:34:36 fetching corpus: 1850, signal 284480/314195 (executing program) 2021/02/01 16:34:36 fetching corpus: 1900, signal 288516/318357 (executing program) 2021/02/01 16:34:36 fetching corpus: 1950, signal 291832/321856 (executing program) 2021/02/01 16:34:37 fetching corpus: 2000, signal 296542/326480 (executing program) 2021/02/01 16:34:37 fetching corpus: 2050, signal 298771/329037 (executing program) 2021/02/01 16:34:37 fetching corpus: 2100, signal 301001/331524 (executing program) 2021/02/01 16:34:37 fetching corpus: 2150, signal 304062/334708 (executing program) 2021/02/01 16:34:37 fetching corpus: 2200, signal 306288/337183 (executing program) 2021/02/01 16:34:38 fetching corpus: 2250, signal 308731/339871 (executing program) 2021/02/01 16:34:38 fetching corpus: 2300, signal 311629/342916 (executing program) 2021/02/01 16:34:38 fetching corpus: 2350, signal 315076/346353 (executing program) 2021/02/01 16:34:38 fetching corpus: 2400, signal 317549/348996 (executing program) 2021/02/01 16:34:38 fetching corpus: 2450, signal 319896/351470 (executing program) 2021/02/01 16:34:39 fetching corpus: 2500, signal 322408/354090 (executing program) 2021/02/01 16:34:39 fetching corpus: 2550, signal 325299/356933 (executing program) 2021/02/01 16:34:39 fetching corpus: 2600, signal 327047/358920 (executing program) 2021/02/01 16:34:39 fetching corpus: 2650, signal 329396/361328 (executing program) 2021/02/01 16:34:39 fetching corpus: 2700, signal 331932/363867 (executing program) 2021/02/01 16:34:39 fetching corpus: 2750, signal 334643/366496 (executing program) 2021/02/01 16:34:40 fetching corpus: 2800, signal 336475/368470 (executing program) 2021/02/01 16:34:40 fetching corpus: 2850, signal 338539/370618 (executing program) 2021/02/01 16:34:40 fetching corpus: 2900, signal 340785/372862 (executing program) 2021/02/01 16:34:40 fetching corpus: 2950, signal 342892/374940 (executing program) 2021/02/01 16:34:40 fetching corpus: 3000, signal 344834/376934 (executing program) 2021/02/01 16:34:40 fetching corpus: 3050, signal 346682/378822 (executing program) 2021/02/01 16:34:41 fetching corpus: 3100, signal 348412/380610 (executing program) 2021/02/01 16:34:41 fetching corpus: 3150, signal 350446/382627 (executing program) 2021/02/01 16:34:41 fetching corpus: 3200, signal 352260/384468 (executing program) 2021/02/01 16:34:41 fetching corpus: 3250, signal 354951/386897 (executing program) 2021/02/01 16:34:41 fetching corpus: 3300, signal 356335/388391 (executing program) 2021/02/01 16:34:42 fetching corpus: 3350, signal 358511/390441 (executing program) 2021/02/01 16:34:42 fetching corpus: 3400, signal 359804/391827 (executing program) 2021/02/01 16:34:42 fetching corpus: 3450, signal 361452/393472 (executing program) 2021/02/01 16:34:42 fetching corpus: 3500, signal 363101/395069 (executing program) 2021/02/01 16:34:42 fetching corpus: 3550, signal 364985/396828 (executing program) 2021/02/01 16:34:43 fetching corpus: 3600, signal 366546/398359 (executing program) 2021/02/01 16:34:43 fetching corpus: 3650, signal 368741/400248 (executing program) 2021/02/01 16:34:43 fetching corpus: 3700, signal 370392/401779 (executing program) 2021/02/01 16:34:43 fetching corpus: 3750, signal 371921/403257 (executing program) 2021/02/01 16:34:43 fetching corpus: 3800, signal 373336/404611 (executing program) 2021/02/01 16:34:43 fetching corpus: 3850, signal 374609/405859 (executing program) 2021/02/01 16:34:44 fetching corpus: 3900, signal 376729/407634 (executing program) 2021/02/01 16:34:44 fetching corpus: 3950, signal 378408/409121 (executing program) 2021/02/01 16:34:44 fetching corpus: 4000, signal 380117/410634 (executing program) 2021/02/01 16:34:44 fetching corpus: 4050, signal 381556/411986 (executing program) 2021/02/01 16:34:45 fetching corpus: 4100, signal 382460/412932 (executing program) 2021/02/01 16:34:45 fetching corpus: 4150, signal 384241/414509 (executing program) 2021/02/01 16:34:45 fetching corpus: 4200, signal 385647/415776 (executing program) 2021/02/01 16:34:45 fetching corpus: 4250, signal 387267/417212 (executing program) 2021/02/01 16:34:46 fetching corpus: 4300, signal 388818/418514 (executing program) 2021/02/01 16:34:46 fetching corpus: 4350, signal 390302/419739 (executing program) 2021/02/01 16:34:46 fetching corpus: 4400, signal 391845/421041 (executing program) 2021/02/01 16:34:46 fetching corpus: 4450, signal 393532/422435 (executing program) 2021/02/01 16:34:46 fetching corpus: 4500, signal 395045/423647 (executing program) 2021/02/01 16:34:47 fetching corpus: 4550, signal 396202/424709 (executing program) 2021/02/01 16:34:47 fetching corpus: 4600, signal 397750/425954 (executing program) 2021/02/01 16:34:47 fetching corpus: 4650, signal 399222/427161 (executing program) 2021/02/01 16:34:47 fetching corpus: 4700, signal 400440/428200 (executing program) 2021/02/01 16:34:47 fetching corpus: 4750, signal 401893/429379 (executing program) 2021/02/01 16:34:47 fetching corpus: 4800, signal 403187/430405 (executing program) 2021/02/01 16:34:48 fetching corpus: 4850, signal 404410/431397 (executing program) 2021/02/01 16:34:48 fetching corpus: 4900, signal 405392/432225 (executing program) 2021/02/01 16:34:48 fetching corpus: 4950, signal 406761/433264 (executing program) 2021/02/01 16:34:48 fetching corpus: 5000, signal 407991/434232 (executing program) 2021/02/01 16:34:48 fetching corpus: 5050, signal 408991/435050 (executing program) 2021/02/01 16:34:49 fetching corpus: 5100, signal 410409/436099 (executing program) 2021/02/01 16:34:49 fetching corpus: 5150, signal 411822/437223 (executing program) 2021/02/01 16:34:49 fetching corpus: 5200, signal 413018/438142 (executing program) 2021/02/01 16:34:49 fetching corpus: 5250, signal 413766/438775 (executing program) 2021/02/01 16:34:49 fetching corpus: 5300, signal 414974/439628 (executing program) 2021/02/01 16:34:49 fetching corpus: 5350, signal 416025/440390 (executing program) 2021/02/01 16:34:50 fetching corpus: 5400, signal 417220/441221 (executing program) 2021/02/01 16:34:50 fetching corpus: 5450, signal 418708/442238 (executing program) 2021/02/01 16:34:50 fetching corpus: 5500, signal 419702/442994 (executing program) 2021/02/01 16:34:50 fetching corpus: 5550, signal 420748/443821 (executing program) 2021/02/01 16:34:50 fetching corpus: 5600, signal 422196/444796 (executing program) 2021/02/01 16:34:50 fetching corpus: 5650, signal 423342/445573 (executing program) 2021/02/01 16:34:51 fetching corpus: 5700, signal 424520/446392 (executing program) 2021/02/01 16:34:51 fetching corpus: 5750, signal 425702/447155 (executing program) 2021/02/01 16:34:51 fetching corpus: 5800, signal 427283/448094 (executing program) 2021/02/01 16:34:51 fetching corpus: 5850, signal 428111/448691 (executing program) 2021/02/01 16:34:51 fetching corpus: 5900, signal 429092/449354 (executing program) 2021/02/01 16:34:52 fetching corpus: 5950, signal 430290/450116 (executing program) 2021/02/01 16:34:52 fetching corpus: 6000, signal 431581/450881 (executing program) 2021/02/01 16:34:52 fetching corpus: 6050, signal 432655/451526 (executing program) 2021/02/01 16:34:52 fetching corpus: 6100, signal 433715/452177 (executing program) 2021/02/01 16:34:53 fetching corpus: 6149, signal 434940/452903 (executing program) 2021/02/01 16:34:53 fetching corpus: 6199, signal 435740/453439 (executing program) 2021/02/01 16:34:53 fetching corpus: 6249, signal 436516/453959 (executing program) 2021/02/01 16:34:53 fetching corpus: 6299, signal 437873/454735 (executing program) 2021/02/01 16:34:53 fetching corpus: 6349, signal 439037/455365 (executing program) 2021/02/01 16:34:54 fetching corpus: 6399, signal 440182/456042 (executing program) 2021/02/01 16:34:54 fetching corpus: 6449, signal 441208/456634 (executing program) 2021/02/01 16:34:54 fetching corpus: 6499, signal 442514/457295 (executing program) 2021/02/01 16:34:54 fetching corpus: 6549, signal 443344/457737 (executing program) 2021/02/01 16:34:54 fetching corpus: 6599, signal 444484/458310 (executing program) 2021/02/01 16:34:55 fetching corpus: 6649, signal 445168/458731 (executing program) 2021/02/01 16:34:55 fetching corpus: 6699, signal 445989/459167 (executing program) 2021/02/01 16:34:55 fetching corpus: 6749, signal 446838/459614 (executing program) 2021/02/01 16:34:55 fetching corpus: 6799, signal 447649/460092 (executing program) 2021/02/01 16:34:55 fetching corpus: 6849, signal 448696/460637 (executing program) 2021/02/01 16:34:56 fetching corpus: 6899, signal 449742/461153 (executing program) 2021/02/01 16:34:56 fetching corpus: 6949, signal 450585/461578 (executing program) 2021/02/01 16:34:56 fetching corpus: 6999, signal 451409/461968 (executing program) 2021/02/01 16:34:56 fetching corpus: 7049, signal 452149/462361 (executing program) 2021/02/01 16:34:56 fetching corpus: 7099, signal 452927/462749 (executing program) 2021/02/01 16:34:56 fetching corpus: 7149, signal 454007/463332 (executing program) 2021/02/01 16:34:56 fetching corpus: 7199, signal 454809/463708 (executing program) 2021/02/01 16:34:57 fetching corpus: 7248, signal 455802/464137 (executing program) 2021/02/01 16:34:57 fetching corpus: 7298, signal 456544/464464 (executing program) 2021/02/01 16:34:57 fetching corpus: 7348, signal 457332/464826 (executing program) 2021/02/01 16:34:57 fetching corpus: 7398, signal 458084/465142 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465333 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465380 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465418 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465460 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465492 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465529 