last executing test programs: 11m38.487303676s ago: executing program 4 (id=7): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f00000005c0)=""/229, 0xe5, 0x12140, &(0x7f00000006c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) dup(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = timerfd_create(0x0, 0x80000) read(r6, &(0x7f0000000ac0)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a00000000000000180008801400010001000000000000008700040010080800060007000700000008000500", @ANYRES32=r7], 0x40}}, 0x40040d0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="d4ba81e74230d2541569f709dcc5d54814e451d3a7dd978180afa975737e0b567db6bd004d7c65e77bf6ccb11b74c2a613d0bfdb40cc28823da18022c43d727ea4344964704cba9f8352cf5558b4c7078c33c1b36038c84ad870b7fa73961b17d7c789444d386cc62cbe3753dc5e9d6f47210535aff233f166960c0ea54fa65b0ccd5fe7aa2522ed65717a1b2b5622dc095cbc26f6bc3cde2ae69cd4d16fd231528821fc", 0xa4) 11m36.174055952s ago: executing program 4 (id=9): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r2, 0x5402, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) 11m35.048317554s ago: executing program 4 (id=10): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvfrom$x25(0xffffffffffffffff, &(0x7f00000005c0)=""/229, 0xe5, 0x12140, &(0x7f00000006c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup(r2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = timerfd_create(0x0, 0x80000) read(r7, &(0x7f0000000ac0)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a00000000000000180008801400010001000000000000008700040010080800060007000700000008000500", @ANYRES32=r8], 0x40}}, 0x40040d0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d4ba81e74230d2541569f709dcc5d54814e451d3a7dd978180afa975737e0b567db6bd004d7c65e77bf6ccb11b74c2a613d0bfdb40cc28823da18022c43d727ea4344964704cba9f8352cf5558b4c7078c33c1b36038c84ad870b7fa73961b17d7c789444d386cc62cbe3753dc5e9d6f47210535aff233f166960c0ea54fa65b0ccd5fe7aa2522ed65717a1b2b5622dc095cbc26f6bc3cde2ae69cd4d16fd231528821fc", 0xa4) 11m33.044319046s ago: executing program 4 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2000c884}, 0x20000800) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) 11m28.017378141s ago: executing program 4 (id=20): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvfrom$x25(0xffffffffffffffff, &(0x7f00000005c0)=""/229, 0xe5, 0x12140, &(0x7f00000006c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup(r2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = timerfd_create(0x0, 0x80000) read(r7, &(0x7f0000000ac0)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a00000000000000180008801400010001000000000000008700040010080800060007000700000008000500", @ANYRES32=r8], 0x40}}, 0x40040d0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d4ba81e74230d2541569f709dcc5d54814e451d3a7dd978180afa975737e0b567db6bd004d7c65e77bf6ccb11b74c2a613d0bfdb40cc28823da18022c43d727ea4344964704cba9f8352cf5558b4c7078c33c1b36038c84ad870b7fa73961b17d7c789444d386cc62cbe3753dc5e9d6f47210535aff233f166960c0ea54fa65b0ccd5fe7aa2522ed65717a1b2b5622dc095cbc26f6bc3cde2ae69cd4d16fd231528821fc", 0xa4) 11m23.945181286s ago: executing program 4 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000300)=0x2, 0x2) connect$unix(r6, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000580)={0xa0002008}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r11, &(0x7f00000000c0)={0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={0x0, &(0x7f0000001f00)=""/4096, 0x0, 0x1000, 0x3}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m7.713689205s ago: executing program 32 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000300)=0x2, 0x2) connect$unix(r6, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000580)={0xa0002008}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r11, &(0x7f00000000c0)={0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={0x0, &(0x7f0000001f00)=""/4096, 0x0, 0x1000, 0x3}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m2.916510155s ago: executing program 1 (id=396): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305}, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$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") 7m1.683543168s ago: executing program 1 (id=398): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f00000005c0)=""/229, 0xe5, 0x12140, &(0x7f00000006c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup(r2) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = timerfd_create(0x0, 0x80000) read(r7, &(0x7f0000000ac0)=""/149, 0x95) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a00000000000000180008801400010001000000000000008700040010080800060007000700000008000500", @ANYRES32=r8], 0x40}}, 0x40040d0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d4ba81e74230d2541569f709dcc5d54814e451d3a7dd978180afa975737e0b567db6bd004d7c65e77bf6ccb11b74c2a613d0bfdb40cc28823da18022c43d727ea4344964704cba9f8352cf5558b4c7078c33c1b36038c84ad870b7fa73961b17d7c789444d386cc62cbe3753dc5e9d6f47210535aff233f166960c0ea54fa65b0ccd5fe7aa2522ed65717a1b2b5622dc095cbc26f6bc3cde2ae69cd4d16fd231528821fc", 0xa4) 7m0.880664767s ago: executing program 1 (id=401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x68, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x68}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$eJzs2j9rG2ccB/DnbBe7Nv5TSlvspQ/t4i5H7bmDTbGhVNDSWoUmEHzGciKkSEanQQoZNGfKS8gcMmYLBL8Bv4cM2UzAyeQpFxIF/8MZkmCLoM9nuS98OXgefnD8hjv47f7t2k6e7mTtMJIkYWwl9MJREubCSBgNfb3wy+Lay3v//n/tz9VSae2fGNdXN5aWY4wzPz69fvfRT3vtqf8ezzwZD/tzNw4Ol5/vf78/f/B641Y1j9U8NprtmMWtZrOdbdUrcbua19IY/65XsrwSq4280jrT79Sbu7vdmDW2pyd3W5U8j1mjG2uVbmw3Y7vVjdnNrNqIaZrG6cnA5yg/PCqKcFh8tRmKovj6QZjaC9PPwmxIvonJtyvJd5vJD71k/rAoZgd9VC6F+Q838x9u5j/cTi11EyG86HXKnXL/2e/X/yit/RrfmTt561WnUx497pf6fTzbj4fJ9/3yhf1EWPy537/tfv+rdK5fCNuXf30AgKGTxmMX7ndp+qG+n07th+f2t7GwMHZl1+AT5d07taxer7QEQRCOw6C/TFyFk6EP+iQAAAAAAAAAAAB8jKv4nXDQdwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgxvAgAA//8I7Zb8") 6m54.932472052s ago: executing program 1 (id=406): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/partitions\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m51.342920232s ago: executing program 1 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305}, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2501000000060006004e2300000800050001000000200108801c011380f400098070000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000200000028000080060001000a00000014000200fe8000000000000000000000000000bb050003000200000034000080060001000200000008000200ac1414bb05000300020000000600010002000000080002000a01010005000300020000001c000080060001000223000008000200ac1414aa0500030003000000040000800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392214000200776731"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$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") 6m49.948421547s ago: executing program 1 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305}, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$eJzs2j9rG2ccB/DnbBe7Nv5TSlvspQ/t4i5H7bmDTbGhVNDSWoUmEHzGciKkSEanQQoZNGfKS8gcMmYLBL8Bv4cM2UzAyeQpFxIF/8MZkmCLoM9nuS98OXgefnD8hjv47f7t2k6e7mTtMJIkYWwl9MJREubCSBgNfb3wy+Lay3v//n/tz9VSae2fGNdXN5aWY4wzPz69fvfRT3vtqf8ezzwZD/tzNw4Ol5/vf78/f/B641Y1j9U8NprtmMWtZrOdbdUrcbua19IY/65XsrwSq4280jrT79Sbu7vdmDW2pyd3W5U8j1mjG2uVbmw3Y7vVjdnNrNqIaZrG6cnA5yg/PCqKcFh8tRmKovj6QZjaC9PPwmxIvonJtyvJd5vJD71k/rAoZgd9VC6F+Q838x9u5j/cTi11EyG86HXKnXL/2e/X/yit/RrfmTt561WnUx497pf6fTzbj4fJ9/3yhf1EWPy537/tfv+rdK5fCNuXf30AgKGTxmMX7ndp+qG+n07th+f2t7GwMHZl1+AT5d07taxer7QEQRCOw6C/TFyFk6EP+iQAAAAAAAAAAAB8jKv4nXDQdwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgxvAgAA//8I7Zb8") 6m34.796027274s ago: executing program 33 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305}, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22cb00, 0x0) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000006c0)=""/224) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ef, &(0x7f00000002c0)="$eJzs2j9rG2ccB/DnbBe7Nv5TSlvspQ/t4i5H7bmDTbGhVNDSWoUmEHzGciKkSEanQQoZNGfKS8gcMmYLBL8Bv4cM2UzAyeQpFxIF/8MZkmCLoM9nuS98OXgefnD8hjv47f7t2k6e7mTtMJIkYWwl9MJREubCSBgNfb3wy+Lay3v//n/tz9VSae2fGNdXN5aWY4wzPz69fvfRT3vtqf8ezzwZD/tzNw4Ol5/vf78/f/B641Y1j9U8NprtmMWtZrOdbdUrcbua19IY/65XsrwSq4280jrT79Sbu7vdmDW2pyd3W5U8j1mjG2uVbmw3Y7vVjdnNrNqIaZrG6cnA5yg/PCqKcFh8tRmKovj6QZjaC9PPwmxIvonJtyvJd5vJD71k/rAoZgd9VC6F+Q838x9u5j/cTi11EyG86HXKnXL/2e/X/yit/RrfmTt561WnUx497pf6fTzbj4fJ9/3yhf1EWPy537/tfv+rdK5fCNuXf30AgKGTxmMX7ndp+qG+n07th+f2t7GwMHZl1+AT5d07taxer7QEQRCOw6C/TFyFk6EP+iQAAAAAAAAAAAB8jKv4nXDQdwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgxvAgAA//8I7Zb8") 1m23.947996191s ago: executing program 3 (id=911): pipe2(&(0x7f0000000340), 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000600)={r2, r2, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m22.206542951s ago: executing program 3 (id=914): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03e7"], 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000280)=0x8) 1m18.435825503s ago: executing program 3 (id=918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 1m18.028547688s ago: executing program 3 (id=921): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000002) ioctl$TIOCSETD(r2, 0x5412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 1m13.48222467s ago: executing program 3 (id=922): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/partitions\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m11.772125529s ago: executing program 3 (id=926): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 56.406463932s ago: executing program 34 (id=926): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3.999431345s ago: executing program 5 (id=1026): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 3.419706851s ago: executing program 0 (id=1031): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.344995112s ago: executing program 2 (id=1032): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x1) 3.184049513s ago: executing program 0 (id=1033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)="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", 0x3fe}], 0x1}}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.109424664s ago: executing program 2 (id=1034): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="949dc4a02d2caf2c", 0x8}], 0x1) 3.029875485s ago: executing program 7 (id=938): pipe2(&(0x7f0000000340), 0x80000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000600)={r2, r2, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.908032806s ago: executing program 2 (id=1035): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c820"], 0x15) 2.900433637s ago: executing program 0 (id=1036): mmap(&(0x7f0000679000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0xa0d86000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f00000004c0), 0x800010, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='htcp', 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) umount2(&(0x7f0000000000)='./file0\x00', 0x4) umount2(&(0x7f0000000700)='./file0\x00', 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, 0x0, 0x0) 2.56334855s ago: executing program 2 (id=1037): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.808976199s ago: executing program 7 (id=1038): 1.76010127s ago: executing program 5 (id=1039): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x10b3, 0xfffffff9) 1.73867363s ago: executing program 5 (id=1040): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75'], 0x10) 1.634671291s ago: executing program 2 (id=1041): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x841) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 1.575596542s ago: executing program 0 (id=1042): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x70) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.436052723s ago: executing program 5 (id=1043): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x13d}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af08", 0x31}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.435959053s ago: executing program 7 (id=1044): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="949dc4a02d2caf2c", 0x8}], 0x1) 1.014769538s ago: executing program 0 (id=1045): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 547.574624ms ago: executing program 5 (id=1046): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000000)="b88a000000f00000000000df8100", 0xe}], 0x1}, 0x0) 359.979956ms ago: executing program 2 (id=1047): r0 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresuid(&(0x7f0000002a40), 0x0, 0x0) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca0102030109021200010000"], 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) io_setup(0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) 359.856856ms ago: executing program 7 (id=1048): r0 = eventfd2(0x49d, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3, 0x6000, 0x2, r0, 0x4}) 212.363127ms ago: executing program 0 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 153.675098ms ago: executing program 5 (id=1050): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)='u', 0x1}], 0x1, &(0x7f0000000b40)=ANY=[], 0x78}}], 0x2, 0x4000000) 0s ago: executing program 7 (id=1051): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : usbfs: process 6200 (syz.2.347) did not claim interface 0 before use [ 327.648975][ T6207] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 328.959582][ T6216] usb usb8: usbfs: process 6216 (syz.0.351) did not claim interface 0 before use [ 330.297393][ T6216] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 331.506390][ T6233] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 331.947553][ T6249] netlink: 'syz.2.354': attribute type 2 has an invalid length. [ 331.955364][ T6249] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 333.033162][ T6238] loop2: detected capacity change from 0 to 128 [ 334.608588][ T6260] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 334.616448][ T6260] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 334.690912][ T6261] loop3: detected capacity change from 0 to 128 [ 335.413432][ T6258] netlink: 'syz.5.357': attribute type 1 has an invalid length. [ 337.143812][ T6269] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 337.151570][ T6269] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 337.531743][ T6275] loop3: detected capacity change from 0 to 128 [ 339.277824][ T6271] usb usb8: usbfs: process 6271 (syz.5.363) did not claim interface 0 before use [ 339.816797][ T6284] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 339.824667][ T6284] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 340.343082][ T6284] loop2: detected capacity change from 0 to 128 [ 341.876454][ T6295] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 341.884450][ T6295] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 341.964371][ T6296] loop0: detected capacity change from 0 to 128 [ 344.671322][ T6313] netlink: 'syz.5.369': attribute type 2 has an invalid length. [ 344.679096][ T6313] netlink: 'syz.5.369': attribute type 1 has an invalid length. [ 344.880920][ T6311] loop5: detected capacity change from 0 to 128 [ 344.962267][ T6304] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 344.970067][ T6304] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 345.066444][ T6307] netlink: 'syz.2.367': attribute type 2 has an invalid length. [ 345.074362][ T6307] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 345.084968][ T6308] loop1: detected capacity change from 0 to 128 [ 345.592901][ T6323] netlink: 'syz.0.370': attribute type 2 has an invalid length. [ 345.600785][ T6323] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 345.783337][ T6324] loop0: detected capacity change from 0 to 128 [ 346.623921][ T6333] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 346.631700][ T6333] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 346.855831][ T6328] loop3: detected capacity change from 0 to 128 [ 346.919536][ T6335] netlink: 'syz.2.373': attribute type 2 has an invalid length. [ 346.927384][ T6335] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 347.002349][ T6336] loop2: detected capacity change from 0 to 128 [ 347.793694][ T6343] loop5: detected capacity change from 0 to 128 [ 351.158801][ T6361] validate_nla: 4 callbacks suppressed [ 351.158879][ T6361] netlink: 'syz.2.377': attribute type 2 has an invalid length. [ 351.172308][ T6361] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 351.519664][ T6352] loop0: detected capacity change from 0 to 128 [ 352.749250][ T6367] loop2: detected capacity change from 0 to 128 [ 353.863598][ T6373] netlink: 'syz.5.381': attribute type 2 has an invalid length. [ 353.871531][ T6373] netlink: 'syz.5.381': attribute type 1 has an invalid length. [ 353.923108][ T6373] loop5: detected capacity change from 0 to 128 [ 354.338501][ T6375] netlink: 'syz.1.380': attribute type 2 has an invalid length. [ 354.365537][ T6375] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 354.466149][ T6376] loop1: detected capacity change from 0 to 128 [ 355.828544][ T6387] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 355.836341][ T6387] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 355.879423][ T6382] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 355.887210][ T6382] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 355.940582][ T6383] loop2: detected capacity change from 0 to 128 [ 355.954510][ T6382] loop3: detected capacity change from 0 to 128 [ 355.985526][ T6388] usb usb8: usbfs: process 6388 (syz.0.383) did not claim interface 0 before use [ 356.322465][ T6392] netlink: 'syz.5.385': attribute type 2 has an invalid length. [ 356.330304][ T6392] netlink: 'syz.5.385': attribute type 1 has an invalid length. [ 356.366414][ T6392] loop5: detected capacity change from 0 to 128 [ 357.355364][ T6403] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 357.363178][ T6403] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 357.628063][ T6396] loop2: detected capacity change from 0 to 128 [ 357.662302][ T6407] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 357.670037][ T6407] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 357.743068][ T6408] loop1: detected capacity change from 0 to 128 [ 358.498663][ T6412] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 358.506326][ T6412] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 358.591151][ T6413] loop0: detected capacity change from 0 to 128 [ 361.105689][ T6428] loop2: detected capacity change from 0 to 128 [ 361.139104][ T6431] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 361.146918][ T6431] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 361.283495][ T6429] loop1: detected capacity change from 0 to 128 [ 362.166092][ T6440] loop1: detected capacity change from 0 to 128 [ 363.305553][ T6446] usb usb8: usbfs: process 6446 (syz.1.398) did not claim interface 0 before use [ 363.749308][ T6453] netlink: 'syz.2.399': attribute type 2 has an invalid length. [ 363.757227][ T6453] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 363.836553][ T6454] loop2: detected capacity change from 0 to 128 [ 365.706933][ T6461] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 365.714703][ T6461] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 366.622516][ T6464] loop1: detected capacity change from 0 to 128 [ 370.491987][ T6478] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 370.499781][ T6478] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 370.507906][ T6484] netlink: 'syz.5.405': attribute type 2 has an invalid length. [ 370.515700][ T6484] netlink: 'syz.5.405': attribute type 1 has an invalid length. [ 371.934292][ T6486] loop3: detected capacity change from 0 to 128 [ 372.071471][ T6484] loop5: detected capacity change from 0 to 128 [ 373.652493][ T6501] loop1: detected capacity change from 0 to 128 [ 374.293320][ T6496] usb usb8: usbfs: process 6496 (syz.3.407) did not claim interface 0 before use [ 374.483209][ T6506] loop5: detected capacity change from 0 to 128 [ 375.753113][ T6519] netlink: 'syz.5.412': attribute type 2 has an invalid length. [ 375.760982][ T6519] netlink: 'syz.5.412': attribute type 1 has an invalid length. [ 375.839663][ T6520] loop5: detected capacity change from 0 to 128 [ 376.015516][ T6523] loop1: detected capacity change from 0 to 128 [ 376.335459][ T6526] loop3: detected capacity change from 0 to 128 [ 377.868776][ T6536] usb usb8: usbfs: process 6536 (syz.5.415) did not claim interface 0 before use [ 377.881217][ T6537] loop0: detected capacity change from 0 to 128 [ 377.901486][ T6538] loop2: detected capacity change from 0 to 128 [ 378.273928][ T6542] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 378.570098][ T6543] usb usb8: usbfs: process 6543 (syz.3.417) did not claim interface 0 before use [ 378.631771][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639075][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.960226][ T6551] netlink: 'syz.2.418': attribute type 2 has an invalid length. [ 378.968016][ T6551] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 379.040099][ T6552] loop2: detected capacity change from 0 to 128 [ 382.008483][ T6560] usb usb8: usbfs: process 6560 (syz.0.421) did not claim interface 0 before use [ 382.335422][ T6571] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 382.343378][ T6571] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 383.388637][ T6568] usb usb8: usbfs: process 6568 (syz.5.423) did not claim interface 0 before use [ 383.429522][ T6572] loop3: detected capacity change from 0 to 128 [ 384.753752][ T6583] loop0: detected capacity change from 0 to 128 [ 384.882456][ T6585] loop3: detected capacity change from 0 to 128 [ 385.617274][ T6587] usb usb8: usbfs: process 6587 (syz.5.427) did not claim interface 0 before use [ 385.883223][ T6588] netlink: 'syz.5.427': attribute type 1 has an invalid length. [ 386.957680][ T6596] loop0: detected capacity change from 0 to 128 [ 387.710089][ T6594] usb usb8: usbfs: process 6594 (syz.3.429) did not claim interface 0 before use [ 388.287254][ T6603] usb usb8: usbfs: process 6603 (syz.0.431) did not claim interface 0 before use [ 389.422844][ T6606] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 389.984019][ T6612] usb usb8: usbfs: process 6612 (syz.5.433) did not claim interface 0 before use [ 390.004340][ T6613] usb usb8: usbfs: process 6613 (syz.2.424) did not claim interface 0 before use [ 390.080359][ T6615] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 390.158613][ T6616] loop3: detected capacity change from 0 to 128 [ 391.096927][ T6617] netlink: 'syz.5.433': attribute type 1 has an invalid length. [ 391.356852][ T6624] usb usb8: usbfs: process 6624 (syz.3.436) did not claim interface 0 before use [ 391.787033][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 392.468632][ T6626] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 392.476386][ T6626] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 392.531132][ T6626] loop0: detected capacity change from 0 to 128 [ 392.547949][ T6635] usb usb8: usbfs: process 6635 (syz.5.438) did not claim interface 0 before use [ 392.841391][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 393.563713][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.577470][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.585410][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.594221][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.602436][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 393.609838][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.639652][ T6654] usb usb8: usbfs: process 6654 (syz.3.441) did not claim interface 0 before use [ 395.643183][ T6661] netlink: 'syz.0.442': attribute type 2 has an invalid length. [ 395.651106][ T6661] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 395.679305][ T6661] loop0: detected capacity change from 0 to 128 [ 395.723112][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 396.472796][ T6662] usb usb8: usbfs: process 6662 (syz.5.443) did not claim interface 0 before use [ 396.516617][ T6664] usb usb8: usbfs: process 6664 (syz.3.444) did not claim interface 0 before use [ 396.762481][ T6666] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 396.770208][ T6666] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 396.784719][ T6666] loop0: detected capacity change from 0 to 128 [ 397.736750][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 398.110697][ T6668] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 398.245395][ T6643] chnl_net:caif_netlink_parms(): no params data found [ 398.529272][ T6682] netlink: 'syz.2.446': attribute type 2 has an invalid length. [ 398.537242][ T6682] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 398.563754][ T6682] loop2: detected capacity change from 0 to 128 [ 399.772275][ T6688] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 399.780202][ T6688] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 399.806852][ T6689] netlink: 'syz.0.448': attribute type 2 has an invalid length. [ 399.823188][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 399.856167][ T6690] loop3: detected capacity change from 0 to 128 [ 399.866487][ T6689] loop0: detected capacity change from 0 to 128 [ 399.878434][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 400.900546][ T6694] validate_nla: 1 callbacks suppressed [ 400.900581][ T6694] netlink: 'syz.5.449': attribute type 2 has an invalid length. [ 400.913971][ T6694] netlink: 'syz.5.449': attribute type 1 has an invalid length. [ 400.943235][ T6694] loop5: detected capacity change from 0 to 128 [ 401.837465][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.896834][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 401.920123][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.950344][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.969702][ T6643] device bridge_slave_0 entered promiscuous mode [ 402.236287][ T6706] netlink: 'syz.3.453': attribute type 2 has an invalid length. [ 402.244200][ T6706] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 402.272792][ T6706] loop3: detected capacity change from 0 to 128 [ 402.961497][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.029127][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.036370][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.077996][ T6643] device bridge_slave_1 entered promiscuous mode [ 403.206225][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.234224][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.366799][ T6714] usb usb8: usbfs: process 6714 (syz.0.455) did not claim interface 0 before use [ 403.453306][ T6717] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 403.461298][ T6717] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 403.490511][ T6717] loop3: detected capacity change from 0 to 128 [ 404.250161][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.054019][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.085226][ T6723] usb usb8: usbfs: process 6723 (syz.3.457) did not claim interface 0 before use [ 405.090422][ T6643] team0: Port device team_slave_0 added [ 405.165055][ T6724] netlink: 'syz.5.456': attribute type 2 has an invalid length. [ 405.172936][ T6724] netlink: 'syz.5.456': attribute type 1 has an invalid length. [ 405.190020][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.456'. [ 405.212379][ T6724] loop5: detected capacity change from 0 to 128 [ 405.963402][ T6643] team0: Port device team_slave_1 added [ 406.636865][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.655559][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.973768][ T6729] netlink: 'syz.2.458': attribute type 2 has an invalid length. [ 407.981579][ T6729] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 407.995655][ T6729] loop2: detected capacity change from 0 to 128 [ 408.020227][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.042189][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.049400][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.106027][ T6732] usb usb8: usbfs: process 6732 (syz.5.460) did not claim interface 0 before use [ 408.221830][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.501745][ T6737] netlink: 'syz.0.459': attribute type 2 has an invalid length. [ 408.580851][ T6738] loop0: detected capacity change from 0 to 128 [ 409.341797][ T6643] device hsr_slave_0 entered promiscuous mode [ 409.491084][ T6643] device hsr_slave_1 entered promiscuous mode [ 409.564598][ T6643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.691173][ T6643] Cannot create hsr debugfs directory [ 409.760556][ T6741] usb usb8: usbfs: process 6741 (syz.3.462) did not claim interface 0 before use [ 410.545481][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 410.770175][ T6750] usb usb8: usbfs: process 6750 (syz.0.463) did not claim interface 0 before use [ 411.084528][ T6757] netlink: 'syz.3.465': attribute type 2 has an invalid length. [ 411.092440][ T6757] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 411.120866][ T6757] loop3: detected capacity change from 0 to 128 [ 413.185258][ T6643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.253407][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'. [ 413.267042][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 413.359925][ T6765] netlink: 'syz.3.466': attribute type 2 has an invalid length. [ 413.367806][ T6765] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 413.396486][ T6765] loop3: detected capacity change from 0 to 128 [ 414.232233][ T6643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.549904][ T6771] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 414.555037][ T6643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.558262][ T6771] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 414.587671][ T6771] loop2: detected capacity change from 0 to 128 [ 414.857412][ T6775] usb usb8: usbfs: process 6775 (syz.0.468) did not claim interface 0 before use [ 415.345895][ T6779] netlink: 'syz.3.469': attribute type 2 has an invalid length. [ 415.353793][ T6779] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 415.368295][ T6779] loop3: detected capacity change from 0 to 128 [ 415.379066][ T6780] netlink: 'syz.5.470': attribute type 2 has an invalid length. [ 415.386871][ T6780] netlink: 'syz.5.470': attribute type 1 has an invalid length. [ 415.402680][ T6780] loop5: detected capacity change from 0 to 128 [ 415.960231][ T6643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.219976][ T6789] usb usb8: usbfs: process 6789 (syz.3.472) did not claim interface 0 before use [ 416.327772][ T6785] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 416.341715][ T6795] usb usb8: usbfs: process 6795 (syz.5.471) did not claim interface 0 before use [ 417.828526][ T6798] netlink: 'syz.5.471': attribute type 1 has an invalid length. [ 417.938226][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'. [ 417.961173][ T6809] loop0: detected capacity change from 0 to 128 [ 418.601216][ T6807] usb usb8: usbfs: process 6807 (syz.3.474) did not claim interface 0 before use [ 419.287447][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.313799][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.379103][ T6816] validate_nla: 2 callbacks suppressed [ 419.379136][ T6816] netlink: 'syz.0.475': attribute type 2 has an invalid length. [ 419.392894][ T6816] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 419.421209][ T6816] loop0: detected capacity change from 0 to 128 [ 419.622816][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.069197][ T6643] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.599249][ T6825] netlink: 'syz.5.477': attribute type 2 has an invalid length. [ 420.607085][ T6825] netlink: 'syz.5.477': attribute type 1 has an invalid length. [ 420.927460][ T6827] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 420.935219][ T6827] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 420.947164][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 420.991621][ T6825] loop5: detected capacity change from 0 to 128 [ 421.507399][ T6833] usb usb8: usbfs: process 6833 (syz.0.481) did not claim interface 0 before use [ 421.642702][ T6836] usb usb8: usbfs: process 6836 (syz.5.480) did not claim interface 0 before use [ 421.663416][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.737354][ T6838] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 421.745146][ T6838] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 421.775341][ T6838] loop3: detected capacity change from 0 to 128 [ 422.898736][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.908016][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.915179][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.925137][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.939244][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.950530][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.957741][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.967618][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.984660][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 423.127444][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 423.329610][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 423.773799][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.250880][ T6845] netlink: 'syz.5.483': attribute type 2 has an invalid length. [ 424.258709][ T6845] netlink: 'syz.5.483': attribute type 1 has an invalid length. [ 424.273357][ T6845] loop5: detected capacity change from 0 to 128 [ 424.289109][ T6846] loop3: detected capacity change from 0 to 128 [ 424.339260][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.386507][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.582357][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.599577][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.699097][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.737900][ T6854] usb usb8: usbfs: process 6854 (syz.2.485) did not claim interface 0 before use [ 424.942803][ T6860] validate_nla: 2 callbacks suppressed [ 424.942839][ T6860] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 424.956491][ T6860] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 424.986809][ T6860] loop0: detected capacity change from 0 to 128 [ 426.821776][ T6864] usb usb8: usbfs: process 6864 (syz.5.487) did not claim interface 0 before use [ 426.852086][ T6643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.875027][ T6866] usb usb8: usbfs: process 6866 (syz.0.488) did not claim interface 0 before use [ 426.908915][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.942455][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.063161][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.077264][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 428.239262][ T6878] netlink: 'syz.5.490': attribute type 2 has an invalid length. [ 428.247086][ T6878] netlink: 'syz.5.490': attribute type 1 has an invalid length. [ 428.263690][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.5.490'. [ 428.286464][ T6878] loop5: detected capacity change from 0 to 128 [ 428.987251][ T6877] usb usb8: usbfs: process 6877 (syz.2.489) did not claim interface 0 before use [ 429.655097][ T6890] netlink: 'syz.3.491': attribute type 2 has an invalid length. [ 429.662965][ T6890] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 429.674707][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.491'. [ 430.313035][ T6890] loop3: detected capacity change from 0 to 128 [ 430.392128][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 430.851178][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 430.956172][ T6894] netlink: 'syz.5.492': attribute type 2 has an invalid length. [ 430.964435][ T6894] netlink: 'syz.5.492': attribute type 1 has an invalid length. [ 430.975948][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.492'. [ 430.988718][ T6894] loop5: detected capacity change from 0 to 128 [ 431.147324][ T6895] usb usb8: usbfs: process 6895 (syz.3.493) did not claim interface 0 before use [ 431.953939][ T6899] usb usb8: usbfs: process 6899 (syz.0.494) did not claim interface 0 before use [ 432.168099][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 432.282077][ T6907] netlink: 'syz.2.495': attribute type 2 has an invalid length. [ 432.290105][ T6907] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 432.307517][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 432.329446][ T6907] loop2: detected capacity change from 0 to 128 [ 433.950620][ T6914] usb usb8: usbfs: process 6914 (syz.2.496) did not claim interface 0 before use [ 433.999388][ T6917] usb usb8: usbfs: process 6917 (syz.3.497) did not claim interface 0 before use [ 434.032685][ T6902] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 434.827372][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.835012][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.574211][ T6919] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 435.689491][ T6929] netlink: 'syz.5.498': attribute type 2 has an invalid length. [ 435.697469][ T6929] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 435.775749][ T6930] loop5: detected capacity change from 0 to 128 [ 436.372325][ T6931] usb usb8: usbfs: process 6931 (syz.0.499) did not claim interface 0 before use [ 436.385515][ T40] device hsr_slave_0 left promiscuous mode [ 436.427231][ T40] device hsr_slave_1 left promiscuous mode [ 436.628775][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.318288][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.328871][ T6933] usb usb8: usbfs: process 6933 (syz.2.500) did not claim interface 0 before use [ 437.342491][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.354990][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.446678][ T40] device bridge_slave_1 left promiscuous mode [ 437.466551][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.540483][ T40] device bridge_slave_0 left promiscuous mode [ 437.582044][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.838375][ T40] device veth1_macvtap left promiscuous mode [ 437.874283][ T40] device veth0_macvtap left promiscuous mode [ 437.917005][ T40] device veth1_vlan left promiscuous mode [ 437.923002][ T40] device veth0_vlan left promiscuous mode [ 438.423390][ T40] team0 (unregistering): Port device team_slave_1 removed [ 438.468135][ T40] team0 (unregistering): Port device team_slave_0 removed [ 438.509181][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.555233][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.849645][ T40] bond0 (unregistering): Released all slaves [ 438.928847][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 439.007935][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.015385][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 439.033722][ T6936] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 439.462498][ T6943] usb usb8: usbfs: process 6943 (syz.0.502) did not claim interface 0 before use [ 439.562460][ T6951] netlink: 'syz.5.501': attribute type 2 has an invalid length. [ 439.570999][ T6951] netlink: 'syz.5.501': attribute type 1 has an invalid length. [ 439.587900][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.501'. [ 439.609530][ T6951] loop5: detected capacity change from 0 to 128 [ 440.313259][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.336801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.837120][ T6955] netlink: 'syz.3.503': attribute type 2 has an invalid length. [ 440.845088][ T6955] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 440.862843][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 440.886174][ T6955] loop3: detected capacity change from 0 to 128 [ 441.741007][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 442.089465][ T6953] usb usb8: usbfs: process 6953 (syz.2.504) did not claim interface 0 before use [ 442.436807][ T6964] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 442.444576][ T6964] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 442.461270][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'. [ 442.483721][ T6964] loop0: detected capacity change from 0 to 128 [ 443.486265][ T6972] netlink: 'syz.5.505': attribute type 2 has an invalid length. [ 443.494155][ T6972] netlink: 'syz.5.505': attribute type 1 has an invalid length. [ 443.511203][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.505'. [ 443.533179][ T6972] loop5: detected capacity change from 0 to 128 [ 444.219654][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.504'. [ 444.758717][ T6970] usb usb8: usbfs: process 6970 (syz.3.506) did not claim interface 0 before use [ 445.028034][ T6973] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 446.116343][ T6983] netlink: 'syz.2.510': attribute type 2 has an invalid length. [ 446.124540][ T6983] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 446.136204][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 446.149256][ T6983] loop2: detected capacity change from 0 to 128 [ 446.162424][ T6984] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 446.170168][ T6984] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 446.180990][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 446.192983][ T6984] loop0: detected capacity change from 0 to 128 [ 446.201223][ T6979] usb usb8: usbfs: process 6979 (syz.5.509) did not claim interface 0 before use [ 446.603161][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.509'. [ 446.922762][ T6992] usb usb8: usbfs: process 6992 (syz.3.511) did not claim interface 0 before use [ 447.911250][ T7006] usb usb8: usbfs: process 7006 (syz.0.513) did not claim interface 0 before use [ 448.221727][ T7012] usb usb8: usbfs: process 7012 (syz.2.515) did not claim interface 0 before use [ 448.284102][ T7005] usb usb8: usbfs: process 7005 (syz.5.514) did not claim interface 0 before use [ 448.510857][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.522480][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.552201][ T6643] device veth0_vlan entered promiscuous mode [ 448.558941][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.230080][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.252948][ T6643] device veth1_vlan entered promiscuous mode [ 449.398000][ T7018] netlink: 'syz.0.516': attribute type 2 has an invalid length. [ 449.405706][ T7018] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 449.417134][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.516'. [ 449.430015][ T7018] loop0: detected capacity change from 0 to 128 [ 449.661256][ T7026] usb usb8: usbfs: process 7026 (syz.2.518) did not claim interface 0 before use [ 449.672808][ T7024] usb usb8: usbfs: process 7024 (syz.3.517) did not claim interface 0 before use [ 450.004557][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.514'. [ 450.338372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.349580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.554048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.857572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.941341][ T7024] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 451.077192][ T7027] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 451.368171][ T7041] usb usb8: usbfs: process 7041 (syz.0.520) did not claim interface 0 before use [ 451.444421][ T7043] netlink: 'syz.5.519': attribute type 2 has an invalid length. [ 451.452262][ T7043] netlink: 'syz.5.519': attribute type 1 has an invalid length. [ 451.481468][ T7043] loop5: detected capacity change from 0 to 128 [ 453.263946][ T7047] usb usb8: usbfs: process 7047 (syz.2.521) did not claim interface 0 before use [ 453.522636][ T7061] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 453.530454][ T7061] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 453.545635][ T7061] loop3: detected capacity change from 0 to 128 [ 453.695799][ T7062] netlink: 'syz.5.523': attribute type 2 has an invalid length. [ 453.703709][ T7062] netlink: 'syz.5.523': attribute type 1 has an invalid length. [ 453.732876][ T7062] loop5: detected capacity change from 0 to 128 [ 454.701710][ T7050] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 455.140041][ T7066] usb usb8: usbfs: process 7066 (syz.3.525) did not claim interface 0 before use [ 455.257326][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.356952][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.364889][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.376190][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.384565][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 455.392662][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.463525][ T7075] netlink: 'syz.5.526': attribute type 2 has an invalid length. [ 455.491821][ T7075] loop5: detected capacity change from 0 to 128 [ 456.239378][ T7078] usb usb8: usbfs: process 7078 (syz.2.527) did not claim interface 0 before use [ 457.467271][ T7082] validate_nla: 1 callbacks suppressed [ 457.467326][ T7082] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 458.259489][ T7087] netlink: 'syz.3.530': attribute type 2 has an invalid length. [ 458.267305][ T7087] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 458.284934][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.530'. [ 458.315166][ T7092] netlink: 'syz.5.529': attribute type 2 has an invalid length. [ 458.322906][ T7092] netlink: 'syz.5.529': attribute type 1 has an invalid length. [ 458.334920][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.529'. [ 458.347873][ T7092] loop5: detected capacity change from 0 to 128 [ 458.366176][ T7087] loop3: detected capacity change from 0 to 128 [ 458.535327][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 459.007546][ T7098] usb usb8: usbfs: process 7098 (syz.5.531) did not claim interface 0 before use [ 459.066454][ T7099] usb usb8: usbfs: process 7099 (syz.0.532) did not claim interface 0 before use [ 460.403936][ T7103] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 460.517467][ T7109] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 460.525244][ T7109] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 460.550988][ T7109] loop2: detected capacity change from 0 to 128 [ 461.262223][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 461.860276][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 461.974507][ T7120] netlink: 'syz.3.534': attribute type 2 has an invalid length. [ 461.982369][ T7120] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 461.999734][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 462.021857][ T7120] loop3: detected capacity change from 0 to 128 [ 463.337666][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 463.343774][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 463.416777][ T7123] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 463.425010][ T7123] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 463.442297][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.535'. [ 463.465076][ T7123] loop2: detected capacity change from 0 to 128 [ 464.574562][ T7130] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 464.582534][ T7130] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 464.603038][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 464.625784][ T7130] loop0: detected capacity change from 0 to 128 [ 465.051571][ T7133] netlink: 'syz.3.537': attribute type 2 has an invalid length. [ 465.059434][ T7133] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 465.091042][ T7133] loop3: detected capacity change from 0 to 128 [ 465.610420][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 465.721112][ T7136] usb usb8: usbfs: process 7136 (syz.5.540) did not claim interface 0 before use [ 466.849526][ T7140] usb usb8: usbfs: process 7140 (syz.2.539) did not claim interface 0 before use [ 467.155599][ T7148] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 467.163437][ T7148] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 467.381805][ T7144] loop0: detected capacity change from 0 to 128 [ 467.484736][ T7151] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 467.492583][ T7151] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 467.568696][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.542'. [ 467.715981][ T7151] loop3: detected capacity change from 0 to 128 [ 468.315750][ T7154] usb usb8: usbfs: process 7154 (syz.0.543) did not claim interface 0 before use [ 468.332237][ T7069] chnl_net:caif_netlink_parms(): no params data found [ 468.450763][ T7158] usb usb8: usbfs: process 7158 (syz.3.544) did not claim interface 0 before use [ 469.304752][ T7164] usb usb8: usbfs: process 7164 (syz.2.545) did not claim interface 0 before use [ 469.331921][ T7157] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 469.652517][ T7172] netlink: 'syz.3.547': attribute type 2 has an invalid length. [ 469.660456][ T7172] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 469.689120][ T7172] loop3: detected capacity change from 0 to 128 [ 471.014651][ T7169] usb usb8: usbfs: process 7169 (syz.5.546) did not claim interface 0 before use [ 471.664999][ T7171] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 471.684432][ T7175] netlink: 'syz.5.546': attribute type 1 has an invalid length. [ 471.777348][ T7186] netlink: 'syz.0.549': attribute type 2 has an invalid length. [ 471.785126][ T7186] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 471.814509][ T7186] loop0: detected capacity change from 0 to 128 [ 474.690104][ T7201] netlink: 'syz.5.553': attribute type 2 has an invalid length. [ 474.697836][ T7201] netlink: 'syz.5.553': attribute type 1 has an invalid length. [ 474.705483][ T7200] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 474.711797][ T7201] loop5: detected capacity change from 0 to 128 [ 474.713338][ T7200] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 474.741303][ T7200] loop0: detected capacity change from 0 to 128 [ 474.831448][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.082493][ T7208] netlink: 'syz.2.552': attribute type 2 has an invalid length. [ 475.090416][ T7208] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 475.121200][ T7208] loop2: detected capacity change from 0 to 128 [ 475.388131][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.466375][ T7069] device bridge_slave_0 entered promiscuous mode [ 475.776815][ T7213] usb usb8: usbfs: process 7213 (syz.0.556) did not claim interface 0 before use [ 475.865242][ T7214] netlink: 'syz.5.555': attribute type 2 has an invalid length. [ 475.873373][ T7214] netlink: 'syz.5.555': attribute type 1 has an invalid length. [ 475.903928][ T7214] loop5: detected capacity change from 0 to 128 [ 476.692782][ T7217] usb usb8: usbfs: process 7217 (syz.2.557) did not claim interface 0 before use [ 476.742279][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.756764][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.764786][ T7069] device bridge_slave_1 entered promiscuous mode [ 477.555617][ T7223] usb usb8: usbfs: process 7223 (syz.5.558) did not claim interface 0 before use [ 477.610491][ T7224] usb usb8: usbfs: process 7224 (syz.0.559) did not claim interface 0 before use [ 478.504741][ T7219] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 478.532679][ T7069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.176452][ T7227] netlink: 'syz.5.558': attribute type 1 has an invalid length. [ 479.282760][ T7069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.603782][ T7069] team0: Port device team_slave_0 added [ 479.619550][ T7239] usb usb8: usbfs: process 7239 (syz.5.561) did not claim interface 0 before use [ 479.714261][ T7242] loop2: detected capacity change from 0 to 128 [ 479.796971][ T7069] team0: Port device team_slave_1 added [ 480.500183][ T7241] validate_nla: 3 callbacks suppressed [ 480.500192][ T7241] netlink: 'syz.3.563': attribute type 2 has an invalid length. [ 480.513542][ T7241] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 480.527191][ T7241] loop3: detected capacity change from 0 to 128 [ 481.450218][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.486712][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.614738][ T7069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.685543][ T7246] netlink: 'syz.5.561': attribute type 1 has an invalid length. [ 481.696360][ T7249] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 481.775549][ T7254] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 481.783508][ T7254] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 481.800378][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 481.823040][ T7254] loop2: detected capacity change from 0 to 128 [ 482.597065][ T7069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.604089][ T7069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.652737][ T7260] usb usb8: usbfs: process 7260 (syz.0.568) did not claim interface 0 before use [ 482.826225][ T7266] usb usb8: usbfs: process 7266 (syz.3.565) did not claim interface 0 before use [ 482.923440][ T7267] netlink: 'syz.5.567': attribute type 2 has an invalid length. [ 482.931217][ T7267] netlink: 'syz.5.567': attribute type 1 has an invalid length. [ 482.944488][ T7267] loop5: detected capacity change from 0 to 128 [ 483.077478][ T7265] usb usb8: usbfs: process 7265 (syz.2.566) did not claim interface 0 before use [ 483.707768][ T7069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.760155][ T4390] device hsr_slave_0 left promiscuous mode [ 483.977212][ T4390] device hsr_slave_1 left promiscuous mode [ 484.017013][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.037266][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.065139][ T4390] device bridge_slave_1 left promiscuous mode [ 484.073751][ T7278] usb usb8: usbfs: process 7278 (syz.0.569) did not claim interface 0 before use [ 484.078250][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.060301][ T7283] usb usb8: usbfs: process 7283 (syz.5.571) did not claim interface 0 before use [ 485.085390][ T4390] device bridge_slave_0 left promiscuous mode [ 485.096856][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.128283][ T4390] device veth1_vlan left promiscuous mode [ 485.134344][ T4390] device veth0_vlan left promiscuous mode [ 486.385469][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 486.431749][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 486.473043][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.513483][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.756567][ T4390] bond0 (unregistering): Released all slaves [ 486.851011][ T7268] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 486.865880][ T7269] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 486.893401][ T7280] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 486.913388][ T7287] netlink: 'syz.5.571': attribute type 1 has an invalid length. [ 487.083026][ T7069] device hsr_slave_0 entered promiscuous mode [ 487.117968][ T7069] device hsr_slave_1 entered promiscuous mode [ 487.127107][ T7295] usb usb8: usbfs: process 7295 (syz.3.572) did not claim interface 0 before use [ 487.136322][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.144381][ T7069] Cannot create hsr debugfs directory [ 487.293989][ T7298] usb usb8: usbfs: process 7298 (syz.0.574) did not claim interface 0 before use [ 488.340041][ T7307] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 488.429046][ T7312] netlink: 'syz.2.576': attribute type 2 has an invalid length. [ 488.436920][ T7312] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 488.465889][ T7312] loop2: detected capacity change from 0 to 128 [ 489.201249][ T7314] usb usb8: usbfs: process 7314 (syz.5.577) did not claim interface 0 before use [ 489.258727][ T7316] usb usb8: usbfs: process 7316 (syz.3.579) did not claim interface 0 before use [ 490.481046][ T7329] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 490.489016][ T7329] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 490.520394][ T7329] loop2: detected capacity change from 0 to 128 [ 491.608878][ T7333] netlink: 'syz.5.581': attribute type 2 has an invalid length. [ 491.638048][ T7333] loop5: detected capacity change from 0 to 128 [ 492.296886][ T7319] validate_nla: 1 callbacks suppressed [ 492.296903][ T7319] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 492.774846][ T7328] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 493.476497][ T7346] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 493.484290][ T7346] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 493.722332][ T7341] loop2: detected capacity change from 0 to 128 [ 493.769784][ T7348] netlink: 'syz.5.583': attribute type 2 has an invalid length. [ 493.777585][ T7348] netlink: 'syz.5.583': attribute type 1 has an invalid length. [ 493.851447][ T7349] loop5: detected capacity change from 0 to 128 [ 494.969689][ T7359] netlink: 'syz.3.584': attribute type 2 has an invalid length. [ 494.977504][ T7359] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 494.992560][ T7359] loop3: detected capacity change from 0 to 128 [ 495.053615][ T7353] netlink: 'syz.0.585': attribute type 2 has an invalid length. [ 495.061419][ T7353] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 495.073896][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'. [ 495.086890][ T7353] loop0: detected capacity change from 0 to 128 [ 495.114783][ T7069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 495.465738][ T7364] loop5: detected capacity change from 0 to 128 [ 496.652691][ T4361] Bluetooth: (null): Invalid header checksum [ 496.680082][ T7069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 496.711669][ T4361] Bluetooth: (null): Invalid header checksum [ 497.174779][ T7069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.259356][ T7069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.442531][ T4361] Bluetooth: (null): Invalid header checksum [ 497.688254][ T7373] usb usb8: usbfs: process 7373 (syz.0.589) did not claim interface 0 before use [ 497.730401][ T7370] usb usb8: usbfs: process 7370 (syz.5.590) did not claim interface 0 before use [ 497.800367][ T7377] validate_nla: 2 callbacks suppressed [ 497.800403][ T7377] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 497.814993][ T7377] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 497.845517][ T7377] loop3: detected capacity change from 0 to 128 [ 499.138671][ T7069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.219502][ T7388] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 499.227447][ T7388] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 499.306407][ T7389] loop2: detected capacity change from 0 to 128 [ 499.910566][ T7391] usb usb8: usbfs: process 7391 (syz.3.592) did not claim interface 0 before use [ 499.970641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.992639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.212817][ T7399] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 500.220664][ T7399] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 500.298447][ T7400] loop0: detected capacity change from 0 to 128 [ 501.475658][ T7069] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.499727][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.506234][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.647533][ T7397] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 501.755748][ T7398] netlink: 'syz.5.593': attribute type 1 has an invalid length. [ 502.030569][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.130675][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.193027][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.200267][ T4671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.235385][ T7406] usb usb8: usbfs: process 7406 (syz.2.595) did not claim interface 0 before use [ 502.291848][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.301545][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.315808][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.436341][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.443851][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.540658][ T7415] netlink: 'syz.0.596': attribute type 2 has an invalid length. [ 502.548638][ T7415] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 502.626433][ T7416] loop0: detected capacity change from 0 to 128 [ 503.399525][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 504.362748][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.830956][ T7414] netlink: 'syz.5.598': attribute type 1 has an invalid length. [ 505.064400][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.987772][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.043950][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.087565][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.262537][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.429403][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 506.439168][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.486911][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 506.511959][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.734250][ T7447] netlink: 'syz.3.602': attribute type 2 has an invalid length. [ 506.742516][ T7447] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 506.796727][ T7452] netlink: 'syz.0.601': attribute type 2 has an invalid length. [ 506.804437][ T7452] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 506.819632][ T7452] loop0: detected capacity change from 0 to 128 [ 506.830039][ T7447] loop3: detected capacity change from 0 to 128 [ 507.184824][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.314138][ T7456] netlink: 'syz.5.603': attribute type 1 has an invalid length. [ 507.537444][ T7455] usb usb8: usbfs: process 7455 (syz.2.604) did not claim interface 0 before use [ 507.912278][ T7470] loop3: detected capacity change from 0 to 128 [ 508.305706][ T7480] usb usb8: usbfs: process 7480 (syz.3.609) did not claim interface 0 before use [ 508.584715][ T7488] netlink: 'syz.2.610': attribute type 2 has an invalid length. [ 508.592573][ T7488] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 508.671804][ T7489] loop2: detected capacity change from 0 to 128 [ 509.392649][ T7490] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 510.346358][ T7502] netlink: 'syz.2.611': attribute type 2 has an invalid length. [ 510.354254][ T7502] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 510.434325][ T7503] loop2: detected capacity change from 0 to 128 [ 511.423138][ T7513] usb usb8: usbfs: process 7513 (syz.2.615) did not claim interface 0 before use [ 512.462082][ T7519] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 512.703078][ T7522] usb usb8: usbfs: process 7522 (syz.2.617) did not claim interface 0 before use [ 513.029787][ T7525] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 513.955115][ T7536] loop3: detected capacity change from 0 to 128 [ 514.098625][ T7532] usb usb8: usbfs: process 7532 (syz.0.619) did not claim interface 0 before use [ 514.171544][ T7538] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 514.179398][ T7538] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 514.208511][ T7538] loop2: detected capacity change from 0 to 128 [ 516.614212][ T7550] usb usb8: usbfs: process 7550 (syz.3.622) did not claim interface 0 before use [ 516.847575][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.881911][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.891494][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.903060][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.911586][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.924088][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.620876][ T7571] usb usb8: usbfs: process 7571 (syz.3.628) did not claim interface 0 before use [ 518.227427][ T7574] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 519.003254][ T7556] chnl_net:caif_netlink_parms(): no params data found [ 519.024266][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 519.510643][ T7586] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 520.559514][ T7595] usb usb8: usbfs: process 7595 (syz.3.639) did not claim interface 0 before use [ 520.591036][ T7598] usb usb8: usbfs: process 7598 (syz.5.630) did not claim interface 0 before use [ 521.326972][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 522.007787][ T7600] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 522.158115][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.210922][ T7601] netlink: 'syz.0.627': attribute type 2 has an invalid length. [ 522.403853][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.418358][ T7601] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 522.452683][ T7556] device bridge_slave_0 entered promiscuous mode [ 522.500784][ T7619] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 522.509294][ T7619] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 522.588658][ T7620] loop2: detected capacity change from 0 to 128 [ 522.691412][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.801814][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.030310][ T7556] device bridge_slave_1 entered promiscuous mode [ 523.211345][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.229947][ T7598] netlink: 'syz.5.630': attribute type 1 has an invalid length. [ 523.321899][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.682912][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 524.812269][ T7629] usb usb8: usbfs: process 7629 (syz.5.634) did not claim interface 0 before use [ 524.829799][ T7556] team0: Port device team_slave_0 added [ 524.882689][ T7556] team0: Port device team_slave_1 added [ 525.169024][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.196704][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.318223][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.401513][ T6288] device hsr_slave_0 left promiscuous mode [ 525.421438][ T6288] device hsr_slave_1 left promiscuous mode [ 525.448777][ T7639] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 525.457051][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.487253][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.513687][ T7639] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 525.514078][ T6288] device bridge_slave_1 left promiscuous mode [ 525.568427][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.587407][ T6288] device bridge_slave_0 left promiscuous mode [ 525.593728][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.634491][ T7643] loop3: detected capacity change from 0 to 128 [ 525.757842][ T7646] usb usb8: usbfs: process 7646 (syz.5.638) did not claim interface 0 before use [ 526.697480][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 527.087795][ T7655] usb usb8: usbfs: process 7655 (syz.0.640) did not claim interface 0 before use [ 527.995274][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 528.092035][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 528.153806][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.224495][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.358958][ T7664] netlink: 'syz.2.635': attribute type 2 has an invalid length. [ 528.366894][ T7664] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 528.440993][ T7665] loop2: detected capacity change from 0 to 128 [ 529.192198][ T6288] bond0 (unregistering): Released all slaves [ 529.298512][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.305532][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.331627][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.445010][ T7647] netlink: 'syz.5.638': attribute type 1 has an invalid length. [ 529.476910][ T7658] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 529.664732][ T7556] device hsr_slave_0 entered promiscuous mode [ 529.717497][ T7556] device hsr_slave_1 entered promiscuous mode [ 530.612818][ T7673] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 530.620612][ T7673] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 530.701633][ T7679] loop3: detected capacity change from 0 to 128 [ 531.056816][ T7556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.065003][ T7556] Cannot create hsr debugfs directory [ 533.529487][ T7714] usb usb8: usbfs: process 7714 (syz.3.649) did not claim interface 0 before use [ 534.676403][ T7721] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 534.800264][ T7720] usb usb8: usbfs: process 7720 (syz.3.651) did not claim interface 0 before use [ 535.203781][ T7730] usb usb8: usbfs: process 7730 (syz.2.653) did not claim interface 0 before use [ 536.011716][ T7735] usb usb8: usbfs: process 7735 (syz.5.654) did not claim interface 0 before use [ 536.076140][ T7733] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 536.691113][ T7739] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 536.726214][ T7738] netlink: 'syz.5.654': attribute type 1 has an invalid length. [ 536.751967][ T7739] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 536.761472][ T7745] usb usb8: usbfs: process 7745 (syz.2.655) did not claim interface 0 before use [ 536.824059][ T7739] loop0: detected capacity change from 0 to 128 [ 538.676301][ T7747] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 538.711653][ T7720] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 538.770845][ T7556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.014773][ T7556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.876428][ T7556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.909358][ T7556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 539.962291][ T7773] usb usb8: usbfs: process 7773 (syz.2.658) did not claim interface 0 before use [ 540.598503][ T7785] usb usb8: usbfs: process 7785 (syz.5.660) did not claim interface 0 before use [ 540.728657][ T7774] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 542.380820][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.432548][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.458219][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.486002][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.518030][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.541461][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.564244][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.571572][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.584359][ T7794] usb usb8: usbfs: process 7794 (syz.5.663) did not claim interface 0 before use [ 542.627719][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.773073][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.946160][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.148211][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.155440][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.452665][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.518684][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.537945][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.548475][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.558092][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.567226][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.577681][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.597379][ T7795] netlink: 'syz.5.663': attribute type 1 has an invalid length. [ 543.607289][ T7799] usb usb8: usbfs: process 7799 (syz.2.664) did not claim interface 0 before use [ 543.672142][ T7556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.703642][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.861078][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.967080][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.207304][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.407639][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.510046][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.985182][ T7812] netlink: 'syz.5.665': attribute type 1 has an invalid length. [ 545.658188][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.665671][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.740740][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.278537][ T4779] Bluetooth: (null): Invalid header checksum [ 549.301561][ T4779] Bluetooth: (null): Invalid header checksum [ 550.182377][ T7898] netlink: 'syz.0.682': attribute type 2 has an invalid length. [ 550.190366][ T7898] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 550.674675][ T7899] loop0: detected capacity change from 0 to 128 [ 553.245018][ T7915] usb usb8: usbfs: process 7915 (syz.5.678) did not claim interface 0 before use [ 555.247811][ T7937] netlink: 'syz.5.678': attribute type 1 has an invalid length. [ 555.463502][ T7946] usb usb8: usbfs: process 7946 (syz.2.679) did not claim interface 0 before use [ 556.711333][ T7944] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 559.307539][ T7974] usb usb8: usbfs: process 7974 (syz.5.685) did not claim interface 0 before use [ 560.517945][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 560.532255][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.700170][ T8000] usb usb8: usbfs: process 8000 (syz.3.689) did not claim interface 0 before use [ 562.046902][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 562.157702][ T8010] netlink: 'syz.5.688': attribute type 2 has an invalid length. [ 562.165589][ T8010] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 562.244490][ T8011] loop5: detected capacity change from 0 to 128 [ 562.932658][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.945617][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.951999][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.227735][ T7556] device veth0_vlan entered promiscuous mode [ 563.545116][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.688048][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.710737][ T8024] usb usb8: usbfs: process 8024 (syz.3.693) did not claim interface 0 before use [ 564.885290][ T7556] device veth1_vlan entered promiscuous mode [ 566.040833][ T8036] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 566.360915][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.376256][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.449762][ T7556] device veth0_macvtap entered promiscuous mode [ 566.478943][ T7556] device veth1_macvtap entered promiscuous mode [ 566.534511][ T8045] usb usb8: usbfs: process 8045 (syz.2.694) did not claim interface 0 before use [ 566.750105][ T8052] netlink: 'syz.5.695': attribute type 2 has an invalid length. [ 566.758099][ T8052] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 566.837380][ T8053] loop5: detected capacity change from 0 to 128 [ 569.418571][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 569.498889][ T8049] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 569.551092][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.623658][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.702701][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.795608][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.466223][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.539397][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.591718][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.632888][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.698726][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.947176][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.966458][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.013986][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.084232][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.676615][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.796794][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.847115][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.906627][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.916525][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.996666][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.038195][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.160794][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.197245][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.152481][ T8132] usb usb8: usbfs: process 8132 (syz.2.711) did not claim interface 0 before use [ 576.167725][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 576.185547][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 576.814104][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 576.826874][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 576.857622][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 576.867898][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 577.331960][ T8151] usb usb8: usbfs: process 8151 (syz.3.712) did not claim interface 0 before use [ 579.214416][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 581.317376][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 583.336825][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 583.406089][ T8233] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 585.685530][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 585.703825][ T8134] chnl_net:caif_netlink_parms(): no params data found [ 585.852702][ T8267] usb usb8: usbfs: process 8267 (syz.3.726) did not claim interface 0 before use [ 585.936170][ T8269] usb usb8: usbfs: process 8269 (syz.2.725) did not claim interface 0 before use [ 588.065747][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.304766][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.471031][ T8134] device bridge_slave_0 entered promiscuous mode [ 588.965071][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.030889][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.039504][ T8134] device bridge_slave_1 entered promiscuous mode [ 589.197865][ T8303] usb usb8: usbfs: process 8303 (syz.2.740) did not claim interface 0 before use [ 590.348969][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.504826][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.526852][ T8299] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 590.633094][ T8331] netlink: 'syz.5.734': attribute type 2 has an invalid length. [ 590.640899][ T8331] netlink: 'syz.5.734': attribute type 1 has an invalid length. [ 590.719444][ T8333] loop5: detected capacity change from 0 to 128 [ 592.130218][ T8134] team0: Port device team_slave_0 added [ 592.138406][ T8134] team0: Port device team_slave_1 added [ 592.276150][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.317190][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.421707][ T8134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.508423][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.539793][ T8343] usb usb8: usbfs: process 8343 (syz.5.736) did not claim interface 0 before use [ 592.549839][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.823521][ T8346] usb usb8: usbfs: process 8346 (syz.2.738) did not claim interface 0 before use [ 594.744766][ T8134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.109676][ T8349] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 595.126499][ T8360] netlink: 'syz.5.736': attribute type 1 has an invalid length. [ 596.146047][ T8359] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 596.420001][ T8378] usb usb8: usbfs: process 8378 (syz.0.743) did not claim interface 0 before use [ 596.731771][ T8383] netlink: 'syz.2.742': attribute type 2 has an invalid length. [ 596.739781][ T8383] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 596.819893][ T8384] loop2: detected capacity change from 0 to 128 [ 598.926394][ T8134] device hsr_slave_0 entered promiscuous mode [ 598.948129][ T8134] device hsr_slave_1 entered promiscuous mode [ 598.957626][ T8134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.965250][ T8134] Cannot create hsr debugfs directory [ 599.088272][ T8385] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 601.046484][ T8397] usb usb8: usbfs: process 8397 (syz.5.747) did not claim interface 0 before use [ 602.714360][ T5503] device hsr_slave_0 left promiscuous mode [ 602.726436][ T5503] device hsr_slave_1 left promiscuous mode [ 602.754397][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.763405][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.779114][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.787011][ T5503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.796392][ T5503] device bridge_slave_1 left promiscuous mode [ 602.810413][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.894681][ T5503] device bridge_slave_0 left promiscuous mode [ 602.901051][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.913903][ T8421] usb usb8: usbfs: process 8421 (syz.0.760) did not claim interface 0 before use [ 602.934447][ T8423] usb usb8: usbfs: process 8423 (syz.5.751) did not claim interface 0 before use [ 602.948758][ T5503] device veth1_macvtap left promiscuous mode [ 602.954863][ T5503] device veth0_macvtap left promiscuous mode [ 603.022083][ T8427] netlink: 'syz.2.752': attribute type 2 has an invalid length. [ 603.029989][ T8427] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 603.054639][ T8427] loop2: detected capacity change from 0 to 128 [ 603.746479][ T5503] device veth1_vlan left promiscuous mode [ 604.091031][ T5503] device veth0_vlan left promiscuous mode [ 604.560592][ T8435] usb usb8: usbfs: process 8435 (syz.0.754) did not claim interface 0 before use [ 606.179507][ T5503] team0 (unregistering): Port device team_slave_1 removed [ 606.220165][ T5503] team0 (unregistering): Port device team_slave_0 removed [ 606.258460][ T5503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.299448][ T5503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.552192][ T5503] bond0 (unregistering): Released all slaves [ 606.645950][ T8424] netlink: 'syz.5.751': attribute type 1 has an invalid length. [ 606.661633][ T8445] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 609.824010][ T8455] netlink: 'syz.5.755': attribute type 2 has an invalid length. [ 609.832368][ T8455] netlink: 'syz.5.755': attribute type 1 has an invalid length. [ 609.870167][ T8455] loop5: detected capacity change from 0 to 128 [ 611.218813][ T4402] Bluetooth: (null): Invalid header checksum [ 611.260861][ T4402] Bluetooth: (null): Invalid header checksum [ 612.106372][ T8484] usb usb8: usbfs: process 8484 (syz.5.761) did not claim interface 0 before use [ 612.281085][ T8134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 612.292459][ T8134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 612.303382][ T8134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 612.546295][ T8492] netlink: 'syz.0.763': attribute type 2 has an invalid length. [ 612.554187][ T8492] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 613.397456][ T8493] loop0: detected capacity change from 0 to 128 [ 613.489608][ T8134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.749524][ T8496] usb usb8: usbfs: process 8496 (syz.2.764) did not claim interface 0 before use [ 614.077861][ T8506] usb usb8: usbfs: process 8506 (syz.3.765) did not claim interface 0 before use [ 614.367743][ T8509] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 614.996622][ T8513] usb usb8: usbfs: process 8513 (syz.0.777) did not claim interface 0 before use [ 615.005357][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.021113][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.049653][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.269936][ T8134] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.285632][ T8519] usb usb8: usbfs: process 8519 (syz.5.769) did not claim interface 0 before use [ 615.369767][ T8523] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 615.377690][ T8523] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 615.464521][ T8524] loop3: detected capacity change from 0 to 128 [ 616.324364][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 616.379617][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.447411][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.454592][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.619448][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 616.663582][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 616.707211][ T8530] usb usb8: usbfs: process 8530 (syz.0.781) did not claim interface 0 before use [ 616.748072][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.904317][ T8528] usb usb8: usbfs: process 8528 (syz.5.771) did not claim interface 0 before use [ 616.910158][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.920706][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.084854][ T8540] loop2: detected capacity change from 0 to 128 [ 617.866857][ T8537] usb usb8: usbfs: process 8537 (syz.3.772) did not claim interface 0 before use [ 618.508620][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.638062][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.715891][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.086622][ T8557] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 619.094504][ T8557] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 619.174900][ T8558] loop0: detected capacity change from 0 to 128 [ 620.093876][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.212718][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.238391][ T9] Bluetooth: (null): Invalid header checksum [ 620.466355][ T8544] netlink: 'syz.5.771': attribute type 1 has an invalid length. [ 620.590153][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.648304][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.715688][ T8134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.846222][ T8134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.860372][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.938595][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.997811][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 621.072306][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.113078][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.181524][ T8573] usb usb8: usbfs: process 8573 (syz.5.782) did not claim interface 0 before use [ 622.067461][ T8576] usb usb8: usbfs: process 8576 (syz.2.784) did not claim interface 0 before use [ 622.338071][ T8583] netlink: 'syz.0.785': attribute type 2 has an invalid length. [ 622.345932][ T8583] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 622.419481][ T8583] loop0: detected capacity change from 0 to 128 [ 624.395947][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.402317][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.534162][ T8592] loop3: detected capacity change from 0 to 128 [ 625.264128][ T8595] usb usb8: usbfs: process 8595 (syz.0.786) did not claim interface 0 before use [ 625.299403][ T8596] usb usb8: usbfs: process 8596 (syz.5.788) did not claim interface 0 before use [ 625.473993][ T8604] netlink: 'syz.5.788': attribute type 1 has an invalid length. [ 627.597854][ T8595] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 627.960746][ T8623] usb usb8: usbfs: process 8623 (syz.3.792) did not claim interface 0 before use [ 628.010829][ T8624] usb usb8: usbfs: process 8624 (syz.5.793) did not claim interface 0 before use [ 631.209285][ T8649] netlink: 'syz.3.797': attribute type 2 has an invalid length. [ 631.217109][ T8649] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 631.239227][ T8645] loop3: detected capacity change from 0 to 128 [ 631.598942][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 631.615967][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 631.762820][ T8657] usb usb8: usbfs: process 8657 (syz.5.798) did not claim interface 0 before use [ 631.794930][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.835654][ T8663] usb usb8: usbfs: process 8663 (syz.3.800) did not claim interface 0 before use [ 633.058808][ T8672] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 633.503521][ T8677] usb usb8: usbfs: process 8677 (syz.3.812) did not claim interface 0 before use [ 634.705648][ T8692] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 635.786803][ T8702] usb usb8: usbfs: process 8702 (syz.5.805) did not claim interface 0 before use [ 636.704716][ T8712] usb usb8: usbfs: process 8712 (syz.5.808) did not claim interface 0 before use [ 637.491620][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.508206][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.516461][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.525204][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.535559][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.544421][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.258357][ T7889] Bluetooth: (null): Invalid header checksum [ 639.342526][ T7889] Bluetooth: (null): Invalid header checksum [ 639.577614][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 640.964987][ T8738] usb usb8: usbfs: process 8738 (syz.3.810) did not claim interface 0 before use [ 641.071946][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 642.035149][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 643.918521][ T8772] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 643.926284][ T8772] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 644.006049][ T8773] loop0: detected capacity change from 0 to 128 [ 644.487317][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 645.517952][ T8783] usb usb8: usbfs: process 8783 (syz.5.821) did not claim interface 0 before use [ 645.698609][ T8786] usb usb8: usbfs: process 8786 (syz.3.817) did not claim interface 0 before use [ 646.536730][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 647.017234][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 647.392546][ T8804] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 647.549354][ T8805] usb usb8: usbfs: process 8805 (syz.2.822) did not claim interface 0 before use [ 647.579561][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.526731][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.535082][ T8719] device bridge_slave_0 entered promiscuous mode [ 649.588792][ T8812] usb usb8: usbfs: process 8812 (syz.3.824) did not claim interface 0 before use [ 649.695910][ T8814] netlink: 'syz.2.825': attribute type 2 has an invalid length. [ 649.703861][ T8814] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 649.733427][ T8814] loop2: detected capacity change from 0 to 128 [ 651.394398][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.422445][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.471334][ T8719] device bridge_slave_1 entered promiscuous mode [ 651.517953][ T8836] usb usb8: usbfs: process 8836 (syz.3.837) did not claim interface 0 before use [ 653.501175][ T8844] netlink: 'syz.5.828': attribute type 2 has an invalid length. [ 653.509003][ T8844] netlink: 'syz.5.828': attribute type 1 has an invalid length. [ 653.540243][ T8844] loop5: detected capacity change from 0 to 128 [ 654.665759][ T8852] usb usb8: usbfs: process 8852 (syz.2.829) did not claim interface 0 before use [ 654.755209][ T8857] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 654.763173][ T8857] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 654.791700][ T8857] loop0: detected capacity change from 0 to 128 [ 655.860952][ T8859] usb usb8: usbfs: process 8859 (syz.5.832) did not claim interface 0 before use [ 656.619271][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.641691][ T8864] usb usb8: usbfs: process 8864 (syz.3.834) did not claim interface 0 before use [ 656.805620][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.910844][ T8873] usb usb8: usbfs: process 8873 (syz.0.833) did not claim interface 0 before use [ 659.447574][ T4333] Bluetooth: (null): Invalid header checksum [ 660.963706][ T8888] usb usb8: usbfs: process 8888 (syz.2.838) did not claim interface 0 before use [ 661.099477][ T8882] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 661.163629][ T8719] team0: Port device team_slave_0 added [ 661.222419][ T8886] usb usb8: usbfs: process 8886 (syz.5.840) did not claim interface 0 before use [ 661.289949][ T8719] team0: Port device team_slave_1 added [ 661.781293][ T8900] usb usb8: usbfs: process 8900 (syz.2.843) did not claim interface 0 before use [ 663.053989][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.091230][ T8913] usb usb8: usbfs: process 8913 (syz.3.853) did not claim interface 0 before use [ 663.281764][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.383819][ T8919] netlink: 'syz.5.844': attribute type 2 has an invalid length. [ 663.391753][ T8919] netlink: 'syz.5.844': attribute type 1 has an invalid length. [ 663.408325][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.844'. [ 663.430737][ T8919] loop5: detected capacity change from 0 to 128 [ 663.452633][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.158541][ T8911] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 664.209454][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.270876][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.396727][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.557110][ T8928] usb usb8: usbfs: process 8928 (syz.2.848) did not claim interface 0 before use [ 665.867110][ T8719] device hsr_slave_0 entered promiscuous mode [ 665.959758][ T8719] device hsr_slave_1 entered promiscuous mode [ 666.207195][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.741942][ T8719] Cannot create hsr debugfs directory [ 667.070379][ T4559] device hsr_slave_0 left promiscuous mode [ 667.309348][ T4559] device hsr_slave_1 left promiscuous mode [ 667.387725][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.405196][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.817888][ T4559] device bridge_slave_1 left promiscuous mode [ 667.857254][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.037021][ T4559] device bridge_slave_0 left promiscuous mode [ 668.043339][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.239352][ T8979] usb usb8: usbfs: process 8979 (syz.3.854) did not claim interface 0 before use [ 668.285735][ T8981] usb usb8: usbfs: process 8981 (syz.0.855) did not claim interface 0 before use [ 670.062880][ T9002] usb usb8: usbfs: process 9002 (syz.0.858) did not claim interface 0 before use [ 671.190896][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 671.251520][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 671.340209][ T4559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.414879][ T4559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.743373][ T4559] bond0 (unregistering): Released all slaves [ 671.825626][ T8983] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 671.845259][ T9007] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 672.228260][ T9024] usb usb8: usbfs: process 9024 (syz.3.861) did not claim interface 0 before use [ 674.299244][ T9049] netlink: 'syz.2.864': attribute type 2 has an invalid length. [ 674.307364][ T9049] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 674.319026][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.864'. [ 674.331764][ T9049] loop2: detected capacity change from 0 to 128 [ 674.782577][ T9054] usb usb8: usbfs: process 9054 (syz.3.867) did not claim interface 0 before use [ 675.073130][ T9060] netlink: 'syz.0.868': attribute type 2 has an invalid length. [ 675.081008][ T9060] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 675.109563][ T9060] loop0: detected capacity change from 0 to 128 [ 676.433443][ T8719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 676.637608][ T8719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 676.653487][ T8719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.686443][ T8719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.181733][ T9095] usb usb8: usbfs: process 9095 (syz.2.876) did not claim interface 0 before use [ 679.302469][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.528200][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.536342][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.598260][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.694824][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 680.722330][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.816385][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.823660][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.654081][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.684612][ T9115] usb usb8: usbfs: process 9115 (syz.5.881) did not claim interface 0 before use [ 681.706705][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.726009][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.756108][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.763288][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.157398][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.054064][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 683.207746][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 683.249397][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.266025][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.325710][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.334853][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.950448][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.967460][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.047421][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 684.096370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.150165][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.372025][ T9139] usb usb8: usbfs: process 9139 (syz.5.886) did not claim interface 0 before use [ 685.780620][ T9142] netlink: 'syz.5.886': attribute type 1 has an invalid length. [ 685.819139][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.825511][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.340536][ T9155] usb usb8: usbfs: process 9155 (syz.5.892) did not claim interface 0 before use [ 686.382010][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 687.534777][ T9179] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 687.542659][ T9179] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 687.568818][ T9179] loop3: detected capacity change from 0 to 128 [ 688.350699][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.359554][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.379816][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.656694][ T9201] usb usb8: usbfs: process 9201 (syz.5.899) did not claim interface 0 before use [ 692.977839][ T9204] netlink: 'syz.5.899': attribute type 1 has an invalid length. [ 695.777547][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.903'. [ 699.158008][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.177128][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.185951][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 699.195174][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 699.206713][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 699.213996][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 699.264897][ T9250] usb usb8: usbfs: process 9250 (syz.0.909) did not claim interface 0 before use [ 699.871089][ T9248] chnl_net:caif_netlink_parms(): no params data found [ 701.009984][ T9268] usb usb8: usbfs: process 9268 (syz.0.912) did not claim interface 0 before use [ 701.540294][ T9280] netlink: 'syz.2.913': attribute type 2 has an invalid length. [ 701.548049][ T9280] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 701.561733][ T9280] loop2: detected capacity change from 0 to 128 [ 702.304802][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 702.885567][ T9286] usb usb8: usbfs: process 9286 (syz.3.914) did not claim interface 0 before use [ 702.925862][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.386670][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 704.639647][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.917813][ T9248] device bridge_slave_0 entered promiscuous mode [ 705.049055][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.106857][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.146821][ T9248] device bridge_slave_1 entered promiscuous mode [ 706.089655][ T9248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.209868][ T9248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.235410][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.917'. [ 706.403909][ T9248] team0: Port device team_slave_0 added [ 706.456665][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 706.495921][ T9248] team0: Port device team_slave_1 added [ 708.536579][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 709.824237][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.000412][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.333239][ T9248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.484615][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.553753][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.800906][ T9248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.781156][ T9248] device hsr_slave_0 entered promiscuous mode [ 712.917431][ T9248] device hsr_slave_1 entered promiscuous mode [ 712.983994][ T9248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.127705][ T9248] Cannot create hsr debugfs directory [ 714.067856][ T9344] usb usb8: usbfs: process 9344 (syz.2.927) did not claim interface 0 before use [ 717.115177][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 734.748447][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 734.758091][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 734.766170][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 734.815194][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 734.824037][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 734.831959][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.017530][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 737.672768][ T4333] device hsr_slave_0 left promiscuous mode [ 738.107330][ T4333] device hsr_slave_1 left promiscuous mode [ 738.114519][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.122585][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.132739][ T4333] device bridge_slave_1 left promiscuous mode [ 738.139983][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.152555][ T4333] device bridge_slave_0 left promiscuous mode [ 738.160053][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.096617][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 740.300213][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 740.375537][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 740.444983][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.533553][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.888917][ T4333] bond0 (unregistering): Released all slaves [ 741.083738][ T9248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 741.149753][ T9248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 741.176648][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 743.266666][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 744.023891][ T9248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 744.245534][ T9248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.837590][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.269016][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.276199][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.650094][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 747.736401][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.752935][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.766348][ T9248] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.848939][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 747.860244][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.545674][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.552896][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.961745][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.972066][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.097041][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 749.105723][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.112923][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.612986][ T4333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.142921][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.183849][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.217999][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 752.265320][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.350569][ T4333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.402000][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.465101][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.696998][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.744060][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.781289][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.797778][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.812955][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.651877][ T4333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.747935][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.101379][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.670094][ T9414] device bridge_slave_0 entered promiscuous mode [ 755.680196][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.687452][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.695881][ T9414] device bridge_slave_1 entered promiscuous mode [ 755.791324][ T4333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.855526][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.899920][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.951414][ T9414] team0: Port device team_slave_0 added [ 755.992467][ T9414] team0: Port device team_slave_1 added [ 756.046359][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.055298][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.081300][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.096331][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.118069][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.125060][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.150990][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.165060][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.274418][ T9414] device hsr_slave_0 entered promiscuous mode [ 756.299967][ T9414] device hsr_slave_1 entered promiscuous mode [ 756.307059][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.314842][ T9414] Cannot create hsr debugfs directory [ 760.208139][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 760.229499][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 760.246079][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 760.257044][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 760.264671][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 760.272746][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.297422][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 764.376814][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 766.456996][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 767.067072][ T4333] device hsr_slave_0 left promiscuous mode [ 767.128323][ T4333] device hsr_slave_1 left promiscuous mode [ 767.275823][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.414415][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.536589][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 768.792960][ T9623] usb usb8: usbfs: process 9623 (syz.0.980) did not claim interface 0 before use [ 768.980032][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.017001][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.025767][ T4333] device bridge_slave_1 left promiscuous mode [ 769.032154][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.099824][ T4333] device bridge_slave_0 left promiscuous mode [ 769.134205][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.285233][ T4333] device veth1_macvtap left promiscuous mode [ 769.299054][ T4333] device veth0_macvtap left promiscuous mode [ 769.305649][ T4333] device veth1_vlan left promiscuous mode [ 769.314417][ T4333] device veth0_vlan left promiscuous mode [ 771.112883][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 771.159951][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 771.213779][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.319692][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.201048][ T4333] bond0 (unregistering): Released all slaves [ 773.466670][ T9414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.526001][ T9414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.553289][ T9414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.600569][ T9414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.760670][ T9653] tmpfs: Unknown parameter 'usrquota' [ 773.886461][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.943094][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 773.968541][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 773.980762][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 774.014767][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.174210][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 774.221399][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 774.279430][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.286698][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.333523][ T9670] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 774.386848][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 774.418715][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 774.433834][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 774.444915][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.452353][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.469768][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 774.518103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 774.538253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 774.569461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 774.646788][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.654823][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.675569][ T9570] device bridge_slave_0 entered promiscuous mode [ 774.706814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 774.721971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 774.742003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 774.791446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 774.835657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 774.848411][ T9414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.886354][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 774.915170][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.938546][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.977806][ T9570] device bridge_slave_1 entered promiscuous mode [ 775.003649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 775.018208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 775.116912][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 775.186231][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.311699][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.326843][ T4262] usb 1-1: Using ep0 maxpacket: 8 [ 775.345122][ T4262] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.375421][ T4262] usb 1-1: config 0 has no interfaces? [ 775.424975][ T4262] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 775.458066][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.466250][ T4262] usb 1-1: Product: syz [ 775.476054][ T9570] team0: Port device team_slave_0 added [ 775.511361][ T4262] usb 1-1: Manufacturer: syz [ 775.516266][ T4262] usb 1-1: SerialNumber: syz [ 775.598533][ T4262] usb 1-1: config 0 descriptor?? [ 775.688101][ T9570] team0: Port device team_slave_1 added [ 775.795696][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.855285][ T4262] usb 1-1: USB disconnect, device number 2 [ 775.872903][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.982579][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.048694][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.056107][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.117887][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.203691][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 776.221909][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 776.308839][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.344265][ T9570] device hsr_slave_0 entered promiscuous mode [ 776.367701][ T9570] device hsr_slave_1 entered promiscuous mode [ 776.383204][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.407902][ T9729] ksmbd: Unknown IPC event: 4, ignore. [ 776.413631][ T9570] Cannot create hsr debugfs directory [ 776.703461][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1007'. [ 777.130534][ T9745] kvm [9744]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0x11e) = 0x60000000200 [ 777.292957][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 777.542287][ T9759] syz.0.1011 uses obsolete (PF_INET,SOCK_PACKET) [ 777.866918][ T9283] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 777.929047][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 777.940853][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.982698][ T4333] device hsr_slave_0 left promiscuous mode [ 777.994459][ T4333] device hsr_slave_1 left promiscuous mode [ 778.019986][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.037550][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.045434][ T4333] device bridge_slave_1 left promiscuous mode [ 778.052097][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.061425][ T4333] device bridge_slave_0 left promiscuous mode [ 778.068183][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.076872][ T9283] usb 3-1: Using ep0 maxpacket: 32 [ 778.085084][ T9283] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 778.103521][ T9283] usb 3-1: config 0 has no interface number 0 [ 778.111922][ T9283] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.123281][ T9283] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.134842][ T9283] usb 3-1: config 0 interface 85 has no altsetting 0 [ 778.144592][ T9283] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 778.153967][ T9283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.162248][ T9283] usb 3-1: Product: syz [ 778.166809][ T9283] usb 3-1: Manufacturer: syz [ 778.171523][ T9283] usb 3-1: SerialNumber: syz [ 778.188207][ T9283] usb 3-1: config 0 descriptor?? [ 778.292580][ T4319] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 778.402836][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 778.451190][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 778.499421][ T4319] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 778.509832][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 778.518270][ T4319] usb 6-1: Product: syz [ 778.524090][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.534470][ T4319] usb 6-1: config 0 descriptor?? [ 778.544505][ T4319] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 778.556383][ T4319] usb 6-1: Detected FT232H [ 778.600124][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.606079][ T9283] appletouch 3-1:0.85: Failed to request geyser raw mode [ 778.637698][ T9283] appletouch: probe of 3-1:0.85 failed with error -5 [ 778.685631][ T9283] usb 3-1: USB disconnect, device number 2 [ 778.750010][ T4319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 778.884593][ T4333] bond0 (unregistering): Released all slaves [ 779.037959][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 779.046837][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 779.056690][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 779.064846][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 779.085109][ T9414] device veth0_vlan entered promiscuous mode [ 779.104305][ T9570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.144801][ T9414] device veth1_vlan entered promiscuous mode [ 779.154835][ T9570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 779.181496][ T4319] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 779.197532][ T9570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 779.247629][ T9570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 779.286068][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 779.314973][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 779.365535][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 779.372194][ T4318] usb 6-1: USB disconnect, device number 2 [ 779.396420][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 779.427144][ T4318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 779.438190][ T9414] device veth0_macvtap entered promiscuous mode [ 779.463225][ T9414] device veth1_macvtap entered promiscuous mode [ 779.469568][ T4318] ftdi_sio 6-1:0.0: device disconnected [ 779.601742][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.621776][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.635028][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.650699][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.664974][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.682118][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.695333][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.733646][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.757594][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 779.775462][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.797713][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 779.820387][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.863673][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.886595][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.922673][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.964143][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.996600][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.044603][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.098303][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.127367][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1021'. [ 780.143768][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.191381][ T9414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.214464][ T9414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.256696][ T9414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.265558][ T9414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.447829][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.543381][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 780.616911][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.672792][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.702499][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.719987][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.745932][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 780.796811][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 780.805440][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.816948][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.820242][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.876676][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.876777][ T4320] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 780.883807][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.971175][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 781.013300][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 781.026124][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.033380][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.043381][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 781.060949][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 781.087048][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 781.097033][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 781.104061][ T4320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.127587][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 781.146281][ T4320] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.178890][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 781.196662][ T4320] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 781.238792][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 781.257537][ T4320] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 781.267892][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 781.293646][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.303053][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 781.339872][ T4320] usb 6-1: config 0 descriptor?? [ 781.345179][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 781.377664][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 781.386292][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 781.436383][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 781.459110][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.500447][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.773226][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 781.814421][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 781.876767][ T4276] Bluetooth: Frame is too long (len 16, expected len 4) [ 781.894298][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 781.983257][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.003501][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.017006][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.044709][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.215019][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.373521][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.626622][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.666687][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.720694][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.805868][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.866632][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 782.873981][ T4320] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 783.045161][ T4320] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0001/input/input6 [ 783.327934][ T4320] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 783.356859][ T4320] usb 6-1: USB disconnect, device number 3 [ 783.993787][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.046815][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.132363][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.539355][ T9863] fido_id[9863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 784.589873][ T9880] ------------[ cut here ]------------ [ 784.595815][ T9880] WARNING: CPU: 1 PID: 9880 at security/landlock/fs.c:752 collect_domain_accesses+0x7a4/0x810 [ 784.606231][ T9880] Modules linked in: [ 784.610256][ T9880] CPU: 1 PID: 9880 Comm: syz.0.1049 Not tainted syzkaller #0 [ 784.617963][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.628136][ T9880] RIP: 0010:collect_domain_accesses+0x7a4/0x810 [ 784.634445][ T9880] Code: 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 b6 aa fd 31 db eb dd e8 e7 b6 aa fd 0f 0b b3 01 eb db e8 dc b6 aa fd <0f> 0b eb e8 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 20 f9 ff ff 48 89 [ 784.654760][ T9880] RSP: 0018:ffffc90003af7ab0 EFLAGS: 00010283 [ 784.661809][ T9880] RAX: ffffffff83d7be74 RBX: ffff88805490abc0 RCX: 0000000000080000 [ 784.669875][ T9880] RDX: ffffc90004e62000 RSI: 0000000000000233 RDI: 0000000000000234 [ 784.677962][ T9880] RBP: ffffc90003af7bfa R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 784.685988][ T9880] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000002004 [ 784.694065][ T9880] R13: 0000000000000000 R14: ffff88805490abc0 R15: ffff8880192b0eac [ 784.702145][ T9880] FS: 00007fe01ba6d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 784.711178][ T9880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.717839][ T9880] CR2: 000000110c31009b CR3: 0000000048d77000 CR4: 00000000003506e0 [ 784.725870][ T9880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 784.733948][ T9880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 784.742025][ T9880] Call Trace: [ 784.745356][ T9880] [ 784.748394][ T9880] current_check_refer_path+0x4d8/0xa00 [ 784.754032][ T9880] ? hook_file_open+0x600/0x600 [ 784.759021][ T9880] ? _raw_spin_unlock+0x24/0x40 [ 784.764039][ T9880] ? d_set_d_op+0x25b/0x370 [ 784.769178][ T9880] security_path_rename+0x168/0x200 [ 784.774542][ T9880] do_renameat2+0x6ba/0xce0 [ 784.779175][ T9880] ? __lock_acquire+0x7d10/0x7d10 [ 784.784305][ T9880] ? fsnotify_move+0x4e0/0x4e0 [ 784.789186][ T9880] ? __check_object_size+0x500/0xa40 [ 784.794553][ T9880] ? getname_flags+0x206/0x500 [ 784.799435][ T9880] __x64_sys_renameat2+0xce/0xe0 [ 784.804427][ T9880] do_syscall_64+0x4c/0xa0 [ 784.809142][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 784.813876][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 784.818670][ T9880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.824622][ T9880] RIP: 0033:0x7fe01ab9cdd9 [ 784.829233][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.849023][ T9880] RSP: 002b:00007fe01ba6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 784.857546][ T9880] RAX: ffffffffffffffda RBX: 00007fe01ae15fa0 RCX: 00007fe01ab9cdd9 [ 784.865577][ T9880] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 784.873945][ T9880] RBP: 00007fe01ac32d69 R08: 0000000000000000 R09: 0000000000000000 [ 784.882025][ T9880] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 784.890072][ T9880] R13: 00007fe01ae16038 R14: 00007fe01ae15fa0 R15: 00007fff45436408 [ 784.898156][ T9880] [ 784.901222][ T9880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 784.908528][ T9880] CPU: 1 PID: 9880 Comm: syz.0.1049 Not tainted syzkaller #0 [ 784.915932][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.926000][ T9880] Call Trace: [ 784.929292][ T9880] [ 784.932589][ T9880] dump_stack_lvl+0x188/0x24e [ 784.937382][ T9880] ? memcpy+0x3c/0x60 [ 784.941384][ T9880] ? show_regs_print_info+0x12/0x12 [ 784.946608][ T9880] ? load_image+0x400/0x400 [ 784.951134][ T9880] panic+0x2e5/0x730 [ 784.955093][ T9880] ? bpf_jit_dump+0xd0/0xd0 [ 784.959623][ T9880] __warn+0x2f8/0x4f0 [ 784.963621][ T9880] ? collect_domain_accesses+0x7a4/0x810 [ 784.969315][ T9880] ? collect_domain_accesses+0x7a4/0x810 [ 784.974967][ T9880] report_bug+0x2ba/0x4f0 [ 784.979315][ T9880] ? collect_domain_accesses+0x7a4/0x810 [ 784.985147][ T9880] handle_bug+0x3a/0x70 [ 784.989375][ T9880] exc_invalid_op+0x16/0x40 [ 784.993917][ T9880] asm_exc_invalid_op+0x16/0x20 [ 784.998796][ T9880] RIP: 0010:collect_domain_accesses+0x7a4/0x810 [ 785.005074][ T9880] Code: 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 b6 aa fd 31 db eb dd e8 e7 b6 aa fd 0f 0b b3 01 eb db e8 dc b6 aa fd <0f> 0b eb e8 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 20 f9 ff ff 48 89 [ 785.024702][ T9880] RSP: 0018:ffffc90003af7ab0 EFLAGS: 00010283 [ 785.030787][ T9880] RAX: ffffffff83d7be74 RBX: ffff88805490abc0 RCX: 0000000000080000 [ 785.038773][ T9880] RDX: ffffc90004e62000 RSI: 0000000000000233 RDI: 0000000000000234 [ 785.046797][ T9880] RBP: ffffc90003af7bfa R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 785.054794][ T9880] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000002004 [ 785.062871][ T9880] R13: 0000000000000000 R14: ffff88805490abc0 R15: ffff8880192b0eac [ 785.070881][ T9880] ? collect_domain_accesses+0x7a4/0x810 [ 785.076557][ T9880] current_check_refer_path+0x4d8/0xa00 [ 785.082163][ T9880] ? hook_file_open+0x600/0x600 [ 785.087032][ T9880] ? _raw_spin_unlock+0x24/0x40 [ 785.091895][ T9880] ? d_set_d_op+0x25b/0x370 [ 785.096415][ T9880] security_path_rename+0x168/0x200 [ 785.101644][ T9880] do_renameat2+0x6ba/0xce0 [ 785.106163][ T9880] ? __lock_acquire+0x7d10/0x7d10 [ 785.111213][ T9880] ? fsnotify_move+0x4e0/0x4e0 [ 785.115989][ T9880] ? __check_object_size+0x500/0xa40 [ 785.121298][ T9880] ? getname_flags+0x206/0x500 [ 785.126162][ T9880] __x64_sys_renameat2+0xce/0xe0 [ 785.131210][ T9880] do_syscall_64+0x4c/0xa0 [ 785.135739][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 785.140445][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 785.145135][ T9880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.151038][ T9880] RIP: 0033:0x7fe01ab9cdd9 [ 785.155467][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.175086][ T9880] RSP: 002b:00007fe01ba6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 785.183611][ T9880] RAX: ffffffffffffffda RBX: 00007fe01ae15fa0 RCX: 00007fe01ab9cdd9 [ 785.191679][ T9880] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 785.199682][ T9880] RBP: 00007fe01ac32d69 R08: 0000000000000000 R09: 0000000000000000 [ 785.207674][ T9880] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 785.215680][ T9880] R13: 00007fe01ae16038 R14: 00007fe01ae15fa0 R15: 00007fff45436408 [ 785.223766][ T9880] [ 785.227248][ T9880] Kernel Offset: disabled [ 785.231630][ T9880] Rebooting in 86400 seconds..