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465570 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465622 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465677 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465724 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465771 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465824 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465868 (executing program) 2021/02/01 16:34:57 fetching corpus: 7407, signal 458478/465910 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/465974 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466028 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466068 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466117 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466175 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466229 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466274 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466310 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466351 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466405 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466444 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466483 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466530 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466582 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466622 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466667 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466716 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466753 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466793 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466842 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466877 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466930 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/466972 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467011 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467056 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467109 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467152 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467197 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467240 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467286 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467331 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467387 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467447 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467499 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467549 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467586 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467637 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467682 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467728 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467775 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467822 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467879 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467928 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/467966 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468020 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468064 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468110 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468161 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468201 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468239 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468283 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468326 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468369 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468414 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468463 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468511 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468565 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468618 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468653 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468687 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468734 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468771 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468824 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468863 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468918 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/468969 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469019 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469072 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469124 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469173 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469214 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469217 (executing program) 2021/02/01 16:34:58 fetching corpus: 7407, signal 458478/469217 (executing program) 2021/02/01 16:35:00 starting 6 fuzzer processes 16:35:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0f00600d698cb89e14f088a8", 0x0, 0x1000e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 16:35:00 executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) 16:35:00 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x0) 16:35:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="2626660f6ff8640fc5f100baf80c66b8f7b6a78366efbafc0cb000ee660f38802fdfe0deed3e0fc72d0f0f6ca98a66b95e0800000f320f01cf", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) 16:35:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000500)="ba7b9155095c108684de60009c3e9e", 0xf}], 0x1}], 0x1, 0x0) 16:35:01 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) syzkaller login: [ 108.827822][ T8406] IPVS: ftp: loaded support on port[0] = 21 [ 108.966368][ T8408] IPVS: ftp: loaded support on port[0] = 21 [ 109.159770][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 109.338734][ T8410] IPVS: ftp: loaded support on port[0] = 21 [ 109.358652][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.369360][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.378707][ T8406] device bridge_slave_0 entered promiscuous mode [ 109.423327][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.430614][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.439338][ T8406] device bridge_slave_1 entered promiscuous mode [ 109.454838][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 109.490669][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.512102][ T8412] IPVS: ftp: loaded support on port[0] = 21 [ 109.523018][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.628260][ T8406] team0: Port device team_slave_0 added [ 109.639449][ T8406] team0: Port device team_slave_1 added [ 109.769921][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.778447][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.806774][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.829735][ T8414] IPVS: ftp: loaded support on port[0] = 21 [ 109.838247][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.846116][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.873386][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.926451][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.934479][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.944269][ T8408] device bridge_slave_0 entered promiscuous mode [ 109.954109][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.962528][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.972162][ T8408] device bridge_slave_1 entered promiscuous mode [ 110.008047][ T8406] device hsr_slave_0 entered promiscuous mode [ 110.019654][ T8406] device hsr_slave_1 entered promiscuous mode [ 110.087464][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.138588][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.152359][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 110.362230][ T8408] team0: Port device team_slave_0 added [ 110.376275][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 110.392993][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 110.404908][ T8408] team0: Port device team_slave_1 added [ 110.517549][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.526252][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.553673][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.593663][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.600791][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.610845][ T8410] device bridge_slave_0 entered promiscuous mode [ 110.624748][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.632231][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.659954][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.684029][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.691347][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.699394][ T8410] device bridge_slave_1 entered promiscuous mode [ 110.752105][ T36] Bluetooth: hci0: command 0x0409 tx timeout [ 110.760118][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 110.806450][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.828898][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.849275][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.857394][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.866208][ T8412] device bridge_slave_0 entered promiscuous mode [ 110.879852][ T8408] device hsr_slave_0 entered promiscuous mode [ 110.887603][ T8408] device hsr_slave_1 entered promiscuous mode [ 110.895498][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.905290][ T8408] Cannot create hsr debugfs directory [ 110.945351][ T8410] team0: Port device team_slave_0 added [ 110.953582][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.962254][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.970441][ T8412] device bridge_slave_1 entered promiscuous mode [ 110.991523][ T36] Bluetooth: hci1: command 0x0409 tx timeout [ 111.004478][ T8410] team0: Port device team_slave_1 added [ 111.059796][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.074879][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.091588][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.099065][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.126729][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.141655][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.148792][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.176121][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.234403][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 111.252708][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.259975][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.269556][ T8414] device bridge_slave_0 entered promiscuous mode [ 111.286138][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.297320][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.307104][ T8414] device bridge_slave_1 entered promiscuous mode [ 111.323474][ T8412] team0: Port device team_slave_0 added [ 111.330020][ T8406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.347777][ T8410] device hsr_slave_0 entered promiscuous mode [ 111.355994][ T8410] device hsr_slave_1 entered promiscuous mode [ 111.364812][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.376911][ T8410] Cannot create hsr debugfs directory [ 111.397825][ T8412] team0: Port device team_slave_1 added [ 111.424698][ T8406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.465593][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.473618][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.481225][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 111.502171][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.519695][ T8406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.535313][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.563644][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.570713][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.598738][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.610680][ T8406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.623620][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.692080][ T8412] device hsr_slave_0 entered promiscuous mode [ 111.700354][ T8412] device hsr_slave_1 entered promiscuous mode [ 111.711264][ T36] Bluetooth: hci4: command 0x0409 tx timeout [ 111.719145][ T8412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.728517][ T8412] Cannot create hsr debugfs directory [ 111.816557][ T8414] team0: Port device team_slave_0 added [ 111.835956][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 111.867198][ T8414] team0: Port device team_slave_1 added [ 111.985779][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.993072][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.019612][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.043392][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.050570][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.079049][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.138180][ T8408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.190740][ T8408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.201338][ T2938] Bluetooth: hci5: command 0x0409 tx timeout [ 112.220347][ T8414] device hsr_slave_0 entered promiscuous mode [ 112.228868][ T8414] device hsr_slave_1 entered promiscuous mode [ 112.236975][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.245511][ T8414] Cannot create hsr debugfs directory [ 112.257270][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.265651][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.275279][ T8466] device bridge_slave_0 entered promiscuous mode [ 112.285910][ T8408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.300029][ T8408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.320150][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.328071][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.337381][ T8466] device bridge_slave_1 entered promiscuous mode [ 112.392630][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.442394][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.524392][ T8466] team0: Port device team_slave_0 added [ 112.534333][ T8466] team0: Port device team_slave_1 added [ 112.565642][ T8410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.580397][ T8410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.609280][ T8410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.656681][ T8410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.671285][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.678384][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.709285][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.726845][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.734608][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.762287][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.802450][ T8466] device hsr_slave_0 entered promiscuous mode [ 112.809369][ T8466] device hsr_slave_1 entered promiscuous mode [ 112.818730][ T8466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.827362][ T8466] Cannot create hsr debugfs directory [ 112.834323][ T2938] Bluetooth: hci0: command 0x041b tx timeout [ 112.839470][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.909967][ T8412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.942849][ T8412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.962743][ T8412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.013391][ T8412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.043788][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.082632][ T3618] Bluetooth: hci1: command 0x041b tx timeout [ 113.095023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.105560][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.116030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.126407][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.137324][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.145616][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.188320][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.204546][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.212672][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.221980][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.231558][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.239175][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.250816][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.271866][ T8414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.302777][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.311808][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.319578][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.328676][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 113.345165][ T8414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.368989][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.406399][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.417083][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.427181][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.437765][ T8414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.450259][ T8414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.493580][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.502568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.512358][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.519578][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.528709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.538070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.547396][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.554645][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.561287][ T2938] Bluetooth: hci3: command 0x041b tx timeout [ 113.563422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.577622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.587524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.627796][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.666863][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.679354][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.690656][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.706138][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.717754][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.730533][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.756678][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.765306][ T8466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.776252][ T8466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.786298][ T8466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.794107][ T9013] Bluetooth: hci4: command 0x041b tx timeout [ 113.812960][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.822570][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.831930][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.840543][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.850554][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.860342][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.869211][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.878448][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.890237][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.916423][ T8406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.926529][ T8466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.937474][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.955114][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.974298][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.024981][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.035596][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.046019][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.053724][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.072207][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.080195][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.088501][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.129877][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.139866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.150104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.160080][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.167452][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.177286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.186853][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.197403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.205695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.228493][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.237365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.247616][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.259310][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.271751][ T2938] Bluetooth: hci5: command 0x041b tx timeout [ 114.282367][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.304274][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.313413][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.323131][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.344248][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.380171][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.389178][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.398338][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.407843][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.416212][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.425323][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.447695][ T8410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.459977][ T8410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.472610][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.494157][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.503168][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.512715][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.520243][ T9013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.529009][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.538425][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.547753][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.556834][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.565417][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.575032][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.638549][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.648148][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.658467][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.668528][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.675717][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.686787][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.695836][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.704804][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.714446][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.721623][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.729580][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.739482][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.748846][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.756278][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.764581][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.817672][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.826104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.835943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.846409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.855368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.865539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.874823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.884452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.893449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.903088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.913357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.921141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.922234][ T3618] Bluetooth: hci0: command 0x040f tx timeout [ 114.929092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.943576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.952281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.961065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.978919][ T8406] device veth0_vlan entered promiscuous mode [ 114.993141][ T8408] device veth0_vlan entered promiscuous mode [ 115.012352][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.021751][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.030533][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.043992][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.052878][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.063739][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.072622][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.081280][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.089769][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.098714][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.117131][ T8406] device veth1_vlan entered promiscuous mode [ 115.138016][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.151448][ T2938] Bluetooth: hci1: command 0x040f tx timeout [ 115.161090][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.169352][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.178525][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.187419][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.197497][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.209251][ T8408] device veth1_vlan entered promiscuous mode [ 115.261691][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.273437][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.292240][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.319357][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.327839][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.340050][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.366368][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.390210][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.398827][ T3618] Bluetooth: hci2: command 0x040f tx timeout [ 115.476136][ T8408] device veth0_macvtap entered promiscuous mode [ 115.484876][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.495156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.504597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.512624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.520456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.529883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.539381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.556226][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.567538][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.596421][ T8408] device veth1_macvtap entered promiscuous mode [ 115.616824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.626122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.634604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.641930][ T2938] Bluetooth: hci3: command 0x040f tx timeout [ 115.643812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.663621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.672868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.696423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.704397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.713336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.722907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.732373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.742269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.751929][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.759426][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.772106][ T8410] device veth0_vlan entered promiscuous mode [ 115.786117][ T8406] device veth0_macvtap entered promiscuous mode [ 115.798662][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.809307][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.828216][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.845475][ T8410] device veth1_vlan entered promiscuous mode [ 115.864716][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.871320][ T36] Bluetooth: hci4: command 0x040f tx timeout [ 115.874385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.890682][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.898053][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.927373][ T8406] device veth1_macvtap entered promiscuous mode [ 115.946162][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.956386][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.971841][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.982501][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.991537][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.000375][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.009171][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.018065][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.027746][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.037342][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.085123][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.093971][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.108080][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.128584][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.139191][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.154072][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.165238][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.174974][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.184280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.194200][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.220426][ T8466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.232222][ T8466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.248032][ T8414] device veth0_vlan entered promiscuous mode [ 116.259913][ T8408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.273630][ T8408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.282977][ T8408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.291952][ T8408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.311444][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.319501][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.328706][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.338291][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.347726][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.358291][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.367744][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.370385][ T2938] Bluetooth: hci5: command 0x040f tx timeout [ 116.386040][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.398064][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.428557][ T8414] device veth1_vlan entered promiscuous mode [ 116.442459][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.453775][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.463100][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.472881][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.487140][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.500342][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.520147][ T8412] device veth0_vlan entered promiscuous mode [ 116.546504][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.556142][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.566294][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.576353][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.585677][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.596262][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.605825][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.616684][ T8410] device veth0_macvtap entered promiscuous mode [ 116.629422][ T8406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.640950][ T8406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.649969][ T8406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.659690][ T8406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.688652][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.706223][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.725514][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.735604][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.745218][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.754912][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.813662][ T8412] device veth1_vlan entered promiscuous mode [ 116.834872][ T8410] device veth1_macvtap entered promiscuous mode [ 116.943204][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.956033][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.975654][ T8414] device veth0_macvtap entered promiscuous mode [ 116.991812][ T3618] Bluetooth: hci0: command 0x0419 tx timeout [ 117.028163][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.072352][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.086447][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.108956][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.123163][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.133231][ T8414] device veth1_macvtap entered promiscuous mode [ 117.186064][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.196098][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.211963][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.232190][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.242818][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.251875][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.265413][ T3618] Bluetooth: hci1: command 0x0419 tx timeout [ 117.275050][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.286911][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.297728][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.309636][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.325428][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.339702][ T8412] device veth0_macvtap entered promiscuous mode [ 117.351591][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.359838][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.391821][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.400676][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.412012][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.421767][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.429874][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.439591][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.458826][ T8410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.471640][ T9691] Bluetooth: hci2: command 0x0419 tx timeout [ 117.481387][ T8410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.490386][ T8410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.499736][ T8410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.515352][ T8412] device veth1_macvtap entered promiscuous mode [ 117.546721][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.559685][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.571459][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.583260][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.599109][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.610975][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.623011][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.640036][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.663722][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.711532][ T9691] Bluetooth: hci3: command 0x0419 tx timeout [ 117.719820][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.730338][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.739727][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.750247][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.819569][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.832269][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.843636][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.855687][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.866845][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.879343][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.890003][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.901263][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.914502][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.927729][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.940263][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.953323][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.961341][ T9691] Bluetooth: hci4: command 0x0419 tx timeout [ 117.964212][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.980273][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.991832][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.004367][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.018742][ T8466] device veth0_vlan entered promiscuous mode [ 118.027046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.037318][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.047294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.057199][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.067183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.077154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.086877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.095627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.136798][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.147939][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.161564][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.173599][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.184653][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.197520][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.208337][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.220119][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.235963][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.245899][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.248973][ T676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.255900][ T8414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.279646][ T676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.280743][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.295931][ T8414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.305081][ T8414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.314530][ T8414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.354791][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.363193][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.373754][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.383471][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.396931][ T8412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.407736][ T8412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.416959][ T8412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.426254][ T8412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.442151][ T26] Bluetooth: hci5: command 0x0419 tx timeout [ 118.456893][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.466957][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.477901][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.502119][ T8466] device veth1_vlan entered promiscuous mode [ 118.682997][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.708581][ C1] hrtimer: interrupt took 28285 ns [ 118.724699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.737825][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.771986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.814922][ T8466] device veth0_macvtap entered promiscuous mode [ 118.835171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) [ 118.872177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.891825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.910029][ T9788] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 119.015394][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.073206][ T9013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.091838][ T8466] device veth1_macvtap entered promiscuous mode [ 119.136098][ T9788] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 119.164881][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.195327][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.233656][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 16:35:12 executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 119.270720][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.304614][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.336846][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.348900][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.369307][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.380108][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.401892][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.415000][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.427381][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.440026][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.457221][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.479688][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 16:35:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) [ 119.497909][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.509129][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.530741][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.532429][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.558209][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.561997][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.576220][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.613469][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.650879][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.669692][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.690877][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.715739][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.726503][ T8466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.738432][ T8466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.781667][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.811531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.821854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.840376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.856470][ T353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.897826][ T353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.916442][ T8466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 16:35:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) [ 119.961495][ T8466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.985558][ T8466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.008721][ T8466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.042323][ T9843] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 120.057027][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) [ 120.091210][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 120.121274][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.129950][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.163318][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 120.184528][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:13 executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 120.221666][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 120.370523][ T9854] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:35:13 executing program 0: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 120.443883][ T9864] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 120.500031][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.557215][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:35:13 executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 120.627866][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.659385][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.690324][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.732924][ T9891] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 120.858201][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.903309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.930116][ T9894] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 120.949162][ T9891] syz-executor.0 (9891) used greatest stack depth: 22576 bytes left [ 121.080419][ T9844] infiniband syz1: set active [ 121.086822][ T3618] ip6gretap0 speed is unknown, defaulting to 1000 [ 121.110845][ T9844] infiniband syz1: added ip6gretap0 [ 121.117410][ T9844] BUG: sleeping function called from invalid context at drivers/infiniband/sw/rxe/rxe_pool.c:346 [ 121.128754][ T9844] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9844, name: syz-executor.2 [ 121.138151][ T9844] 6 locks held by syz-executor.2/9844: [ 121.143732][ T9844] #0: ffffffff8f7a11f8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x161/0x690 [ 121.154606][ T9844] #1: ffffffff8c998050 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x261/0x540 [ 121.164077][ T9844] #2: ffffffff8c9875f0 (devices_rwsem){++++}-{3:3}, at: enable_device_and_get+0xfc/0x3b0 [ 121.174117][ T9844] #3: ffffffff8c9874b0 (clients_rwsem){++++}-{3:3}, at: enable_device_and_get+0x15b/0x3b0 [ 121.184373][ T9844] #4: ffff88805a4445a0 (&device->client_data_rwsem){++++}-{3:3}, at: add_client_context+0x3d0/0x5e0 [ 121.195401][ T9844] #5: ffff88805a445648 (&pool->pool_lock){....}-{2:2}, at: rxe_alloc+0x1b/0x40 [ 121.204531][ T9844] irq event stamp: 7350 [ 121.208733][ T9844] hardirqs last enabled at (7349): [] _raw_read_unlock_irqrestore+0x42/0x50 [ 121.219207][ T9844] hardirqs last disabled at (7350): [] _raw_read_lock_irqsave+0x85/0x90 [ 121.229136][ T9844] softirqs last enabled at (7032): [] asm_call_irq_on_stack+0xf/0x20 [ 121.239003][ T9844] softirqs last disabled at (7013): [] asm_call_irq_on_stack+0xf/0x20 [ 121.248764][ T9844] Preemption disabled at: [ 121.248779][ T9844] [<0000000000000000>] 0x0 [ 121.257639][ T9844] CPU: 1 PID: 9844 Comm: syz-executor.2 Not tainted 5.11.0-rc6-next-20210201-syzkaller #0 [ 121.267754][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.277845][ T9844] Call Trace: [ 121.281142][ T9844] dump_stack+0x107/0x163 [ 121.285516][ T9844] ___might_sleep.cold+0x1f1/0x237 [ 121.290663][ T9844] rxe_alloc_nl+0x55c/0x710 [ 121.295200][ T9844] ? rdma_restrack_add+0x139/0x4d0 [ 121.300356][ T9844] ? __rxe_drop_index+0x60/0x60 [ 121.305261][ T9844] ? _raw_read_lock_irqsave+0x85/0x90 [ 121.310968][ T9844] rxe_alloc+0x26/0x40 [ 121.315255][ T9844] rxe_get_dma_mr+0x49/0x110 [ 121.320023][ T9844] __ib_alloc_pd+0x277/0x6d0 [ 121.324748][ T9844] ib_mad_init_device+0xc78/0x1400 [ 121.329911][ T9844] ? ib_mad_post_receive_mads+0xee0/0xee0 [ 121.335761][ T9844] ? up_read+0x20/0x20 [ 121.339971][ T9844] ? do_raw_spin_unlock+0x171/0x230 [ 121.345213][ T9844] ? ib_mad_post_receive_mads+0xee0/0xee0 [ 121.351046][ T9844] add_client_context+0x405/0x5e0 [ 121.356114][ T9844] ? remove_client_context+0x110/0x110 [ 121.361619][ T9844] enable_device_and_get+0x1cd/0x3b0 [ 121.366970][ T9844] ? add_client_context+0x5e0/0x5e0 [ 121.372297][ T9844] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 121.377742][ T9844] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 121.384017][ T9844] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 121.389790][ T9844] ib_register_device+0x7c7/0xa50 [ 121.395219][ T9844] ? alloc_port_data.part.0+0x3e0/0x3e0 [ 121.400807][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 121.407179][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 121.413461][ T9844] ? crypto_alloc_tfm_node+0x12b/0x260 [ 121.418975][ T9844] rxe_register_device+0x3b2/0x480 [ 121.424128][ T9844] rxe_add+0x12fe/0x16d0 [ 121.428601][ T9844] rxe_net_add+0x8c/0xe0 [ 121.432872][ T9844] rxe_newlink+0xb7/0xe0 [ 121.437272][ T9844] nldev_newlink+0x30e/0x540 [ 121.442282][ T9844] ? nldev_set_doit+0x430/0x430 [ 121.447282][ T9844] ? lockdep_unlock+0x11c/0x290 [ 121.452440][ T9844] ? lock_release+0x710/0x710 [ 121.457148][ T9844] ? __kernel_text_address+0x9/0x30 [ 121.462557][ T9844] ? unwind_get_return_address+0x51/0x90 [ 121.468328][ T9844] ? create_prof_cpu_mask+0x20/0x20 [ 121.473672][ T9844] ? apparmor_capable+0x1d8/0x460 [ 121.478781][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 121.485270][ T9844] ? ns_capable+0xde/0x100 [ 121.489819][ T9844] ? nldev_set_doit+0x430/0x430 [ 121.494716][ T9844] rdma_nl_rcv_msg+0x36d/0x690 [ 121.499876][ T9844] ? rdma_nl_multicast+0x310/0x310 [ 121.505164][ T9844] rdma_nl_rcv+0x2ee/0x430 [ 121.509685][ T9844] ? rdma_nl_rcv_msg+0x690/0x690 [ 121.514654][ T9844] ? netlink_deliver_tap+0x227/0xb70 [ 121.519971][ T9844] ? _copy_from_iter_full+0x2fa/0x1120 [ 121.525636][ T9844] netlink_unicast+0x533/0x7d0 [ 121.530425][ T9844] ? netlink_attachskb+0x870/0x870 [ 121.535817][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 121.542176][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 121.548431][ T9844] ? __phys_addr_symbol+0x2c/0x70 [ 121.553457][ T9844] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 121.559266][ T9844] ? __check_object_size+0x171/0x3f0 [ 121.564675][ T9844] netlink_sendmsg+0x856/0xd90 [ 121.569576][ T9844] ? netlink_unicast+0x7d0/0x7d0 [ 121.574629][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 121.581143][ T9844] ? netlink_unicast+0x7d0/0x7d0 [ 121.586109][ T9844] sock_sendmsg+0xcf/0x120 [ 121.590713][ T9844] ____sys_sendmsg+0x6e8/0x810 [ 121.595497][ T9844] ? kernel_sendmsg+0x50/0x50 [ 121.600175][ T9844] ? do_recvmmsg+0x6c0/0x6c0 [ 121.604894][ T9844] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 121.611134][ T9844] ___sys_sendmsg+0xf3/0x170 [ 121.616012][ T9844] ? sendmsg_copy_msghdr+0x160/0x160 [ 121.621576][ T9844] ? __fget_files+0x266/0x3d0 [ 121.626286][ T9844] ? lock_downgrade+0x6d0/0x6d0 [ 121.631166][ T9844] ? __fget_files+0x288/0x3d0 [ 121.636494][ T9844] ? __fget_light+0xea/0x280 [ 121.641269][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 121.647606][ T9844] __sys_sendmsg+0xe5/0x1b0 [ 121.652115][ T9844] ? __sys_sendmsg_sock+0xb0/0xb0 [ 121.657152][ T9844] ? __do_sys_futex+0x2a2/0x470 [ 121.662013][ T9844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 121.667912][ T9844] do_syscall_64+0x2d/0x70 [ 121.672340][ T9844] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.678248][ T9844] RIP: 0033:0x465b09 [ 121.682141][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.701927][ T9844] RSP: 002b:00007fb51e0a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.710557][ T9844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 121.718714][ T9844] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 121.726972][ T9844] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 121.735031][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 121.743017][ T9844] R13: 00007ffea52b879f R14: 00007fb51e0a4300 R15: 0000000000022000 [ 121.930242][ T9844] infiniband syz1: Couldn't open port 1 [ 122.122336][ T9844] BUG: sleeping function called from invalid context at drivers/infiniband/sw/rxe/rxe_pool.c:346 [ 122.132895][ T9844] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9844, name: syz-executor.2 [ 122.142298][ T9844] 6 locks held by syz-executor.2/9844: [ 122.147780][ T9844] #0: ffffffff8f7a11f8 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x161/0x690 [ 122.158329][ T9844] #1: ffffffff8c998050 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x261/0x540 [ 122.168500][ T9844] #2: ffffffff8c9875f0 (devices_rwsem){++++}-{3:3}, at: enable_device_and_get+0xfc/0x3b0 [ 122.178502][ T9844] #3: ffffffff8c9874b0 (clients_rwsem){++++}-{3:3}, at: enable_device_and_get+0x15b/0x3b0 [ 122.188842][ T9844] #4: ffff88805a4445a0 (&device->client_data_rwsem){++++}-{3:3}, at: add_client_context+0x3d0/0x5e0 [ 122.200400][ T9844] #5: ffff88805a445648 (&pool->pool_lock){....}-{2:2}, at: rxe_alloc+0x1b/0x40 [ 122.209968][ T9844] irq event stamp: 12430 [ 122.214245][ T9844] hardirqs last enabled at (12429): [] _raw_spin_unlock_irqrestore+0x42/0x50 [ 122.225088][ T9844] hardirqs last disabled at (12430): [] _raw_read_lock_irqsave+0x85/0x90 [ 122.235290][ T9844] softirqs last enabled at (11016): [] asm_call_irq_on_stack+0xf/0x20 [ 122.245746][ T9844] softirqs last disabled at (10879): [] asm_call_irq_on_stack+0xf/0x20 [ 122.255592][ T9844] Preemption disabled at: [ 122.255607][ T9844] [<0000000000000000>] 0x0 [ 122.264477][ T9844] CPU: 1 PID: 9844 Comm: syz-executor.2 Tainted: G W 5.11.0-rc6-next-20210201-syzkaller #0 [ 122.276235][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.286405][ T9844] Call Trace: [ 122.289973][ T9844] dump_stack+0x107/0x163 [ 122.294476][ T9844] ___might_sleep.cold+0x1f1/0x237 [ 122.299636][ T9844] rxe_alloc_nl+0x55c/0x710 [ 122.304172][ T9844] ? rdma_restrack_add+0x139/0x4d0 [ 122.309411][ T9844] ? __rxe_drop_index+0x60/0x60 [ 122.314302][ T9844] ? _raw_read_lock_irqsave+0x85/0x90 [ 122.319737][ T9844] rxe_alloc+0x26/0x40 [ 122.323895][ T9844] rxe_get_dma_mr+0x49/0x110 [ 122.328644][ T9844] __ib_alloc_pd+0x277/0x6d0 [ 122.333454][ T9844] srp_add_one+0x3b4/0xe60 [ 122.338286][ T9844] ? srp_map_idb+0x3a0/0x3a0 [ 122.342912][ T9844] add_client_context+0x405/0x5e0 [ 122.348062][ T9844] ? remove_client_context+0x110/0x110 [ 122.353743][ T9844] enable_device_and_get+0x1cd/0x3b0 [ 122.359180][ T9844] ? add_client_context+0x5e0/0x5e0 [ 122.364507][ T9844] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 122.370095][ T9844] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 122.376410][ T9844] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 122.382367][ T9844] ib_register_device+0x7c7/0xa50 [ 122.387700][ T9844] ? alloc_port_data.part.0+0x3e0/0x3e0 [ 122.393369][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 122.399755][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 122.406032][ T9844] ? crypto_alloc_tfm_node+0x12b/0x260 [ 122.411692][ T9844] rxe_register_device+0x3b2/0x480 [ 122.417115][ T9844] rxe_add+0x12fe/0x16d0 [ 122.421405][ T9844] rxe_net_add+0x8c/0xe0 [ 122.425869][ T9844] rxe_newlink+0xb7/0xe0 [ 122.430143][ T9844] nldev_newlink+0x30e/0x540 [ 122.434948][ T9844] ? nldev_set_doit+0x430/0x430 [ 122.439832][ T9844] ? lockdep_unlock+0x11c/0x290 [ 122.444812][ T9844] ? lock_release+0x710/0x710 [ 122.449517][ T9844] ? __kernel_text_address+0x9/0x30 [ 122.454924][ T9844] ? unwind_get_return_address+0x51/0x90 [ 122.460798][ T9844] ? create_prof_cpu_mask+0x20/0x20 [ 122.466044][ T9844] ? apparmor_capable+0x1d8/0x460 [ 122.471208][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 122.477661][ T9844] ? ns_capable+0xde/0x100 [ 122.482201][ T9844] ? nldev_set_doit+0x430/0x430 [ 122.487828][ T9844] rdma_nl_rcv_msg+0x36d/0x690 [ 122.492629][ T9844] ? rdma_nl_multicast+0x310/0x310 [ 122.497885][ T9844] rdma_nl_rcv+0x2ee/0x430 [ 122.502344][ T9844] ? rdma_nl_rcv_msg+0x690/0x690 [ 122.507312][ T9844] ? netlink_deliver_tap+0x227/0xb70 [ 122.512638][ T9844] ? _copy_from_iter_full+0x2fa/0x1120 [ 122.518408][ T9844] netlink_unicast+0x533/0x7d0 [ 122.523210][ T9844] ? netlink_attachskb+0x870/0x870 [ 122.528550][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 122.534918][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 122.541231][ T9844] ? __phys_addr_symbol+0x2c/0x70 [ 122.546426][ T9844] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 122.552295][ T9844] ? __check_object_size+0x171/0x3f0 [ 122.557721][ T9844] netlink_sendmsg+0x856/0xd90 [ 122.562617][ T9844] ? netlink_unicast+0x7d0/0x7d0 [ 122.567598][ T9844] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 122.573920][ T9844] ? netlink_unicast+0x7d0/0x7d0 [ 122.578996][ T9844] sock_sendmsg+0xcf/0x120 [ 122.583551][ T9844] ____sys_sendmsg+0x6e8/0x810 [ 122.588358][ T9844] ? kernel_sendmsg+0x50/0x50 [ 122.593239][ T9844] ? do_recvmmsg+0x6c0/0x6c0 [ 122.597865][ T9844] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 122.604093][ T9844] ___sys_sendmsg+0xf3/0x170 [ 122.608723][ T9844] ? sendmsg_copy_msghdr+0x160/0x160 [ 122.614089][ T9844] ? __fget_files+0x266/0x3d0 [ 122.618813][ T9844] ? lock_downgrade+0x6d0/0x6d0 [ 122.623724][ T9844] ? __fget_files+0x288/0x3d0 [ 122.628449][ T9844] ? __fget_light+0xea/0x280 [ 122.633077][ T9844] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 122.639667][ T9844] __sys_sendmsg+0xe5/0x1b0 [ 122.644387][ T9844] ? __sys_sendmsg_sock+0xb0/0xb0 [ 122.649585][ T9844] ? __do_sys_futex+0x2a2/0x470 [ 122.654512][ T9844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.660547][ T9844] do_syscall_64+0x2d/0x70 [ 122.665034][ T9844] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 122.671051][ T9844] RIP: 0033:0x465b09 [ 122.675087][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.694953][ T9844] RSP: 002b:00007fb51e0a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.703531][ T9844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 122.711851][ T9844] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 122.719857][ T9844] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 122.728035][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 122.736038][ T9844] R13: 00007ffea52b879f R14: 00007fb51e0a4300 R15: 0000000000022000 [ 122.766079][ T9844] RDS/IB: syz1: added [ 122.771416][ T9844] smc: adding ib device syz1 with port count 1 [ 122.777899][ T9844] smc: ib device syz1 port 1 has pnetid [ 122.786087][ T2938] ip6gretap0 speed is unknown, defaulting to 1000 [ 122.797494][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 123.174778][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 123.432178][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 123.539066][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 123.652756][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 [ 123.769912][ T9844] ip6gretap0 speed is unknown, defaulting to 1000 16:35:16 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x0) 16:35:16 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:16 executing program 4: socket$pptp(0x18, 0x1, 0x2) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001300)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:35:16 executing program 0: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) 16:35:16 executing program 3: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) 16:35:16 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) [ 124.042551][ T9935] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 124.086228][ T37] audit: type=1804 audit(1612197317.109:2): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 [ 124.102502][ T9939] rdma_rxe: already configured on ip6gretap0 [ 124.215083][ T37] audit: type=1804 audit(1612197317.129:3): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 16:35:17 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) [ 124.308979][ T9935] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 124.331043][ T9793] usb 5-1: new high-speed USB device number 2 using dummy_hcd 16:35:17 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x0) [ 124.398434][ T9932] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 124.461300][ T9935] syz-executor.3 (9935) used greatest stack depth: 22528 bytes left [ 124.485501][ T37] audit: type=1804 audit(1612197317.269:4): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 16:35:17 executing program 3: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) 16:35:17 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:17 executing program 0: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 124.636988][ T37] audit: type=1804 audit(1612197317.289:5): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 [ 124.711015][ T37] audit: type=1804 audit(1612197317.319:6): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 [ 124.745429][ T37] audit: type=1804 audit(1612197317.439:7): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/4/bus" dev="sda1" ino=15780 res=1 errno=0 [ 124.881068][ T9793] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 124.906386][ T9793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.924994][ T9793] usb 5-1: Product: syz [ 124.929328][ T9793] usb 5-1: Manufacturer: syz [ 124.950917][ T9793] usb 5-1: SerialNumber: syz [ 125.005300][ T9793] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 16:35:18 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) [ 125.216689][ T9962] rdma_rxe: already configured on ip6gretap0 [ 125.277349][ T9963] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 125.303401][ T37] audit: type=1804 audit(1612197318.339:8): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/5/bus" dev="sda1" ino=15792 res=1 errno=0 [ 125.339081][ T9966] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 16:35:18 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x0) 16:35:18 executing program 3: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fddbdf250b00735913acf049", @ANYRES32, @ANYBLOB="04000b0018006e800400020004000100040002000400010004000100"], 0x38}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0xff], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x163880, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x2, @empty}}, 0x0, 0x0, 0x0, 0x0, "d96c1ac4a0853341207123caf0efc6012c8f77594fb297567aaf3965560d1f0a1b81e07c4ef5148c14e93218b5b054a35e05cd8b89db804ec54eaa2a36ac859111743d42183e212b68211f8f62045d38"}, 0xd8) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6ce7bac59659bce2849c06602507d7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "2eea7a0c3bfdbe719df521600a1fcccb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1cca}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7b03637271ff3e019aef0bee71e512f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0xb) [ 125.450789][ T37] audit: type=1804 audit(1612197318.349:9): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/5/bus" dev="sda1" ino=15792 res=1 errno=0 16:35:18 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) [ 125.567731][ T9976] rdma_rxe: already configured on ip6gretap0 [ 125.689956][ T37] audit: type=1804 audit(1612197318.469:10): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir677667085/syzkaller.0qt1MV/5/bus" dev="sda1" ino=15792 res=1 errno=0 [ 125.776416][ T9981] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 125.791781][ T9793] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.866128][ T37] audit: type=1804 audit(1612197318.719:11): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir291519074/syzkaller.NJ3nBt/4/bus" dev="sda1" ino=15789 res=1 errno=0 [ 126.022575][ T5] usb 5-1: USB disconnect, device number 2 16:35:19 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0xfffffffe) 16:35:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000013c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018000000000000001701000003000000010000000000000089fd429aef16c6e3ecaa8a7924080d67c0aeacf26eafe13745000339282c7069b54787448793fe00d8299d6dfc465829b711ce28eb8f7d62fcca7ebd067fbe96bd1685f6aaa8486ecc07"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000003500)=""/102400, 0x19000}], 0x1}}], 0x1, 0x0, 0x0) 16:35:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:19 executing program 4: socket$pptp(0x18, 0x1, 0x2) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001300)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:35:19 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0xfffffffe) [ 126.831169][ T9793] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 126.858073][ T9793] ath9k_htc: Failed to initialize the device 16:35:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) [ 126.918396][ T5] usb 5-1: ath9k_htc: USB layer deinitialized 16:35:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0xfffffffe) 16:35:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:20 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="da5275e06887cd9eee4f9c2fbd510e1110eb917fe622dfdff3f9049db0dfd4a6cf6cf3da3a65356e3da3fa5356081a98a71554be16782ab07de9b76e90523d3cfaa0c394fa841fdc66a9ad43cd5f93a882c8a49b6954663856972648ebf14965ff01657dcd4455f876b034bf361ea4685dc03ad8847ecfee8d93a4ddffd3fa8f4861024ec59813513c7121c6d903d440f6fd47a0de1cbc0550f0ab13cf40c0fcf27ab92e76349570ff464a00f89f2d", 0xaf, 0x8, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f0000000580)="af57176a85cdd7069bff2e2bdeb24ac695d550207202162328734ad295449d216da0e9061658ccb1952d26a72fea64c4b5fb9432a6b88f7dedb20ef5efb6507dada95a76849057814e5d946290fc9513afd6895361b54657bd095a8dae8e9de9513d32953974e68d2dc1957493bac21a4ffb2a9683b87522974eaa954601862defef163da0a2c7995f3c389c2184", 0x8e, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="2da499e1c610969a6e69116b091479dec6a630347d80b22c00a53a1db841df191d8c762d2c49ce5d0643a63bac81d95d613c57064b93305687f47dc28b9fc2d7873b18765086876a2a6c2bebd06a5bb248d5b472733562eabfa3cfd5e90d0a1565c2ab71c5243aaa01dd34f9b2d2901e70d836554e5e39693b39c42604686511ae79c26b4cbc924e3dca42db1658662f4805819008a4da3466f5", 0x9a, 0x4, 0x0, 0x2}]) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT]) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000340)={[0x3]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x0, 0xffffffe4, 0x0, 0x60000000f100000}) 16:35:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0xfffffffe) [ 127.350874][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd 16:35:20 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000013c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018000000000000001701000003000000010000000000000089fd429aef16c6e3ecaa8a7924080d67c0aeacf26eafe13745000339282c7069b54787448793fe00d8299d6dfc465829b711ce28eb8f7d62fcca7ebd067fbe96bd1685f6aaa8486ecc07"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000003500)=""/102400, 0x19000}], 0x1}}], 0x1, 0x0, 0x0) 16:35:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) [ 127.960616][ T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.977927][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.997027][ T5] usb 5-1: Product: syz [ 128.015100][ T5] usb 5-1: Manufacturer: syz [ 128.019909][ T5] usb 5-1: SerialNumber: syz [ 128.066506][ T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.740409][ T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.980845][ T2938] usb 5-1: USB disconnect, device number 3 16:35:22 executing program 4: socket$pptp(0x18, 0x1, 0x2) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001300)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:35:22 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000013c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018000000000000001701000003000000010000000000000089fd429aef16c6e3ecaa8a7924080d67c0aeacf26eafe13745000339282c7069b54787448793fe00d8299d6dfc465829b711ce28eb8f7d62fcca7ebd067fbe96bd1685f6aaa8486ecc07"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000003500)=""/102400, 0x19000}], 0x1}}], 0x1, 0x0, 0x0) 16:35:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000013c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018000000000000001701000003000000010000000000000089fd429aef16c6e3ecaa8a7924080d67c0aeacf26eafe13745000339282c7069b54787448793fe00d8299d6dfc465829b711ce28eb8f7d62fcca7ebd067fbe96bd1685f6aaa8486ecc07"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000003500)=""/102400, 0x19000}], 0x1}}], 0x1, 0x0, 0x0) 16:35:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) 16:35:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) [ 129.800840][ T5] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 129.819527][ T5] ath9k_htc: Failed to initialize the device 16:35:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r2) [ 129.856952][ T2938] usb 5-1: ath9k_htc: USB layer deinitialized 16:35:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) [ 130.240334][ T2938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.770719][ T2938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.780562][ T2938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.788905][ T2938] usb 5-1: Product: syz [ 130.794135][ T2938] usb 5-1: Manufacturer: syz [ 130.799135][ T2938] usb 5-1: SerialNumber: syz [ 130.842066][ T2938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested