last executing test programs: 5m18.03444s ago: executing program 4 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x2) 5m17.504276298s ago: executing program 4 (id=357): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m16.962940331s ago: executing program 4 (id=360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000001500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m16.407789346s ago: executing program 3 (id=365): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 5m16.287242172s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x2) 5m15.882315356s ago: executing program 3 (id=369): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 5m15.621326739s ago: executing program 4 (id=371): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000bf000000d400000020f5c8009500000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m15.279201606s ago: executing program 3 (id=373): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000380)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x595, 0x1, 0x7ff, 0x4}}], 0x50}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m15.003125018s ago: executing program 4 (id=376): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) 5m13.21844699s ago: executing program 32 (id=376): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) 5m13.171824909s ago: executing program 3 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x2) 5m12.328415384s ago: executing program 3 (id=384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 5m9.524765511s ago: executing program 3 (id=391): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0xff, 0x3}, 0x20) 5m7.566269901s ago: executing program 33 (id=391): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0xff, 0x3}, 0x20) 4m38.535184925s ago: executing program 6 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x2) 4m37.661130401s ago: executing program 6 (id=499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 4m37.042896455s ago: executing program 6 (id=503): unshare(0x22020400) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) 4m34.515855983s ago: executing program 34 (id=503): unshare(0x22020400) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) 3m57.9001196s ago: executing program 2 (id=675): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_macvtap\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x1c, "67081d9fc303c68bf9b0408358a178f2f26833306b55cdcf22c90300"}}) 3m57.451817404s ago: executing program 2 (id=678): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0xffffffff85442019}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1e1a01, 0x124) syz_fuse_handle_req(r0, &(0x7f00000041c0)="4c93eca906e9f5c6abfe567dbb511f2143c13b9ffc21b3c628540d8633ad094d99ed0fb6b14c700ae298a93a64ff51397125759ca72b81a33b80d8a5d4b007594836193dafc0736aba679d1d239435cb30be4c5a35f0ba666745c394ca038ba02aee06fc88eeef760c8dbc722aae34ab50632d656c8d0e8d425e8784c227f4d2002e2edfb2f3cfa9e58ec5e4946f14ae8070a137a8fe523b9f2f7fdc1850005e8599bfcb54001b7bf794e511c5a84a93f7f245ce9647038fbb97693413d950357d8686ce7827dfa392321bdbf0aee8ca9ee57c72d4c3aa4ad0cef6248c7179eb300d8ff2d940341a93971876556188348851f56836502faa3c5b0e4f17f66b5a9fc96e4283aae1545fd11e43db5f9fabe506e7f758c2441e5486af8b85f9220d929d666f89f4d56bea50b89bb967ab750c76bbee2ac2bbdcaa0054699e210377adc4c70ae42cfafb27875fec6a7b3ab3f6a177b8515a1928be5578838bcc652778ab1fa7b783a875536d97fdcfc5ee4a94ccbca1689b47dcf0a2ff19a20effbe1129b47c7be564efe7354af9e68e97d26b169a0dd52e9e4fd755d42359deae80acea5026856e7bcbae9bbb5df665c2fab7d8ed03aff68725ec27ff0bf63631a48ffb10b382910e2278b4df03fc762bc91fd5e1d7fbac4a40521ad456f51dc2c9a2d55d66e98f829f5e867cf7b0319072ff200dcc604360dc44fa7aa4b6e27b8f6ee722237bbc1bbcc204c4597064c86a2950c1468f519f1de50cff34cb1fcf0794b0b694f1fcb84d0e415c0d8183c62c8c54a193d7c8c57a15cc519fa0b740a02c5f6bcd04016f462d8529dcfb633a876d2a1deb8ea1b72d3e66c9b911c55f8746e34a7ea24621c42714d334d5abeea9e8b34a1bc96b4ad0c961f3cbabd8138737a4826deed9a5297599dd6319f34871e387c65ba8fc899f70c0da1ea9ede7e00885544acd489859b77573f7b78ea9de3ef94585163fd5e210722f86618105ece8bed476f19e6d93b2a8992aba2ae18108bc617d40911e5181ff39a12bf1492cf74db594cbcb562fcf18ff68c609cb423a440d06643bca22cede629447b18f160cbfeb61cc7cbf58702a0c3f4d01757281b4b6b86b7e4cd6532b39d832c09a46f1af1f3a6e6ef5315001e8efe3b3e96ded10228b589c47881c0465e97ffb6ef6391c467ad40be359122e42a70029ebc9f221c7a11e34abaca13bd540d367bdda51db6da0956ff617fe5caaa418b171458e2ddba340e665754bd79f592ef7b980474e22d4109ed6342182fdad32564e20fef392ad2faab55029c9027b851c6bf535ab91ab88a2f7b127d0ad4599e4a0dd82803da5a5e77056ae2ff8ffc31db5218a5ea1fd09beb5284fa870fe4c4fcc9ab8a5603d11397b5d36b2c23c39bae9f3abbc39dc62a4800686cbf91f30c2c3b543925b8ac2691a2e85a33b58467489782d8b6a9274e00679be8a3c58fa09ab47eefac29b5854a1ab7f703602757ea5056d9267384a7aa1c48b332e364f5e8ab91cd2861ae7b8af474c2458dd0da57d8c434a770c1adb3ba60f98fb151a106d6e1746e8a7bd35e728538cd2f9897bb85ab01445425d39f06eb0669445a59bd1e62b1221fcf1348ddc23fe9175c3e8b805f544c2cc9ff83473b6a7e421dcf42346d4e8e2f99dd519eb0173219e6573f77a7f6ac097ae9ff0e2d553a6fedebfa3d82053961f4c3fcf3618f089be0bf96be7c1ccfedfecc6ac986b8263cdaab2c69dd4d57a6a68538f7e8a43731bd75fd7033e3b124e16b662f0f71315db2f812bcd7a7117e1d8ec44f1c761eaa20d17a3cb3a97dc29d25bc3d1a3f89bf3e6ef53c872731081d249c217ebed109dda00f59405c370b439c5e85454199af12d56ffadc2ce0fa8ca69cb22c4c4d55a27988b8107d16652e63ee77e5f4b8c1ee7d8e8b8d15150db48e4fe0a84712d43c7aa277a2d02a7b5237c8e585260cb20faffee3a0f66cdb1c1a90f4499ea3fc7063fe2c2964a4d8f6be766dddd0cee7429ad55a51618cf1a68e78150781c90641c4bea5c621b62b705802e2b1a441b21c7513dea9c460bdecb5a4b921eab9379669c9af4b38ef32c8f4256ce92c295a2707c3ef9149c703fc6513bf76f0bdb92c464320decf7a98a093f88b00087f0a672257fd6f6d0e941f9cc068cbafa8f9af89b7761780b1ca083d09d6bc174a78486aef5254c783d811043b172019cf75f109c10dd2613701a3f877212c05bec5ceda69aae39650181edb5221f061655d3ab1649aa69fbaa724c4a7052eebde4051cea4ece13625b29bb006c6d229ba3d293705116433be4c4bc4f5dbc94c1ca274c73f11674f09eff09c5280dc88862409ea0045bcc779f182b626e9b77c8208f2590f9fe951d6534471a2eb20135eafb1aa73999f08d24e9f5a48d91e97432ab758aba01a34ac220ececa982b7ec3da49d7facedffe1896918bcc8fcf8b3f038153783c507d58ae5611c1e7acc2338598a2882343ed7681038fbc5f29f542cb786e7aa07f6cef14660232a8924222556196a9ffe40b76898e0eaaedcdf61f86d5a9b7397b50f2b68e05306b55c4a33b27df295b6f24a582a47bcdb1df46569a211d63ae4b3a07dd96ecf06fc553377c3bcc4aad8ea4bb4173850a519331cf28555d7e3c41b81dc835e903b37b4d860f11cc0b68866ef8b2e847ed11066be8e8ac2e639c38a54bdb60d7f6649a9a55ea5284207f6d9e4a4d8c5f21a7c27637a90979d4ec62adb1f6981f785325f4d224828b11100d0fb6f4b722f998efe8e54d1d403600aeb40696dcef4ae120217b7f9559c04e7044b00e69d7a45fbe2830c37a48bb9bb54cd924a13280062e6387af778f8fa19105465f5ccc7f9fb87bb986206e0ce994c0df2d0f7ba4c3d0e2fb8480370440c225885f6c78f4e45cd3f44eda756543c444b9633f22c7ccd8873db5e09f5902725a83bbaab37229978f1eca32fbcecaa52628a1f7b83b44a28cff72e0744e426dc5c2a8718f77f078446d9e9e83b9aa1a9d38dade33fdc6013c2b6eb20cc395ccf38226053fcfcfcac5b5de79f11e50201a3709c7135f0d3ac5e1d9e27d3c45fd6fb6ffd3e809126a595024b4cc2f1415bda66928de71120937c3726a6e148b8c1d54e6cb4f14973f043523f33767f25632b252a4cdf9dbb2aa160e7422519a446cf0526bc2cb043d3cd3f046c46b279d8a24a0aacc5880d8445c3abd8a8e78633f3e5beac81c3782a07c7a08771f790367689ac10fb7afa3171b6b20a4079be2771f6e774854b36b241da2ed3bd72e757e57972e2701106310be4e26d5344531eceb5aef0bb28758079acf1968cba97fdb08e9dd6c9b1efbcb04a76ccb2f02a81ba72c31a4175539f54877d16b24bdaf5cda38aaa4380a329aa9cf3538839da58116b6d97921bbcc10c3011869464ee6cfba102b35ab25847df0edad934c8d74d59ceb7594d53e53816002f7561b8780054d4ddcc457de75a1c59be10f69bdb8d0ff29ee23301443c86028cfd8aa564399e58acfdf029fe4c50356fffe9ffe615ef59a9a91eef0379b82c23ce7be9a4f9038613a522755ae932726747743c8c5e7d7a10fcc642af71ffd55a49266f1262525d66b532b422c64c4fef519972c78ca5c2fcdca989788886438ab56a4a65fe91dec5dc23974e4d693a30cad8a5763258cb16ec276cf4893e42886d270e9820b018c8d6f11e0fadfb7024e991a6cbec62a65b64d0c539aa541350579a4c3d37738b6a7d677e8483589d8aee5abf6d337bc36a19f8884ee36e984349a8c47e26ee455e991460a4309c6b3a0617bb8a97a8b54c39d6f32a4934833e97c6df1a3ad878493a0d977bb42f4408735a8894d52bdbecd44c4c012d330641f9aa9845ae1abdd6ddbf931506f371225937e7759c5cfeaca9f9edd559a938d481e5ec0089858ccbdf9af19c61975753f693dbc09f6800c59336491aefeb7dbe2a38b69867c50f07f70de6d62ca8257c3b91de31e7b0bf1158ffa5a566198c8265d1bfd6f3b1d00edb7a64b419e96d85b0cf0e913404b79bf18c676b1b8c6ea7767d527d187d6278dc7535f13a4dea1b3155ad428c066fc54a99694816759bf896e121dc41750eb656decbf7aa60061d90d15873af2e5b00efc99d30c55e86714760421652adeda6db2bffba59c75005978dfbe24cdc9c3619c28ae01ddc8d01c6c1afb83a26458c15ebc5afdb93ab4ff087f060d5ac9b938ab06037cf3bac5bbabf357e6178b6852f55f076acca2759ca3385f05619885568f97b54213604f8b6bd2653703d5fb2075b5134b46884120949bc3a5a583de518327f29b262c7cdb5ae0bdb157345cc0a101ea43748aa8eb5c51343a85a63f13af951235d2f352207e0f618d0405dbc0181fdf2f69b888b6c64b7d4c54d5a7a2ccb7dde6c460d3c0099730794bb175cbe66e6509d8df3b51bb30ab0fa928d5e3e1e25a6f010a73341a0670f95e96d24f7ffbc30956564ec9208a9ad820471eb60e057547dedebbc88db3657048ef337248717ea9a008e5149edd6756f1ec3dace472089f89c4fbe2ca6261c9365a4732738d137db8d0177936d8c9b1ae181a95cdb256f04efe402ea3cc528d4601718fa0935e48f6dc69ab6792c69f924e3d07eb7a4d3e4440e70018fb2acdf9c772269c89eacf18d700b107248bdfb258a9988fa859b6838a61bd8e864f712d3a178f2b0ad3458f76a3b273e42e006f05f1a1957124cd83d8aa3384d0ac15e653041b1ce0e5816ce518e5aee569274ceed06b5ee56579c2e700a705865415a521839151d67de76c49903d0db5a13709580ab930781d63c1a4c1dedd14c72750a9a856b25f5524f158de3c41fd24fc054fbc5239da4224921e8cabd51df9c5e52124d65c594703eeb739c8b976d6b5bbc29e5c38bf2327608a705cf9b6aeff3d1969f5003395bd6e2b78113d9e8b222022aef0c9180e7ad76869858b449ce112997d78827d2cfd00b0c75d342af7456306107e1973afb4215de0efbf8907f16e7cabefb7e71fe9a3549a5fefd71ff887cd291e4f3a9bb887f8e37cdbf2a83e340b1a0844eaa612f148797a3c94939a3ad662c2953e77d70055225fa5cbca359bc768f7009cebe16ff9754d7be3e61dbe7bb993b2d22308f1bc7084c8042c6d0d381f46107230bbf20407a542d93bf999737316b944619413d914fb2dbb76f86b6628bbbb1acb81fe6a802e30015f4ccd9fcd57ebd485281843894c3ba37a2901d10fd46208f9abed1ad542f7425a5e9b8cd3f18e3a301b74b277336ff9e01267318e74baadc8fc06abec3b8d94c6582802fd5be75aa296b7d15f9217be97d9c8f2621efc9c1164d126318a10162ccd28315f7b7df7b4fbdbbc79451099ab4024a67858ef882d4fcd06627fbd16eff9ed9c198061c076a9aeaf3764b241a05642deff9c9b62b85498af722a55a5a456464ea0e7baabdaf50131671d368f11d9abbc561365e3776ea36a0089e27c5b5c83c8df54714dcb203246f98e48a6a1dfe53092562dad914bd0027d77a953d3dec5b6c0aefe7a28c43653b1962b824a5923b102ae219c99f10ac78b88df4bcbd60e6d07be3cdfd84f5aa8ae150eec2745afd1bada38d165e21d21392831a4dac717e23c6ec9d772bc92edc1ead94b57ff702f2e25d7fc219c5504ef74f90120f97a71eacefcd8019aa0c88ab95054cc16f1c069bfab3c7fa3ff861da18f4cba9d198554abf93eb0a3736dc2169809ec01ee5d07bbc4c50b93a3057532cbe74f6702b302b11812bf8dda3d535c366c061d13579119c3f77dd4d526b075033d73c088f1cfc8b4a9ed8fbcf224fd6ef286c6ffc3c73354e798dba5d89eab483dc484dfbc2a7f8705a7a8cc9459b012ea7db9c93fb8974b81277e84dca6e96558af299d1e5ee180b9562944c38f496a518217e9efbf1589948d1a0cbfcdee2acf2c852f967397eca9639a462d172154998157ad7754084b18c14838cff62a08e509d5b169657dac6bda57ae9db6013c5e01e80f37384cd10a9374c09a8304c40544f172e345d77a399035657a000d306ff98c5fa32da5e9b85a0ff530f6cacabfa189b6bf185594206497f778d259550965cc6e2959c6a4f2eaadce58a0c958f258879ec24e85e604d080562a48e53cbc09b6a89127bd5ed10eb639b678e0f0fcb42e2000a38874769e35b634c8d8239b173cc2fb10bc54c60ebea5fe7c45138bbfbef84f4f453b19d374982f2dbf44f38de93b58050a07b45564bf2f1406c6f2e45b55e2c01a57b23ad61dbc31593b05bef1f89cbafa44490deed8b6edd4ef1ea7d8669ac769b164899e5b73dd047d4ca8c84185a9e98b6408170456b6f99dbff615207ccbc5561649039f325e3ed0aac4ff1653bf831b4da7ba5a1c055f55103cc79ecfd626c709ced9d88230be871e5e78a285916764043aaafcf0f2df590c45f7f957515a85c1f7b4a8a355f5a6e1f5515b71894126fa1271c920a103fe3fc08daeaa98239e27bf7d8b80438a04b0f1d8a6bce8168207a12585459f31e65da5842883502495606bbf8eb47fc935bd13b5fe89c04ec4f41a8dcbc3e64814ee3830c2179709fb1569822c7805144f0f9dae0bfffb040a46bd868a1d61e996845a80ac3e191d1cb7423fa2028b4a62dd0ff7b2f70c8411d597000cce213496aed637e3c8556f9431d8cae10db45cc775d5979c3dce1c415a403f66fa1f254231c178746bf530ff330cd4ab5e06c9e41b69cf44d90417567d84cde0361bc3977fd4520d6535404c7166ec7dd9657fb0e72826a74de56fcb5423db99a6705b7db3a38e0f261d7e00d7ae80c804225768ea63e37f4d6fac73470a20749ecd5edab0c7a6bac0ef35ad0141b10f7f31dd61f017cfb4d6f7792e319c70181e85078f59a274bbfc945250124d169f8552df91efe9f527563949dcef6060f0757f3a78e746ca6506df547f298c01f69e1d3b518aaa966a2bde4c0cd5b327eacd316e16a7872c605a85d118dac703b0c2f29e95904af321d3fb67fe2b6d7be61af37c37270b2008667f80fab00b5d44c5a654dfadeb9932f484aa25a2f08eb96d42d7d87724cde6db72f93624ced86e84a95418c02b0cd08975fce54497bbf3bf64ddbcc876cfa204f36bc98153927a118f56c94661dceeb85f89994a603fa36bae448e58bf9eb17eb7a6c454e27f5f66aaeda8167be503a90fa8d218feb2d78f0db0075eff84603b12b5c2bc5aa962d2cd9e099fafddfa6a540a7354bbabdd14de96edaec7b69f9afdbe72fd0b64f248cd1c25edc254fa5d5408669abd3a079264abdbe7e7d34c88b0bf0bc4a41904466b261c6e38923bfe57f64e81ab4532a7a21b6b22084940f24f7c63bc534eb82e57462f08703dd9487117e8ba005c494004e8fc3b14738681f880d869eaec2055e439295adcf9b9c8a54475153dc7212b1dbb3307debdb0ca0e7fcf9f251d06ce7191d7661530cdd1ef7d3fe3bb58f5c06e3fe86350c73ae9a692b4278449ce7f09d7baccc029c6be991541609150609b5615f59f8e55a54417f3cb6215413d57b875ba63f04bcc7f9b08f1048449796e8bed1f699ef04108da0edbdeed9a10ee48e1db711e446d74526933477a3adf7e96551dedf1ad433fba907bda41397532848f7e15c57f0484fab90296d8951b62a44acfc96bc17b07cb64d0051b854e29e9cd963fcb5720bc35240615f528a7d1a535e6e414e3632b3405079042bab46475040b82f1bd20386b7dae003c7b5d3d25e69fd17d3c2a6daac12a25c0afd19c2fa6c8d6204bd9bfcbc57048cadb61af805d1060154200892d147df11734654e566f45edae38d99f060b5572b70fea382c88395e92758b53b2f857f6f76c1be86f03d0336672ab365194ce11936a54b1fb410eb5ecc880463f83c54ccdd61606f035c3e138b14a29ee4d96bbf0deae702f80ecef31d7273f78c12dcfecf2de12c294bd4a767f79c705bf43739ae15975bbf5ba4240c04960e02bfa86e9f45c5ec56f9b7fcad06592c943eadc19e495238712e83da476edbc2bcf1df51627fbc6404c613bae7f7a7ab09d8dceb7f3044be9f12c85c43b924371f7e050bf57fb657fbed586b21f5db725a769b33c1fdf930b52a2d33991481de6ee7ab9752ec42a495bc4622667897e76015be76fd84246480b8ea0b97cc48a7ec79a1451df21ccd5accb49025130588f7ba6194659dc0759c1814e36ef3b290b79c7b8b16f3e318e5b90b98c7bcdfc6babb2684340bc10d15b3ef4a6fcf493b739fea90dc3c048fb149bdbaf9691358ab4a90313eef123c2333d929ef98b58a9addccbc8f79d2001f6f7021fffb906bca8b4d918d2b34c52bb080e11a1591059b9e6d7bd5960635d66b27a6c078ed276218c8be75a9fb274cb0f29c560247d8684b5f02d574c5d994186d88970f678b52cd3a24e9f9687a36fb6003bff7844798c7c7b68c8d15d3db5623aca21bfe4bcb54f5a9b8ed691ba8d9cc733f55f0847a181bafcb1526412896878424e1642d6f985434e8091787519153023917f54e34606777cae023c03de3b4a07ea28f9be74dd8f3cf9a0c702bc80e02c757c746d870be8d40ace510b6544830b57179696b989f4240eac64182e2d1df5a6e968cd95c1830824dcdbb79a315f3070bcb0592772b9846f7350960b84a12da02fbe49f8b5b047792d57930810ebdb688891640f2093cba33fc9b84b559987ab537c0f14afac4534cb124032ee7e70bce7bab517cb7a32120b5ba45c2caf42fc4dbe664b7e5a61fd518fe838bc47eb1f9a02bb1d30a6cecbc76bee8620b8bfa0a06f39e2fcc0951cb2592c60aa2c7fa5b67e03ccf0075cc24e9d42f7f7a30b13929000a74c394ee7edac01560d57a79998184c227dabaf91d4e976fab71cff3ffa4201f4eeab7b4a46e1b4d644c3bfae1c3fe26114ce6a80f9ec2d20640f859a2daaf1aec58cd7386f2075d83342ff8a2c921bc74a3808a39dc9b3be388e1453750e851162ff12f838f5bfec8053858f255f6a297d315b4a6b24d7364aeadc050b2b87e34bd498a63c48fd614497026e08bf29e011fc0a23708719245657cb0681940b2bb7d202f9e4ce1548f4d20545a7bf17b17ce2ecf1459c6d7f37857b75409ee4a3b0d94e025af6703037cc45d421d8730f5e8239532113b325db5b31667833b087d909ae6bfbd962d58840b878a76d07fecc159348590504346ecbddd8c61027ea94bd50bd359c04056263aa89e608c19d332383de9a6277008fd2c7cc072eacf2229af2ebef7e2b0dd3308de5a8bf6ee5973d3b01d1fa517ae670c327e295bc6eec8d973bde37a18f6b3e31357eea5030f9511badca29ae12af67484e827443ad7236f95b07a0431c368acc2aa65c080a54b18fb460ae0ec51cb3e4f4d418957090f9df6d767f03128042d4f4feb990657278de397d3f058e41710c7ed2664635d8f5f6c8748bec6da751aee29d285d851febe0af6dfcfc4256fa88eebe6544e9447517c9dd0d36aede67f62835a9c6676d4548b152f10204e1557c75927bc128cf960b66aab42bd401a6c3c9f7dc32d11ba4bcee25a424b87f1ffc0be4a671a79b014a6e6aa947f2a2ef78b5937b27f364d6cf6c18d9f820b4b56ff8485c543fe7a520d56e729b23586ae251dec23bed98e166ca57ce045bc692d13e44e2a26ba62c49ed6afe5b0ba7662689a5f662bc66395fe5c9212fa9326651c3d57f819c6a4848f949cb7fbb7a56f0e066ce96b14911d8ce448eab0a3925bac66cb840f6a5d00bc69625745388dc620134c689ba4efb8ad949939f772215dd02afe06865f249a13d69f31738d130fb3910ee3d807dd1999492284a24ebbbb523f12239c08432d419951dd98ca5dc79ae3e288ec21aafcf72fea4338199ba7d0143bd9d023bf5eb750a5052569be3b37524cc6be314c9c98bfdc3d8723bccad555e0307fab32eae91ac4aed298a746593bb0c67fe9a8802900ad8287f781e54b954781ee8dcb2d92a62891a2fecfa8981c0bb5ba2c210f851f92198767e89c16a959f5a14f7474d52a3baa39c9c7f0b889b5cd16e714974a2f27f22c9c7753efc99dde10769c6f68571cd36920cece047dc970cc4cfee26d35bb0dbff8e3223080f13b0b95c3c0db84c6f8c7e3ab70b6385db9dd823e0d1ddc0e7906ad45c044496e1256647d6375900fb230aa5535b5becf02151c70df77b571805c6a0298f7dad549bbfc7673ca144e54470afb7d65b7ff92c9e7203f744b7a3d2f6409ad14db6d3a91fbbfa0d35e1f1c6c3c46eaf6bcad4130f8b0a3f58b40fee93c7a86285eb6af234d91b923e07da217fd3eabf4a7dab9827e693ce0c8e989d4414135313f90ff5ac63a251df9d317706e77e368a631aef8c2e15743c1b649e0b8559701c0d91d41b48cd87a3062505aa1d4243c936d87075c9a4257306c86312ac888af02f1d047c7fcba7ef4c3a61d5a9303ad267c1d155de39231f6f79fdeb477cd5389420d6e469f0c39555f6e4346a6093f1ca4b0159aac306557640cb43111be55046283733f47dde3cdc2be347c10ad5aa4b09ad8baf97bbf08a20946561071720cb7e9c9baa00074146d6c3701da109f64c4415d4d19035713fefef7d965a8e4303b0ffd26e8dda9d6a3bf76bc2a29c0604308de81b36d346d98168e8d9a1615f5c234a05593c47994bcb48cfd4c2d1737418fb701672a0346641ff1d3b990ea06cb76c2c6ababd632a682533208db1914c87c2004c33254083d0b300b1547f8a37f02d1b72199a7e8c6dbb29ff38de94e86974f8e502497566ee973166ca97a1dc4ec323947835d1bdf3e1fd87022c460c970b9f04726ba2b774a9e9f3fdf98f4a86aabe08b75395a889a9dae5d0fea5e3efd399056242ccb6fe6d62be2bcb3981246ff8a0f825aa0029dd67c21c9480bd2786b87d7910c0ac0ee5babd0ff76f883c011752962d3dcdb0c2a142514ef3c7d8336c79d0e3630222d641b230b9190a0d0d7210df5871d0cc6e2a3491ce042ea19913c3405bab850a96cbb7c6f732f739a6c5ce429fd4420c8c1e3c24fd5e5f8d75011350a7aea15181f8e964407ed80fc8c2d74313e519bab2aed511e48ea99955ee20520f6506fd6e65ce01db7864e5a77e0a497917424aa4877f60c03a6e5b0fb825a1724e8e6b0182d251ceba0fdaae4e048740515f886e7b1c2615154d6466b9c75284c47a5b380600ea262545f2337f41664208e43e7b81583a885caa3a02d8d38ce36efa36852f3455ed0c37c80b1c669d0558e1bc988aa501f50202019a299cc66b2c62733c79f05d1cc3adb1a3f68425586cfb1dd49eeaf7d26f215981df4075b58cb7bbac0a1e2789d324aebcad5d4d663959e65730b2562283541b66a8352724cec2ac1f7f3619f2043c65d59d81918d37c7784267c68d71323c94c5466d8a431a04d661fd155355b8ccfc192f011a91fe7564d1afa9f35a9cb2ede49a631cb443d4f92849095354f83f997bc46c0aef69a10e6931085a07efb8f2ddc2b4ed9052a8ab337e28e0b01c5da86068e46d3ace19d72ad655a3d532c30b5ab4c0b4bbb6935ea5aa041ac681dcb980c17474c5af3c9f8e6893c27b72ad08028fa276a6c5e9a74f2cd5d7b4c", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x6f4, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m56.895394492s ago: executing program 2 (id=681): readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfdfffffa, 0x7, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m55.77215928s ago: executing program 2 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x0, 0x0, 0xdbc9, 0x332, 0x0, 0x7, 0x400, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m54.635158734s ago: executing program 2 (id=693): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) 3m53.239574572s ago: executing program 2 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3m37.845313192s ago: executing program 35 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 5.553266327s ago: executing program 8 (id=2107): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) 5.147355065s ago: executing program 8 (id=2110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x0, 0x0, 0xdbc9, 0x332, 0x0, 0x7, 0x400, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.945061249s ago: executing program 0 (id=2112): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x3}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x800, 0x0, 0x800000004, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) 4.730203062s ago: executing program 8 (id=2114): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0xf, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4.584744684s ago: executing program 7 (id=2116): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 4.35181436s ago: executing program 8 (id=2118): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4.351352566s ago: executing program 7 (id=2119): close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a, 0x5}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x2) 4.051982818s ago: executing program 5 (id=2121): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) 3.960872339s ago: executing program 1 (id=2122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.864426476s ago: executing program 0 (id=2123): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)="bb", 0x1}], 0x2, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 3.807543129s ago: executing program 7 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x0, 0x0, 0xdbc9, 0x332, 0x0, 0x7, 0x400, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.648303347s ago: executing program 5 (id=2125): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000880) 3.24152743s ago: executing program 5 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfffd, 0x3, 0x4}, {0x8, 0xff, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.145177795s ago: executing program 1 (id=2127): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x34}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.903637165s ago: executing program 7 (id=2128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x2, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2.828697256s ago: executing program 0 (id=2129): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000800)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000001121c90b000000002badb72c8b8434b4c6fb22d15243700095100b61db2bde66c30346ba4a3238c700721a5dbb56a3cf4cb86b219a12b5b24722944820e624fc5b17cb822ca4232c98a9936ba722474ca5ae220b67ba4957509559b7fbc8acd4fe17dfc5633b3013ba08618396fe1d2f65b257f18f11d66c27a6c5b2c2fc2b46a5def71a203c242565353cf31b8198f053f9c7f744dd2a62cf670db255c89a6f40181ca19b9b5916a1bcf71b53baa3366400e9e8960cc71597e7591879c4c0f0ae3d93f238bf1a98f439294d5ede7b759e6f3f51dc52941998e1dba45a6402a5b61e44585b27d260a4a7a07306e9ba99ce848c2bf6f013362c9f20b093cf7006ccbcbebfb4934712d5b4b846d46114e1bfc5e1d66655fe9e2ad2bc814eca7d6af3d83f9a513156566fb86287afd792bb8ba83a855d1eb8ca9909d73f6dd551558b82d29d10126459446b74d8517adafde1813314f2a86109c1604b7d3132128fed0ef4000000", 0x1a6}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/134, 0x86}, {&(0x7f0000000640)="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", 0x17e}], 0x3}, 0x0) 2.752036974s ago: executing program 5 (id=2130): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) 1.943350146s ago: executing program 5 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0x1, 0x0, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.897467821s ago: executing program 1 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="ea34776219", 0x5}], 0x1) 1.664038079s ago: executing program 0 (id=2133): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 1.663593488s ago: executing program 7 (id=2134): close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a, 0x5}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x2) 1.538036377s ago: executing program 5 (id=2135): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f00000009c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x8, 0x1, 0x80000000}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}], 0x1}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @remote}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x2400c080) 1.479260789s ago: executing program 1 (id=2136): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000880) 1.445081691s ago: executing program 0 (id=2137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.273019861s ago: executing program 7 (id=2138): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x10}], 0x0, 0x0, 0x2}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r2, 0x0, 0xf5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x3, 0xeeee8000, 0x2000, &(0x7f00009ad000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x28, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000000)={0x7, 0x10001, {0xffffffffffffffff}, {0xee00}, 0x6, 0xab9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {r8}}, './file0\x00'}) write$binfmt_script(r7, 0x0, 0x0) 793.670275ms ago: executing program 8 (id=2139): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}], 0x1}}], 0x1, 0x0) 727.612616ms ago: executing program 1 (id=2140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfffd, 0x3, 0x4}, {0x8, 0xff, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 275.587829ms ago: executing program 0 (id=2141): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) 167.639766ms ago: executing program 8 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 0s ago: executing program 1 (id=2143): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010101}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0xc0) kernel console output (not intermixed with test programs): devsim3: renamed from eth3 [ 337.083828][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.150663][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.186064][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.279364][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.614893][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.671144][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.832094][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.871203][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.878834][ T4555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.936181][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.956101][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.980948][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.988799][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.080576][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.088084][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.201935][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.209616][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.254392][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.342770][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.350381][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.439417][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.446788][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.548642][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.886430][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.990825][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.034158][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.041836][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.134674][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.144198][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.315356][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.425855][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.433683][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.591707][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.599395][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.805300][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.906647][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.090839][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.331499][ T5803] veth0_vlan: entered promiscuous mode [ 341.487880][ T5803] veth1_vlan: entered promiscuous mode [ 341.565449][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.831606][ T5808] veth0_vlan: entered promiscuous mode [ 341.868044][ T5803] veth0_macvtap: entered promiscuous mode [ 341.914512][ T5808] veth1_vlan: entered promiscuous mode [ 341.970149][ T5803] veth1_macvtap: entered promiscuous mode [ 342.090978][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.257546][ T5808] veth0_macvtap: entered promiscuous mode [ 342.330716][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.343115][ T5802] veth0_vlan: entered promiscuous mode [ 342.353542][ T5808] veth1_macvtap: entered promiscuous mode [ 342.448996][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.490849][ T5802] veth1_vlan: entered promiscuous mode [ 342.550100][ T3647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.641891][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.675072][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.705183][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.715549][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.856725][ T5814] veth0_vlan: entered promiscuous mode [ 342.871179][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.932306][ T5802] veth0_macvtap: entered promiscuous mode [ 342.977617][ T5814] veth1_vlan: entered promiscuous mode [ 343.028021][ T3627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.080598][ T5802] veth1_macvtap: entered promiscuous mode [ 343.095001][ T3627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.135625][ T3627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.189821][ T3647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.275934][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.374200][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.435888][ T5814] veth0_macvtap: entered promiscuous mode [ 343.518996][ T4689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.529027][ T4354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.541925][ T4555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.610730][ T4555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.643684][ T5814] veth1_macvtap: entered promiscuous mode [ 343.926627][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.006768][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.041801][ T5805] veth0_vlan: entered promiscuous mode [ 344.160533][ T3627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.222802][ T3627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.239392][ T5805] veth1_vlan: entered promiscuous mode [ 344.282345][ T3627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.315496][ T3627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.701590][ T5805] veth0_macvtap: entered promiscuous mode [ 344.792137][ T5805] veth1_macvtap: entered promiscuous mode [ 345.024192][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.163940][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.316496][ T3627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.355919][ T3627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.413738][ T3627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.450190][ T4354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.590534][ T4689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.599043][ T4689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.715419][ T4555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.723736][ T4555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.154676][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.166449][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.256795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.266801][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.406978][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 350.559148][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.567180][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.595980][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.608277][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.174617][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.182862][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.428917][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 351.521260][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.530558][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.660613][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 351.690415][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 351.757448][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.767923][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.791380][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 351.809258][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 351.868829][ T4555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.877150][ T4555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.951593][ T11] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 351.961320][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.969746][ T11] usb 4-1: Product: syz [ 351.974118][ T11] usb 4-1: Manufacturer: syz [ 351.979031][ T11] usb 4-1: SerialNumber: syz [ 352.060725][ T11] usb 4-1: config 0 descriptor?? [ 352.087617][ T11] hub 4-1:0.0: bad descriptor, ignoring hub [ 352.095043][ T11] hub 4-1:0.0: probe with driver hub failed with error -5 [ 352.195922][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.204397][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.224584][ T11] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 352.245103][ T4354] usb 4-1: Failed to submit usb control message: -71 [ 352.252457][ T4354] usb 4-1: unable to send the bmi data to the device: -71 [ 352.260634][ T4354] usb 4-1: unable to get target info from device [ 352.267213][ T4354] usb 4-1: could not get target info (-71) [ 352.273463][ T4354] usb 4-1: could not probe fw (-71) [ 352.380566][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 352.582395][ T5865] usb 4-1: USB disconnect, device number 2 [ 352.745958][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 353.656054][ T6012] loop0: detected capacity change from 0 to 2048 [ 353.677986][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 353.909582][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.922551][ T6012] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.445084][ T6012] 9pnet_fd: Insufficient options for proto=fd [ 354.517047][ T6012] tipc: Can't bind to reserved service type 1 [ 354.893868][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.987893][ T6055] Zero length message leads to an empty skb [ 356.167467][ T6058] hugetlbfs: Bad value 'Ï' for mount option 'size' [ 356.167467][ T6058] [ 356.435827][ T6064] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 357.380557][ T6079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33'. [ 357.390596][ T6079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.33'. [ 357.399737][ T6079] netlink: 'syz.2.33': attribute type 6 has an invalid length. [ 357.412430][ T6079] netlink: 'syz.2.33': attribute type 5 has an invalid length. [ 357.421965][ T6079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.33'. [ 359.348766][ T5927] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 359.568959][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 359.614706][ T5927] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 359.625603][ T5927] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.636984][ T5927] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.647430][ T5927] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.665013][ T5927] usb 1-1: config 7 interface 0 has no altsetting 0 [ 359.673802][ T5927] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 359.683254][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.187514][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 360.196554][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 360.628223][ T5927] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input5 [ 360.825431][ T5927] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 360.896588][ T5927] usb 1-1: USB disconnect, device number 2 [ 361.745485][ T6121] fido_id[6121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 361.965785][ T6127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.452201][ T6133] syzkaller0: entered promiscuous mode [ 362.457933][ T6133] syzkaller0: entered allmulticast mode [ 366.970060][ T6193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.391170][ T6212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 368.860888][ T6219] binder: BINDER_SET_CONTEXT_MGR already set [ 368.867057][ T6219] binder: 6218:6219 ioctl 4018620d 2000000001c0 returned -16 [ 374.121866][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.128635][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.316244][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 382.148372][ C1] hrtimer: interrupt took 213437 ns [ 383.412704][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 383.597392][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 383.604080][ T6432] binder: 6430:6432 ioctl 4018620d 2000000002c0 returned -16 [ 386.320507][ T6470] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 388.531158][ T6502] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 389.074238][ T6506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.360441][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 390.456845][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 391.562079][ T6538] input: syz0 as /devices/virtual/input/input6 [ 399.165147][ T6629] syzkaller0: entered promiscuous mode [ 399.171344][ T6629] syzkaller0: entered allmulticast mode [ 401.399728][ T6658] kvm: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x6800000c42 [ 401.450512][ T6658] kvm: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x55000034ae [ 401.517994][ T6658] kvm: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x7c0000239e [ 401.624248][ T6658] kvm: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x6b0000af3e [ 401.668049][ T6658] kvm: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x9300008a5a [ 401.771096][ T6658] kvm_intel: kvm [6655]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x1d9) = 0xf40000b122 [ 402.007224][ T6674] No control pipe specified [ 402.188695][ T5927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 402.457732][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.474006][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 402.490465][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 402.504224][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.517745][ T5927] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.527210][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.655010][ T5927] usb 2-1: config 0 descriptor?? [ 403.125108][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 403.131883][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 403.191863][ T5927] usb 2-1: USB disconnect, device number 2 [ 404.697475][ T6710] No control pipe specified [ 404.985308][ T6716] syz.3.303 uses obsolete (PF_INET,SOCK_PACKET) [ 407.261064][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 407.477338][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.494134][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.506798][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 407.519736][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.534610][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.544034][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.639610][ T5927] usb 5-1: config 0 descriptor?? [ 407.796174][ T6749] No control pipe specified [ 408.089162][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 408.101817][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 408.166561][ T5927] usb 5-1: USB disconnect, device number 2 [ 414.100543][ T6837] syzkaller0: entered promiscuous mode [ 414.106231][ T6837] syzkaller0: entered allmulticast mode [ 416.553182][ T6878] syzkaller0: entered promiscuous mode [ 416.559438][ T6878] syzkaller0: entered allmulticast mode [ 417.158832][ T3627] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.286285][ T3627] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.497587][ T3627] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.687025][ T3627] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.898890][ T6893] tipc: Started in network mode [ 417.904162][ T6893] tipc: Node identity fa0becfa467c, cluster identity 4711 [ 417.912719][ T6893] tipc: Enabled bearer , priority 0 [ 418.053673][ T6893] syzkaller0: entered promiscuous mode [ 418.059654][ T6893] syzkaller0: entered allmulticast mode [ 418.207290][ T6893] tipc: Resetting bearer [ 418.220792][ T3627] bridge_slave_1: left allmulticast mode [ 418.226651][ T3627] bridge_slave_1: left promiscuous mode [ 418.240368][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.273004][ T3627] bridge_slave_0: left allmulticast mode [ 418.279285][ T3627] bridge_slave_0: left promiscuous mode [ 418.285868][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.754060][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.776422][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.791732][ T3627] bond0 (unregistering): Released all slaves [ 418.813978][ T6892] tipc: Resetting bearer [ 418.837827][ T6892] tipc: Disabling bearer [ 419.694518][ T3627] hsr_slave_0: left promiscuous mode [ 419.710974][ T3627] hsr_slave_1: left promiscuous mode [ 419.719695][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.727282][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.811384][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.819390][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.961667][ T3627] veth1_macvtap: left promiscuous mode [ 419.967467][ T3627] veth0_macvtap: left promiscuous mode [ 419.977694][ T3627] veth1_vlan: left promiscuous mode [ 419.983427][ T3627] veth0_vlan: left promiscuous mode [ 420.521295][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.532824][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.555227][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.637401][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.649807][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.506129][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 421.556279][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 422.749334][ T5811] Bluetooth: hci2: command tx timeout [ 423.131228][ T3627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.311719][ T3627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.514493][ T3627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.697651][ T3627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.181528][ T3627] bridge_slave_1: left allmulticast mode [ 424.187419][ T3627] bridge_slave_1: left promiscuous mode [ 424.194322][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.211328][ T3627] bridge_slave_0: left allmulticast mode [ 424.217147][ T3627] bridge_slave_0: left promiscuous mode [ 424.224286][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.680128][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.741612][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.773162][ T3627] bond0 (unregistering): Released all slaves [ 424.828849][ T5811] Bluetooth: hci2: command tx timeout [ 424.896185][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 425.085309][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 425.489279][ T6975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.597601][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.613449][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.640357][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.659381][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.675834][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.868929][ T3627] hsr_slave_0: left promiscuous mode [ 425.906100][ T3627] hsr_slave_1: left promiscuous mode [ 425.917715][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.925560][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.001414][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.011638][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.123710][ T3627] veth1_macvtap: left promiscuous mode [ 426.131220][ T3627] veth0_macvtap: left promiscuous mode [ 426.137119][ T3627] veth1_vlan: left promiscuous mode [ 426.142873][ T3627] veth0_vlan: left promiscuous mode [ 426.901708][ T5818] Bluetooth: hci2: command tx timeout [ 427.187119][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 427.338763][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 427.866578][ T5818] Bluetooth: hci1: command tx timeout [ 428.222968][ T7012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.559501][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.567000][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.578182][ T6913] bridge_slave_0: entered allmulticast mode [ 428.587485][ T6913] bridge_slave_0: entered promiscuous mode [ 428.698258][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.706222][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.714124][ T6913] bridge_slave_1: entered allmulticast mode [ 428.723804][ T6913] bridge_slave_1: entered promiscuous mode [ 428.982792][ T5818] Bluetooth: hci2: command tx timeout [ 429.103040][ T7020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 429.243583][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.343101][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.673927][ T6913] team0: Port device team_slave_0 added [ 429.694226][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 429.810839][ T6913] team0: Port device team_slave_1 added [ 429.861149][ T7033] can0: slcan on ttyS3. [ 429.939056][ T5818] Bluetooth: hci1: command tx timeout [ 430.138154][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.145618][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.171829][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.178662][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.210212][ T7038] can0 (unregistered): slcan off ttyS3. [ 430.307728][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.315102][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.341339][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.355742][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.768264][ T7044] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 430.917319][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.112362][ T6913] hsr_slave_0: entered promiscuous mode [ 431.122767][ T6913] hsr_slave_1: entered promiscuous mode [ 431.160382][ T7050] bond1: (slave dummy0): making interface the new active one [ 431.173920][ T7050] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 431.865962][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.873745][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.881906][ T6982] bridge_slave_0: entered allmulticast mode [ 431.891605][ T6982] bridge_slave_0: entered promiscuous mode [ 432.019044][ T5818] Bluetooth: hci1: command tx timeout [ 432.101580][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.109296][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.116960][ T6982] bridge_slave_1: entered allmulticast mode [ 432.126803][ T6982] bridge_slave_1: entered promiscuous mode [ 432.552103][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.650088][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.102199][ T7077] geneve2: entered promiscuous mode [ 433.151134][ T6982] team0: Port device team_slave_0 added [ 433.252262][ T6982] team0: Port device team_slave_1 added [ 433.567507][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.575467][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.604298][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.643668][ T6913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.740187][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.747447][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.775075][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.814243][ T6913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.904210][ T6913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.011017][ T6913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.099355][ T5818] Bluetooth: hci1: command tx timeout [ 434.423612][ T6982] hsr_slave_0: entered promiscuous mode [ 434.434190][ T6982] hsr_slave_1: entered promiscuous mode [ 434.443185][ T6982] debugfs: 'hsr0' already exists in 'hsr' [ 434.449239][ T6982] Cannot create hsr debugfs directory [ 435.055688][ T7105] can0: slcan on ttyS3. [ 435.266095][ T7106] can0 (unregistered): slcan off ttyS3. [ 435.582001][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.588932][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.921937][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.334791][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.423598][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.431247][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.491301][ T6982] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.593458][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.601190][ T3647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.654790][ T6982] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.763362][ T6982] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.890337][ T6982] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 437.424535][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 438.134074][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.383417][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.490432][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.498002][ T4555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.609005][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.616522][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.939491][ T6982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.951343][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.271747][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.515213][ T7170] fuse: Bad value for 'fd' [ 440.835955][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.215429][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 441.446916][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 441.499495][ T2996] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.551523][ T2996] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.619527][ T3936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.697345][ T3936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.023804][ T6913] veth0_vlan: entered promiscuous mode [ 442.130589][ T6913] veth1_vlan: entered promiscuous mode [ 442.575000][ T6913] veth0_macvtap: entered promiscuous mode [ 442.673676][ T6913] veth1_macvtap: entered promiscuous mode [ 442.884462][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.024935][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.110349][ T4689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.184252][ T4689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.250389][ T4689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.312008][ T4689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.900295][ T7213] fuse: Bad value for 'fd' [ 443.963279][ T6982] veth0_vlan: entered promiscuous mode [ 444.165316][ T6982] veth1_vlan: entered promiscuous mode [ 444.526098][ T6982] veth0_macvtap: entered promiscuous mode [ 444.614001][ T6982] veth1_macvtap: entered promiscuous mode [ 444.621021][ T7220] binder: BINDER_SET_CONTEXT_MGR already set [ 444.627169][ T7220] binder: 7219:7220 ioctl 4018620d 2000000002c0 returned -16 [ 444.809839][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.948110][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.036900][ T4555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.171827][ T4555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.239324][ T4689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.319010][ T4689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.279389][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 446.288690][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 446.510214][ T7250] fuse: Bad value for 'fd' [ 447.089446][ T7260] binder: BINDER_SET_CONTEXT_MGR already set [ 447.095612][ T7260] binder: 7258:7260 ioctl 4018620d 2000000002c0 returned -16 [ 450.015980][ T7307] binder: BINDER_SET_CONTEXT_MGR already set [ 450.022599][ T7307] binder: 7306:7307 ioctl 4018620d 2000000002c0 returned -16 [ 450.070766][ T7309] binder: 7305:7309 ioctl c0306201 0 returned -14 [ 450.803156][ T7317] Illegal XDP return value 2401582645 on prog (id 64) dev N/A, expect packet loss! [ 450.988839][ T3936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.996906][ T3936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.286311][ T4555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.295155][ T4555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.687986][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.696381][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.979736][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 452.986148][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 452.988282][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 453.101691][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.109872][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.491464][ T7349] binder: 7346:7349 ioctl c0306201 0 returned -14 [ 453.570912][ T7350] binder: 7348:7350 ioctl c0306201 0 returned -14 [ 454.294987][ T7361] binder: 7360:7361 ioctl 4018620d 0 returned -22 [ 454.397142][ T7361] binder: 7360:7361 unknown command 0 [ 454.407250][ T7361] binder: 7360:7361 ioctl c0306201 200000000080 returned -22 [ 455.165046][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.417499][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.701023][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.944947][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.958707][ T7386] binder: 7385:7386 ioctl c0306201 0 returned -14 [ 456.719556][ T12] bridge_slave_1: left allmulticast mode [ 456.725419][ T12] bridge_slave_1: left promiscuous mode [ 456.732573][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.849646][ T12] bridge_slave_0: left allmulticast mode [ 456.855527][ T12] bridge_slave_0: left promiscuous mode [ 456.862702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.414640][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.439847][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.458923][ T12] bond0 (unregistering): Released all slaves [ 457.911374][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.136025][ T12] hsr_slave_0: left promiscuous mode [ 458.163902][ T12] hsr_slave_1: left promiscuous mode [ 458.176576][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.185198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.237670][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.245514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.411239][ T12] veth1_macvtap: left promiscuous mode [ 458.417046][ T12] veth0_macvtap: left promiscuous mode [ 458.423278][ T12] veth1_vlan: left promiscuous mode [ 458.428870][ T12] veth0_vlan: left promiscuous mode [ 458.618319][ T7404] binder: BINDER_SET_CONTEXT_MGR already set [ 458.624855][ T7404] binder: 7398:7404 ioctl 4018620d 200000000040 returned -16 [ 459.119211][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.130535][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.151029][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.187403][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.213212][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.473931][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 459.483684][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 459.552136][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 459.865980][ T7419] binder: 7417:7419 ioctl c0306201 0 returned -14 [ 459.936011][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.034225][ T12] team0 (unregistering): Port device team_slave_0 removed [ 460.566622][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 460.919435][ T7425] syzkaller0: entered promiscuous mode [ 460.925246][ T7425] syzkaller0: entered allmulticast mode [ 461.385871][ T5818] Bluetooth: hci1: command tx timeout [ 461.938658][ T7439] binder: BINDER_SET_CONTEXT_MGR already set [ 461.944821][ T7439] binder: 7437:7439 ioctl 4018620d 200000000040 returned -16 [ 462.396896][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 463.459184][ T5818] Bluetooth: hci1: command tx timeout [ 463.720845][ T7470] tipc: Enabled bearer , priority 0 [ 463.760378][ T7470] syzkaller0: entered promiscuous mode [ 463.766064][ T7470] syzkaller0: entered allmulticast mode [ 463.858681][ T7470] tipc: Resetting bearer [ 463.911699][ T7469] tipc: Resetting bearer [ 463.950824][ T7469] tipc: Disabling bearer [ 464.439650][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.454699][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.462800][ T7407] bridge_slave_0: entered allmulticast mode [ 464.472486][ T7407] bridge_slave_0: entered promiscuous mode [ 464.595963][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.603747][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.611772][ T7407] bridge_slave_1: entered allmulticast mode [ 464.628723][ T7407] bridge_slave_1: entered promiscuous mode [ 464.999667][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.110739][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.503630][ T7407] team0: Port device team_slave_0 added [ 465.540877][ T5818] Bluetooth: hci1: command tx timeout [ 465.577342][ T7407] team0: Port device team_slave_1 added [ 465.727523][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.734909][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.764082][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.822662][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.830141][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.859465][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.584121][ T7407] hsr_slave_0: entered promiscuous mode [ 466.594748][ T7407] hsr_slave_1: entered promiscuous mode [ 466.603768][ T7407] debugfs: 'hsr0' already exists in 'hsr' [ 466.609866][ T7407] Cannot create hsr debugfs directory [ 466.888178][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.552'. [ 467.381481][ T7522] binder: BINDER_SET_CONTEXT_MGR already set [ 467.390613][ T7522] binder: 7521:7522 ioctl 4018620d 2000000002c0 returned -16 [ 467.629086][ T5818] Bluetooth: hci1: command tx timeout [ 468.116368][ T7407] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.250481][ T7407] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.349895][ T7407] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.468117][ T7407] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.676380][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.928215][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.984945][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.985285][ T7556] binder: BINDER_SET_CONTEXT_MGR already set [ 469.992556][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.006243][ T7556] binder: 7555:7556 ioctl 4018620d 2000000002c0 returned -16 [ 470.077865][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.085456][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.879406][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.069355][ T7407] veth0_vlan: entered promiscuous mode [ 475.173593][ T7407] veth1_vlan: entered promiscuous mode [ 475.500629][ T7407] veth0_macvtap: entered promiscuous mode [ 475.516020][ T7617] syzkaller0: entered promiscuous mode [ 475.521906][ T7617] syzkaller0: entered allmulticast mode [ 475.606009][ T7407] veth1_macvtap: entered promiscuous mode [ 475.759574][ T7619] binder: 7618:7619 ioctl c0306201 0 returned -14 [ 475.817894][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.928228][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.036886][ T71] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.053437][ T71] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.117116][ T71] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.152313][ T71] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.200080][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.605'. [ 478.543866][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 478.561104][ T7656] syzkaller0: entered promiscuous mode [ 478.566783][ T7656] syzkaller0: entered allmulticast mode [ 478.733083][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.400389][ T7669] binder: 7668:7669 ioctl c0306201 0 returned -14 [ 481.406550][ T7704] tipc: Started in network mode [ 481.416225][ T7704] tipc: Node identity 8676fb9a1a1f, cluster identity 4711 [ 481.431552][ T7704] tipc: Enabled bearer , priority 0 [ 481.494180][ T7707] syzkaller0: entered promiscuous mode [ 481.501137][ T7707] syzkaller0: entered allmulticast mode [ 481.597950][ T7704] tipc: Resetting bearer [ 481.618197][ T7701] tipc: Resetting bearer [ 481.696465][ T7701] tipc: Disabling bearer [ 482.208125][ T4689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.216289][ T4689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.375877][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 482.385251][ T7717] netlink: 312 bytes leftover after parsing attributes in process `syz.5.623'. [ 482.394745][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 482.417964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.426249][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.470255][ T7716] binder: 7715:7716 ioctl c0306201 0 returned -14 [ 483.213864][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 483.222592][ T7731] binder: 7730:7731 ioctl c0306201 0 returned -14 [ 483.223385][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 483.325827][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 483.450161][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 483.989936][ T7740] warning: `syz.0.631' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 484.413458][ T7746] tipc: Started in network mode [ 484.418958][ T7746] tipc: Node identity a27fdd2f225e, cluster identity 4711 [ 484.426969][ T7746] tipc: Enabled bearer , priority 0 [ 484.454547][ T7746] syzkaller0: entered promiscuous mode [ 484.461017][ T7746] syzkaller0: entered allmulticast mode [ 484.637319][ T7746] tipc: Resetting bearer [ 484.749419][ T7744] tipc: Resetting bearer [ 484.811767][ T7744] tipc: Disabling bearer [ 486.339014][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 486.348549][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 486.449394][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.643'. [ 486.477498][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 486.589529][ T7780] binder: 7775:7780 ioctl 4018620d 0 returned -22 [ 487.913004][ T7796] tipc: Enabled bearer , priority 0 [ 487.951597][ T7796] syzkaller0: entered promiscuous mode [ 487.957461][ T7796] syzkaller0: entered allmulticast mode [ 488.210345][ T7794] tipc: Resetting bearer [ 488.332806][ T7794] tipc: Disabling bearer [ 488.698244][ T7799] infiniband syz1: set active [ 488.703298][ T7799] infiniband syz1: added bond0 [ 488.711212][ T7801] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 488.719870][ T7801] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 488.738881][ T7801] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 488.961833][ T7799] RDS/IB: syz1: added [ 488.966078][ T7799] smc: adding ib device syz1 with port count 1 [ 488.972762][ T7799] smc: ib device syz1 port 1 has no pnetid [ 489.450765][ T7811] syzkaller0: entered promiscuous mode [ 489.456456][ T7811] syzkaller0: entered allmulticast mode [ 489.740982][ T5861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 490.107140][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.124401][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.137865][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 490.148017][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.161493][ T5861] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.170947][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.409303][ T5861] usb 3-1: config 0 descriptor?? [ 491.261191][ T5861] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 491.354055][ T5861] usb 3-1: USB disconnect, device number 2 [ 491.680059][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.7.664'. [ 492.146599][ T7833] fido_id[7833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 492.376720][ T7835] tipc: Enabled bearer , priority 0 [ 492.481080][ T7835] syzkaller0: entered promiscuous mode [ 492.486773][ T7835] syzkaller0: entered allmulticast mode [ 492.658982][ T7835] tipc: Resetting bearer [ 492.689766][ T7834] tipc: Resetting bearer [ 492.737898][ T7834] tipc: Disabling bearer [ 492.855524][ T7841] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 492.902121][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.669'. [ 493.617967][ T7847] tipc: Enabled bearer , priority 0 [ 493.740502][ T7847] tipc: Resetting bearer [ 493.816011][ T7849] syzkaller0: entered promiscuous mode [ 493.838336][ T7846] tipc: Resetting bearer [ 493.863148][ T7846] tipc: Disabling bearer [ 493.978811][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 494.242311][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.253488][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.267106][ T11] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.276525][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.391186][ T11] usb 2-1: config 0 descriptor?? [ 494.412723][ T11] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 495.829581][ T7875] syzkaller0: entered promiscuous mode [ 495.835270][ T7875] syzkaller0: entered allmulticast mode [ 496.298071][ T7879] tipc: Enabled bearer , priority 0 [ 496.312791][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.684'. [ 496.400137][ T7881] syzkaller0: entered promiscuous mode [ 496.406000][ T7881] syzkaller0: entered allmulticast mode [ 496.481964][ T7879] tipc: Resetting bearer [ 496.524194][ T7878] tipc: Resetting bearer [ 496.553565][ T7878] tipc: Disabling bearer [ 496.786490][ T7887] tipc: Enabled bearer , priority 0 [ 496.820785][ T7890] syzkaller0: entered promiscuous mode [ 496.826486][ T7890] syzkaller0: entered allmulticast mode [ 496.966417][ T7887] tipc: Resetting bearer [ 497.013702][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.021375][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.039062][ T11] usb 2-1: USB disconnect, device number 3 [ 497.132307][ T7886] tipc: Resetting bearer [ 497.214961][ T7886] tipc: Disabling bearer [ 497.730790][ T7903] syzkaller0: entered promiscuous mode [ 497.736492][ T7903] syzkaller0: entered allmulticast mode [ 498.735435][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 500.333333][ T7937] syzkaller0: entered promiscuous mode [ 500.339387][ T7937] syzkaller0: entered allmulticast mode [ 501.137022][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.710'. [ 501.146744][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.710'. [ 501.218296][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.710'. [ 501.250079][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 501.273309][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.710'. [ 503.499164][ T7976] syzkaller0: entered promiscuous mode [ 503.504911][ T7976] syzkaller0: entered allmulticast mode [ 504.180568][ T7985] tipc: Enabled bearer , priority 0 [ 504.269036][ T7989] tipc: Resetting bearer [ 504.349741][ T7984] tipc: Disabling bearer [ 504.488553][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 505.971169][ T11] IPVS: starting estimator thread 0... [ 506.088726][ T8009] IPVS: using max 192 ests per chain, 9600 per kthread [ 508.931889][ T8049] binder: 8048:8049 ioctl 4018620d 0 returned -22 [ 511.785889][ T8086] netlink: 56 bytes leftover after parsing attributes in process `syz.1.764'. [ 511.869516][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 512.020274][ T8088] IPVS: length: 141 != 8 [ 512.394383][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.767'. [ 513.486201][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.507135][ T8102] No control pipe specified [ 514.868906][ T8120] syzkaller0: entered promiscuous mode [ 514.874800][ T8120] syzkaller0: entered allmulticast mode [ 515.809656][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.819001][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.839863][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.853270][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.864587][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.271301][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'. [ 516.399382][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'. [ 517.119330][ T8139] kvm: MONITOR instruction emulated as NOP! [ 517.324298][ T8140] No control pipe specified [ 517.941126][ T5804] Bluetooth: hci5: command tx timeout [ 518.169910][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 518.989278][ T8160] tipc: Started in network mode [ 518.999682][ T8160] tipc: Node identity 1a89094e7671, cluster identity 4711 [ 519.007810][ T8160] tipc: Enabled bearer , priority 0 [ 519.177465][ T8161] syzkaller0: entered promiscuous mode [ 519.183558][ T8161] syzkaller0: entered allmulticast mode [ 519.289897][ T8158] tipc: Resetting bearer [ 519.384587][ T8156] tipc: Resetting bearer [ 519.441590][ T8156] tipc: Disabling bearer [ 519.654434][ T8165] tipc: Started in network mode [ 519.659938][ T8165] tipc: Node identity da2f46abc6d8, cluster identity 4711 [ 519.668057][ T8165] tipc: Enabled bearer , priority 0 [ 519.760847][ T8165] syzkaller0: entered promiscuous mode [ 519.766528][ T8165] syzkaller0: entered allmulticast mode [ 519.883065][ T8165] tipc: Resetting bearer [ 520.001954][ T8164] tipc: Resetting bearer [ 520.037362][ T5804] Bluetooth: hci5: command tx timeout [ 520.084648][ T8164] tipc: Disabling bearer [ 520.514123][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.521952][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.534296][ T8131] bridge_slave_0: entered allmulticast mode [ 520.545202][ T8131] bridge_slave_0: entered promiscuous mode [ 520.673554][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.681636][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.689762][ T8131] bridge_slave_1: entered allmulticast mode [ 520.699625][ T8131] bridge_slave_1: entered promiscuous mode [ 520.797151][ T8179] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 520.984054][ T8179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.221025][ T8183] bond1: (slave gretap1): making interface the new active one [ 521.233090][ T8183] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 521.342460][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.360337][ T8182] No control pipe specified [ 521.778223][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.148056][ T5804] Bluetooth: hci5: command tx timeout [ 522.496603][ T8131] team0: Port device team_slave_0 added [ 522.925843][ T8131] team0: Port device team_slave_1 added [ 523.684610][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.692673][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.723992][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.919066][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.926271][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.952925][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.179234][ T5804] Bluetooth: hci5: command tx timeout [ 524.644574][ T8131] hsr_slave_0: entered promiscuous mode [ 524.655048][ T8131] hsr_slave_1: entered promiscuous mode [ 524.664116][ T8131] debugfs: 'hsr0' already exists in 'hsr' [ 524.670095][ T8131] Cannot create hsr debugfs directory [ 525.723408][ T8225] autofs: Bad value for 'fd' [ 526.634165][ T8131] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.723378][ T8131] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.919298][ T8131] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 527.049433][ T8131] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 528.565464][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.808238][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.905681][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.913435][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.037487][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.045158][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.243177][ T8263] autofs: Bad value for 'fd' [ 530.982808][ T8283] vlan2: entered promiscuous mode [ 530.988075][ T8283] macvlan0: entered promiscuous mode [ 531.473318][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.892959][ T8290] fuse: Bad value for 'user_id' [ 531.901143][ T8290] fuse: Bad value for 'user_id' [ 532.759535][ T8299] autofs: Bad value for 'fd' [ 533.648121][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.7.843'. [ 533.942809][ T8315] autofs: Unknown parameter '00000000000000000000' [ 534.395516][ T8131] veth0_vlan: entered promiscuous mode [ 534.462865][ T8131] veth1_vlan: entered promiscuous mode [ 534.801340][ T8131] veth0_macvtap: entered promiscuous mode [ 534.898422][ T8131] veth1_macvtap: entered promiscuous mode [ 535.010378][ T8329] fuse: Bad value for 'user_id' [ 535.015440][ T8329] fuse: Bad value for 'user_id' [ 535.024611][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.140982][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.210980][ T4555] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.292843][ T4555] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.337390][ T4555] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.424892][ T4555] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.655497][ T8345] tipc: Enabled bearer , priority 0 [ 536.737425][ T8345] tipc: Resetting bearer [ 536.851494][ T8344] tipc: Disabling bearer [ 537.014335][ T8351] autofs: Unknown parameter 'fd00000000000000000000' [ 538.210152][ T8362] binder: 8361:8362 ioctl 4018620d 0 returned -22 [ 538.503089][ T8368] fuse: Bad value for 'user_id' [ 538.508169][ T8368] fuse: Bad value for 'user_id' [ 540.105676][ T8382] tipc: Enabled bearer , priority 0 [ 540.163657][ T8382] syzkaller0: entered promiscuous mode [ 540.170551][ T8382] syzkaller0: entered allmulticast mode [ 540.311377][ T8379] tipc: Resetting bearer [ 540.426081][ T8379] tipc: Disabling bearer [ 541.243340][ T8390] tipc: Enabled bearer , priority 0 [ 541.363731][ T8390] tipc: Resetting bearer [ 541.365747][ T8397] binder: 8392:8397 ioctl 4018620d 0 returned -22 [ 541.474043][ T8389] tipc: Disabling bearer [ 541.509724][ T8396] autofs: Unknown parameter 'fd00000000000000000000' [ 542.376759][ T8407] fuse: Bad value for 'fd' [ 542.610535][ T8411] binder: 8410:8411 ioctl 4018620d 0 returned -22 [ 542.980328][ T5927] IPVS: starting estimator thread 0... [ 543.130764][ T8419] IPVS: using max 192 ests per chain, 9600 per kthread [ 543.651164][ T8427] syzkaller0: entered promiscuous mode [ 543.656945][ T8427] syzkaller0: entered allmulticast mode [ 543.817435][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.826224][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.950693][ T8427] tipc: Enabled bearer , priority 0 [ 544.015434][ T8425] tipc: Resetting bearer [ 544.090012][ T8425] tipc: Disabling bearer [ 544.254158][ T6946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.264075][ T6946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.466423][ T8431] tipc: Enabled bearer , priority 0 [ 544.553188][ T8432] syzkaller0: entered promiscuous mode [ 544.559530][ T8432] syzkaller0: entered allmulticast mode [ 544.724860][ T8430] tipc: Resetting bearer [ 544.791751][ T8430] tipc: Disabling bearer [ 544.966726][ T8440] tipc: Enabled bearer , priority 0 [ 545.117616][ T8436] tipc: Resetting bearer [ 545.144900][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 545.184802][ T8438] autofs: Unknown parameter 'fd00000000000000000000' [ 545.247752][ T8435] tipc: Disabling bearer [ 545.392595][ T8443] syzkaller0: entered promiscuous mode [ 545.399257][ T8443] syzkaller0: entered allmulticast mode [ 545.676027][ T8446] binder: 8445:8446 ioctl 4018620d 0 returned -22 [ 546.480836][ T8458] binder: 8457:8458 ioctl 4018620d 0 returned -22 [ 546.588908][ T5861] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 546.792277][ T5861] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.802854][ T5861] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.812750][ T5861] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.822178][ T5861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.963091][ T5861] usb 9-1: config 0 descriptor?? [ 547.239687][ T5861] usb 9-1: string descriptor 0 read error: -71 [ 547.295518][ T5861] usb 9-1: USB disconnect, device number 2 [ 547.850961][ T6946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.066459][ T6946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.308833][ T6946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.555057][ T6946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.140885][ T8484] tipc: Enabled bearer , priority 0 [ 549.212417][ T8484] tipc: Resetting bearer [ 549.239407][ T6946] bridge_slave_1: left allmulticast mode [ 549.245258][ T6946] bridge_slave_1: left promiscuous mode [ 549.252045][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.386679][ T6946] bridge_slave_0: left allmulticast mode [ 549.393562][ T6946] bridge_slave_0: left promiscuous mode [ 549.400275][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.970776][ T8497] binder: 8496:8497 ioctl 4018620d 0 returned -22 [ 550.298815][ T6946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.367348][ T6946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.400678][ T6946] bond0 (unregistering): Released all slaves [ 550.494156][ T6946] bond1 (unregistering): (slave dummy0): Releasing active interface [ 550.524590][ T6946] bond1 (unregistering): Released all slaves [ 550.679348][ T8483] tipc: Disabling bearer [ 550.810745][ T11] tipc: Node number set to 1828194638 [ 550.911140][ T6946] tipc: Left network mode [ 551.916123][ T6946] hsr_slave_0: left promiscuous mode [ 552.015989][ T6946] hsr_slave_1: left promiscuous mode [ 552.024464][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.032431][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.141678][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.149578][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.288986][ T6946] veth1_macvtap: left promiscuous mode [ 552.294867][ T6946] veth0_macvtap: left promiscuous mode [ 553.578132][ T6946] team0 (unregistering): Port device team_slave_1 removed [ 553.650591][ T6946] team0 (unregistering): Port device team_slave_0 removed [ 554.397045][ T8546] binder: 8545:8546 ioctl c0306201 0 returned -14 [ 554.726047][ T8552] tipc: Enabled bearer , priority 0 [ 554.903952][ T8550] tipc: Resetting bearer [ 555.310621][ T8549] tipc: Disabling bearer [ 555.354825][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.8.920'. [ 558.444079][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 558.452060][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.453335][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 558.569617][ T8609] tipc: Started in network mode [ 558.574908][ T8609] tipc: Node identity 869e16aaf551, cluster identity 4711 [ 558.583317][ T8609] tipc: Enabled bearer , priority 0 [ 558.632324][ T8608] tipc: Disabling bearer [ 559.585633][ T8627] syzkaller0: entered promiscuous mode [ 559.591692][ T8627] syzkaller0: entered allmulticast mode [ 560.357115][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 561.284113][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 561.299039][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 561.451650][ T8662] tipc: Enabling of bearer rejected, failed to enable media [ 562.637141][ T8683] syzkaller0: entered promiscuous mode [ 562.643354][ T8683] syzkaller0: entered allmulticast mode [ 564.397475][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 564.407364][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 564.890976][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 565.490126][ T8729] syzkaller0: entered promiscuous mode [ 565.495959][ T8729] syzkaller0: entered allmulticast mode [ 567.396183][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 567.406447][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 568.142206][ T8772] tipc: Enabling of bearer rejected, failed to enable media [ 568.390421][ T8778] syzkaller0: entered promiscuous mode [ 568.396146][ T8778] syzkaller0: entered allmulticast mode [ 570.040523][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.997'. [ 570.049780][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.8.997'. [ 570.848232][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 571.490993][ T8828] syzkaller0: entered promiscuous mode [ 571.496790][ T8828] syzkaller0: entered allmulticast mode [ 573.282059][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 573.295531][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 573.488050][ T8859] netlink: 'syz.1.1017': attribute type 13 has an invalid length. [ 574.082576][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.092440][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.404037][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.435605][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.383909][ T8871] tipc: Enabling of bearer rejected, failed to enable media [ 575.423648][ T8269] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.433312][ T8269] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.471810][ T8269] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.481532][ T8269] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.571879][ T8269] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.581486][ T8269] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.686297][ T8269] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.696319][ T8269] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.075807][ T8892] tipc: Enabled bearer , priority 0 [ 576.160174][ T8892] syzkaller0: entered promiscuous mode [ 576.166007][ T8892] syzkaller0: entered allmulticast mode [ 576.255025][ T8891] tipc: Resetting bearer [ 576.291640][ T8897] fuse: Unknown parameter 'use00000000000000000000' [ 576.346406][ T8891] tipc: Disabling bearer [ 576.900595][ T8906] tipc: Enabled bearer , priority 0 [ 576.964475][ T8906] tipc: Resetting bearer [ 576.988507][ T8905] tipc: Disabling bearer [ 577.029949][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 577.039623][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 577.240758][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1032'. [ 577.739898][ T8921] tipc: Enabling of bearer rejected, failed to enable media [ 577.766994][ T8919] netlink: 'syz.5.1035': attribute type 13 has an invalid length. [ 578.964732][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.974407][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.361437][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.392678][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.583522][ T8964] fuse: Unknown parameter 'use00000000000000000000' [ 580.776486][ T3627] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.859318][ T3627] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.909002][ T71] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.939066][ T3647] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.968595][ T8978] tipc: Enabled bearer , priority 0 [ 580.991281][ T8978] syzkaller0: entered promiscuous mode [ 580.996975][ T8978] syzkaller0: entered allmulticast mode [ 581.161556][ T8977] tipc: Resetting bearer [ 581.294722][ T8977] tipc: Disabling bearer [ 581.673944][ T8987] tipc: Enabled bearer , priority 0 [ 581.746173][ T8987] tipc: Resetting bearer [ 581.801493][ T8986] tipc: Disabling bearer [ 581.926682][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 581.937355][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 582.796652][ T9006] fuse: Unknown parameter 'user_i00000000000000000000' [ 583.387135][ T9012] tipc: Enabling of bearer rejected, failed to enable media [ 583.619744][ T9024] netlink: 'syz.7.1054': attribute type 13 has an invalid length. [ 584.427384][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.437241][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.723806][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.755733][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.854499][ T9040] tipc: Enabling of bearer rejected, failed to enable media [ 585.869830][ T3936] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.914189][ T3936] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.980247][ T3936] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.028940][ T3936] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.098875][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 586.481730][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 586.491815][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 586.906740][ T9070] fuse: Unknown parameter 'user_i00000000000000000000' [ 587.996814][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 588.410722][ T9100] tipc: Enabled bearer , priority 0 [ 588.441890][ T9104] netlink: 'syz.7.1072': attribute type 13 has an invalid length. [ 588.454073][ T9100] syzkaller0: entered promiscuous mode [ 588.460188][ T9100] syzkaller0: entered allmulticast mode [ 588.591953][ T9105] tipc: Enabled bearer , priority 0 [ 588.642858][ T9097] tipc: Resetting bearer [ 588.708152][ T9097] tipc: Disabling bearer [ 588.938603][ T9105] tipc: Resetting bearer [ 588.973174][ T9102] tipc: Disabling bearer [ 589.454560][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 589.464047][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 589.760955][ T9119] fuse: Unknown parameter 'user_i00000000000000000000' [ 591.210167][ T9144] tipc: Enabling of bearer rejected, failed to enable media [ 591.359532][ T8941] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 591.571744][ T8941] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.582621][ T8941] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 591.599793][ T8941] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.609485][ T8941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.736218][ T8941] usb 9-1: config 0 descriptor?? [ 591.834372][ T8941] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 593.017891][ T9172] fuse: Unknown parameter 'user_id00000000000000000000' [ 594.109701][ T9189] netlink: 'syz.0.1100': attribute type 29 has an invalid length. [ 594.164357][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 594.174208][ T9189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.182241][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.251110][ T9189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.271413][ T9189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.300973][ T8975] usb 9-1: USB disconnect, device number 3 [ 594.692564][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 597.140759][ T9252] tipc: Enabling of bearer rejected, failed to enable media [ 599.222706][ T5154] udevd[5154]: worker [5993] terminated by signal 33 (Unknown signal 33) [ 600.206670][ T9298] tipc: Enabling of bearer rejected, failed to enable media [ 601.297561][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'. [ 601.589398][ T9325] syzkaller0: entered promiscuous mode [ 601.595186][ T9325] syzkaller0: entered allmulticast mode [ 601.809662][ T9330] netlink: 'syz.0.1144': attribute type 4 has an invalid length. [ 602.880643][ T9352] tipc: Enabled bearer , priority 0 [ 602.931389][ T9352] tipc: Resetting bearer [ 602.944721][ T9351] tipc: Disabling bearer [ 602.965459][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1153'. [ 603.540315][ T9364] syzkaller0: entered promiscuous mode [ 603.546143][ T9364] syzkaller0: entered allmulticast mode [ 604.325077][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1164'. [ 604.336772][ T9380] tipc: Enabled bearer , priority 0 [ 604.441348][ T9380] tipc: Resetting bearer [ 604.476660][ T9379] tipc: Disabling bearer [ 604.658670][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1164'. [ 605.810667][ T9416] syzkaller0: entered promiscuous mode [ 605.816745][ T9416] syzkaller0: entered allmulticast mode [ 606.653244][ T9433] tipc: Enabled bearer , priority 0 [ 606.681535][ T9433] tipc: Resetting bearer [ 606.727519][ T9432] tipc: Disabling bearer [ 607.013057][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 607.347226][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 607.723622][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 607.888594][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1188'. [ 607.947216][ T9461] team1: entered promiscuous mode [ 607.956341][ T9461] team1: entered allmulticast mode [ 608.013952][ T9464] syzkaller0: entered promiscuous mode [ 608.019875][ T9464] syzkaller0: entered allmulticast mode [ 608.513105][ T9470] syzkaller0: entered promiscuous mode [ 608.519231][ T9470] syzkaller0: entered allmulticast mode [ 608.543349][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 608.754433][ T9477] netlink: 'syz.8.1194': attribute type 8 has an invalid length. [ 609.991011][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1206'. [ 610.134165][ T9506] syzkaller0: entered promiscuous mode [ 610.141351][ T9506] syzkaller0: entered allmulticast mode [ 611.922636][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1221'. [ 612.061334][ T9549] syzkaller0: entered promiscuous mode [ 612.067248][ T9549] syzkaller0: entered allmulticast mode [ 614.309556][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1238'. [ 614.448882][ T9598] syzkaller0: entered promiscuous mode [ 614.454673][ T9598] syzkaller0: entered allmulticast mode [ 614.558554][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1240'. [ 616.185031][ T9632] tipc: Enabled bearer , priority 0 [ 616.222226][ T9632] syzkaller0: entered promiscuous mode [ 616.228009][ T9632] syzkaller0: entered allmulticast mode [ 616.289699][ T9638] syzkaller0: entered promiscuous mode [ 616.295683][ T9638] syzkaller0: entered allmulticast mode [ 616.313380][ T9632] tipc: Resetting bearer [ 616.438875][ T9631] tipc: Resetting bearer [ 616.494869][ T9631] tipc: Disabling bearer [ 616.613059][ T9641] tipc: Enabled bearer , priority 0 [ 616.657349][ T9641] tipc: Resetting bearer [ 616.715725][ T9640] tipc: Disabling bearer [ 617.639228][ T9664] tipc: Enabled bearer , priority 0 [ 617.676241][ T9664] tipc: Resetting bearer [ 617.700217][ T9663] tipc: Disabling bearer [ 618.018095][ T9676] tipc: Enabled bearer , priority 0 [ 618.034484][ T9678] syzkaller0: entered promiscuous mode [ 618.040554][ T9678] syzkaller0: entered allmulticast mode [ 618.077061][ T9680] tipc: Disabling bearer [ 618.384541][ T9685] ip6gre1: entered promiscuous mode [ 618.390345][ T9685] ip6gre1: entered allmulticast mode [ 618.400889][ T3627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.409470][ T3627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.429262][ T8941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.483680][ T9688] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.720355][ T9690] tipc: Enabled bearer , priority 0 [ 618.775920][ T9690] tipc: Resetting bearer [ 618.817661][ T9689] tipc: Disabling bearer [ 619.139218][ T8941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.169958][ T8941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.454950][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 619.833079][ T9721] syzkaller0: entered promiscuous mode [ 619.838996][ T9721] syzkaller0: entered allmulticast mode [ 619.888551][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.742554][ T9745] tipc: Enabled bearer , priority 0 [ 620.800682][ T9745] tipc: Resetting bearer [ 620.830226][ T9741] tipc: Disabling bearer [ 621.680854][ T9765] syzkaller0: entered promiscuous mode [ 621.686659][ T9765] syzkaller0: entered allmulticast mode [ 622.178915][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.780295][ T9792] tipc: Enabled bearer , priority 0 [ 622.834818][ T9792] tipc: Resetting bearer [ 622.872046][ T9790] tipc: Disabling bearer [ 623.751802][ T9811] syzkaller0: entered promiscuous mode [ 623.757552][ T9811] syzkaller0: entered allmulticast mode [ 623.884335][ T9814] syzkaller0: entered promiscuous mode [ 623.890148][ T9814] syzkaller0: entered allmulticast mode [ 624.426257][ T9827] tipc: Enabled bearer , priority 0 [ 624.518765][ T9827] tipc: Resetting bearer [ 624.577659][ T9826] tipc: Disabling bearer [ 624.946913][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1320'. [ 625.074486][ T9844] netlink: 'syz.0.1321': attribute type 8 has an invalid length. [ 625.539321][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 625.952370][ T9861] syzkaller0: entered promiscuous mode [ 625.958525][ T9861] syzkaller0: entered allmulticast mode [ 626.408221][ T9874] tipc: Enabled bearer , priority 0 [ 626.480497][ T9874] tipc: Resetting bearer [ 626.519428][ T9873] tipc: Disabling bearer [ 626.992158][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1335'. [ 627.114162][ T9889] syz_tun: entered allmulticast mode [ 627.355707][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 628.179456][ T9914] tipc: Enabling of bearer rejected, failed to enable media [ 628.222846][ T8975] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 628.401556][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 628.453378][ T8975] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 628.469445][ T8975] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.479762][ T8975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.636088][ T8975] usb 8-1: config 0 descriptor?? [ 628.726919][ T8975] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 629.568858][ T9947] netlink: 'syz.0.1353': attribute type 8 has an invalid length. [ 630.099582][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 630.289800][ T9963] syzkaller0: entered promiscuous mode [ 630.295604][ T9963] syzkaller0: entered allmulticast mode [ 630.336299][ T9956] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 630.790433][ T9975] tipc: Enabling of bearer rejected, failed to enable media [ 631.032154][ T8941] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 631.254208][ T8941] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.266433][ T8941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.277662][ T8941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 631.287746][ T8941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.301325][ T8941] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.310693][ T8941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.475501][ T8973] usb 8-1: USB disconnect, device number 2 [ 631.513021][ T8941] usb 1-1: config 0 descriptor?? [ 631.959041][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 631.970100][ T8941] usbhid 1-1:0.0: can't add hid device: -71 [ 631.976661][ T8941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 632.014836][ T8941] usb 1-1: USB disconnect, device number 3 [ 632.993908][T10009] syzkaller0: entered promiscuous mode [ 632.999917][T10009] syzkaller0: entered allmulticast mode [ 633.012533][T10011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1375'. [ 633.581769][T10022] tipc: Enabling of bearer rejected, failed to enable media [ 634.704765][T10044] kvm: kvm [10043]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0xe5010000fd9b [ 634.865846][T10052] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1390'. [ 635.333042][T10058] syzkaller0: entered promiscuous mode [ 635.339297][T10058] syzkaller0: entered allmulticast mode [ 635.880636][T10072] tipc: Enabling of bearer rejected, failed to enable media [ 635.889180][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 636.339567][T10086] geneve2: entered promiscuous mode [ 636.363211][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.395823][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.449485][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.548451][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.467106][T10103] kvm: kvm [10100]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0xe5010000fd9b [ 637.559247][T10111] syzkaller0: entered promiscuous mode [ 637.565098][T10111] syzkaller0: entered allmulticast mode [ 638.149399][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1413'. [ 638.464856][T10127] tipc: Enabling of bearer rejected, failed to enable media [ 638.475103][T10129] netlink: 'syz.5.1417': attribute type 32 has an invalid length. [ 639.862791][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 640.577878][T10180] trusted_key: syz.0.1435 sent an empty control message without MSG_MORE. [ 640.656145][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 642.452343][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 642.571952][T10219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1445'. [ 643.622058][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 643.687136][T10243] tipc: Enabled bearer , priority 0 [ 643.804088][T10239] tipc: Resetting bearer [ 643.856800][T10236] tipc: Disabling bearer [ 644.037238][T10250] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1458'. [ 644.283822][T10255] Bluetooth: MGMT ver 1.23 [ 645.191315][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1470'. [ 645.379315][T10280] tipc: Enabled bearer , priority 0 [ 645.425477][T10280] tipc: Resetting bearer [ 645.451762][T10279] tipc: Disabling bearer [ 645.461570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.493784][T10284] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1474'. [ 646.043857][T10299] tipc: Enabling of bearer rejected, failed to enable media [ 647.282381][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 647.302791][T10324] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1487'. [ 647.448706][T10328] syzkaller0: entered promiscuous mode [ 647.454487][T10328] syzkaller0: entered allmulticast mode [ 648.087086][T10341] tipc: Enabling of bearer rejected, failed to enable media [ 649.089151][T10362] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1500'. [ 649.146196][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1499'. [ 649.202048][T10369] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1502'. [ 650.400437][T10401] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1514'. [ 651.631450][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1522'. [ 654.140728][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1537'. [ 654.441673][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a793e00: rx timeout, send abort [ 654.950626][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a793e00: abort rx timeout. Force session deactivation [ 655.048745][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1541'. [ 655.058484][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1541'. [ 655.067690][T10479] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1541'. [ 655.823354][T10497] syzkaller0: entered promiscuous mode [ 655.829349][T10497] syzkaller0: entered allmulticast mode [ 656.478018][ T8941] IPVS: starting estimator thread 0... [ 656.578978][T10509] IPVS: using max 192 ests per chain, 9600 per kthread [ 658.190009][T10535] syzkaller0: entered promiscuous mode [ 658.195966][T10535] syzkaller0: entered allmulticast mode [ 659.950377][T10567] syzkaller0: entered promiscuous mode [ 659.956403][T10567] syzkaller0: entered allmulticast mode [ 660.238828][T10573] tipc: Enabling of bearer rejected, failed to enable media [ 660.863774][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1581'. [ 661.346913][T10600] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 661.971011][T10608] syzkaller0: entered promiscuous mode [ 661.976712][T10608] syzkaller0: entered allmulticast mode [ 662.108809][T10614] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1593'. [ 662.500953][T10618] syzkaller0: entered promiscuous mode [ 662.506745][T10618] syzkaller0: entered allmulticast mode [ 662.571916][T10622] tipc: Enabling of bearer rejected, failed to enable media [ 662.870413][T10629] netlink: 'syz.7.1598': attribute type 1 has an invalid length. [ 663.002221][T10629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.089844][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1598'. [ 663.099769][T10629] bond1: entered promiscuous mode [ 663.183865][T10629] dummy0: entered promiscuous mode [ 663.197007][T10629] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 663.338907][ T8973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 663.525673][ T8973] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.530501][T10641] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 663.537714][ T8973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.556805][ T8973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 663.567742][ T8973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.581096][ T8973] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.594147][ T8973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.632867][ T8973] usb 6-1: config 0 descriptor?? [ 664.056722][ T8973] usbhid 6-1:0.0: can't add hid device: -71 [ 664.064839][ T8973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 664.107963][ T8973] usb 6-1: USB disconnect, device number 2 [ 664.211019][T10652] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1606'. [ 664.588602][T10660] netlink: 'syz.0.1610': attribute type 32 has an invalid length. [ 664.842818][T10663] netlink: 'syz.8.1612': attribute type 1 has an invalid length. [ 664.929976][T10663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.004840][T10663] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1612'. [ 665.014293][T10663] bond1: entered promiscuous mode [ 665.126504][T10663] dummy0: entered promiscuous mode [ 665.135933][T10663] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 665.203351][T10669] tipc: Enabled bearer , priority 0 [ 665.220926][T10669] tipc: Resetting bearer [ 665.252989][T10668] tipc: Disabling bearer [ 665.349817][T10678] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 665.912596][T10688] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1620'. [ 666.406481][T10700] netlink: 'syz.7.1626': attribute type 1 has an invalid length. [ 666.489813][T10700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.517953][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1626'. [ 666.555527][T10700] bond2: entered promiscuous mode [ 666.600443][T10700] bond1: (slave dummy0): Releasing backup interface [ 666.645511][T10700] dummy0: left promiscuous mode [ 666.665827][T10700] dummy0: entered promiscuous mode [ 666.675371][T10700] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 667.469952][T10723] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1635'. [ 667.754630][T10727] tipc: Enabled bearer , priority 0 [ 667.764127][T10727] syzkaller0: entered promiscuous mode [ 667.770056][T10727] syzkaller0: entered allmulticast mode [ 667.805878][T10726] tipc: Resetting bearer [ 667.852755][T10726] tipc: Disabling bearer [ 668.351477][T10738] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 668.411851][T10738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.527649][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1642'. [ 668.537539][T10738] bond1: entered promiscuous mode [ 668.594102][T10738] dummy0: entered promiscuous mode [ 668.606803][T10738] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 669.026825][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1647'. [ 669.037002][T10756] nbd: must specify at least one socket [ 669.080337][T10759] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1647'. [ 669.093180][T10759] nbd: must specify at least one socket [ 669.196437][T10762] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1649'. [ 669.673323][T10771] tipc: Enabled bearer , priority 0 [ 669.708769][T10771] syzkaller0: entered promiscuous mode [ 669.714450][T10771] syzkaller0: entered allmulticast mode [ 669.792849][T10769] tipc: Resetting bearer [ 669.836234][T10769] tipc: Disabling bearer [ 670.331595][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'. [ 670.377352][T10785] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 670.460691][T10785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 670.558836][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 670.568141][T10785] bond2: entered promiscuous mode [ 670.633787][T10785] bond1: (slave dummy0): Releasing backup interface [ 670.705348][T10785] dummy0: left promiscuous mode [ 670.724713][T10785] dummy0: entered promiscuous mode [ 670.733712][T10785] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 670.948731][T10802] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1663'. [ 671.515274][T10813] tipc: Enabled bearer , priority 0 [ 671.552757][T10813] syzkaller0: entered promiscuous mode [ 671.558882][T10813] syzkaller0: entered allmulticast mode [ 671.612096][T10812] tipc: Resetting bearer [ 671.668443][T10812] tipc: Disabling bearer [ 672.138913][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 672.374813][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1677'. [ 672.460927][T10831] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1675'. [ 674.051595][T10867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1690'. [ 674.147710][T10864] syzkaller0: entered promiscuous mode [ 674.153601][T10864] syzkaller0: entered allmulticast mode [ 674.751931][T10883] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1696'. [ 675.111543][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1700'. [ 675.124700][T10891] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1700'. [ 675.467781][T10900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1704'. [ 675.864731][T10904] syzkaller0: entered promiscuous mode [ 675.870568][T10904] syzkaller0: entered allmulticast mode [ 676.379436][T10917] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1710'. [ 676.625812][T10920] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1712'. [ 676.828869][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.558676][T10940] syzkaller0: entered promiscuous mode [ 677.564370][T10940] syzkaller0: entered allmulticast mode [ 677.584145][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1721'. [ 677.606970][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1721'. [ 677.792602][T10944] bond1: (slave dummy0): Releasing backup interface [ 677.806916][T10944] dummy0: left promiscuous mode [ 678.032230][T10949] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1725'. [ 679.019725][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1738'. [ 679.070994][T10979] bond2: (slave dummy0): Releasing backup interface [ 679.097385][T10979] dummy0: left promiscuous mode [ 679.160236][T10982] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1739'. [ 679.174278][T10978] syzkaller0: entered promiscuous mode [ 679.180192][T10978] syzkaller0: entered allmulticast mode [ 679.568523][T10989] ip6gre1: entered promiscuous mode [ 679.573943][T10989] ip6gre1: entered allmulticast mode [ 679.584264][ T2996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.592954][ T2996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.609059][ T8973] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.617454][T10990] netlink: 'syz.1.1743': attribute type 32 has an invalid length. [ 679.629156][T10991] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.850451][ T8973] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.339012][ T8973] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.448895][ T8941] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 680.487789][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'. [ 680.663032][ T8941] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 680.663514][T11013] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1753'. [ 680.676712][ T8941] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.696232][ T8941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.736282][ T8941] usb 9-1: config 0 descriptor?? [ 680.755145][ T8941] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 681.180311][T11021] syzkaller0: entered promiscuous mode [ 681.186001][T11021] syzkaller0: entered allmulticast mode [ 681.381356][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.786512][T11039] netlink: 'syz.0.1763': attribute type 32 has an invalid length. [ 681.833926][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1764'. [ 683.031687][T11064] syzkaller0: entered promiscuous mode [ 683.037381][T11064] syzkaller0: entered allmulticast mode [ 683.325038][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1775'. [ 683.378942][ T8941] usb 9-1: USB disconnect, device number 4 [ 683.459366][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1776'. [ 683.618988][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.729567][T11074] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1778'. [ 683.775120][T11075] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1779'. [ 683.786033][T11074] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1778'. [ 684.360709][T11087] syzkaller0: entered promiscuous mode [ 684.366484][T11087] syzkaller0: entered allmulticast mode [ 684.861934][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1790'. [ 684.917517][T11100] syzkaller0: entered promiscuous mode [ 684.923405][T11100] syzkaller0: entered allmulticast mode [ 685.251871][T11111] netlink: 'syz.1.1794': attribute type 3 has an invalid length. [ 685.811236][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1797'. [ 686.336484][T11125] tipc: Enabling of bearer rejected, failed to enable media [ 686.371713][T11125] syzkaller0: entered promiscuous mode [ 686.377478][T11125] syzkaller0: entered allmulticast mode [ 686.723465][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1805'. [ 686.725105][T11133] syzkaller0: entered promiscuous mode [ 686.744598][T11133] syzkaller0: entered allmulticast mode [ 686.784953][T11135] bond2: (slave dummy0): Releasing backup interface [ 686.823562][T11135] dummy0: left promiscuous mode [ 687.254228][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1809'. [ 687.929892][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1813'. [ 688.594028][T11171] tipc: Enabling of bearer rejected, failed to enable media [ 688.616590][T11171] syzkaller0: entered promiscuous mode [ 688.622661][T11171] syzkaller0: entered allmulticast mode [ 688.699532][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 688.733331][T11174] syzkaller0: entered promiscuous mode [ 688.740473][T11174] syzkaller0: entered allmulticast mode [ 688.740759][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 689.161248][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 689.453280][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1826'. [ 689.622863][T11198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1828'. [ 690.020844][T11206] tipc: Enabling of bearer rejected, failed to enable media [ 690.056647][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1833'. [ 690.109653][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1833'. [ 690.399444][T11209] syzkaller0: entered promiscuous mode [ 690.612145][T11215] syzkaller0: entered promiscuous mode [ 690.621714][T11215] syzkaller0: entered allmulticast mode [ 690.793525][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1837'. [ 691.858134][T11247] tipc: Enabling of bearer rejected, failed to enable media [ 691.879962][T11247] syzkaller0: entered promiscuous mode [ 691.885662][T11247] syzkaller0: entered allmulticast mode [ 692.178852][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 692.230001][T11253] syzkaller0: entered promiscuous mode [ 692.235751][T11253] syzkaller0: entered allmulticast mode [ 692.284236][T11256] __nla_validate_parse: 4 callbacks suppressed [ 692.284314][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 692.540230][T11261] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1854'. [ 693.020525][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 693.235367][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1860'. [ 693.303056][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1860'. [ 693.525354][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1863'. [ 693.836725][T11288] syzkaller0: entered promiscuous mode [ 693.849261][T11288] syzkaller0: entered allmulticast mode [ 694.554028][T11304] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 694.590522][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 695.046384][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 695.067597][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'. [ 695.865071][T11326] syzkaller0: entered promiscuous mode [ 695.871040][T11326] syzkaller0: entered allmulticast mode [ 696.154031][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 696.329163][T11334] syzkaller0: entered promiscuous mode [ 696.334910][T11334] syzkaller0: entered allmulticast mode [ 697.428894][T11352] __nla_validate_parse: 5 callbacks suppressed [ 697.428969][T11352] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1895'. [ 697.513077][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1897'. [ 698.085882][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.094419][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.367487][T11360] geneve2: left promiscuous mode [ 699.456754][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1904'. [ 699.501168][T11375] syzkaller0: entered promiscuous mode [ 699.506935][T11375] syzkaller0: entered allmulticast mode [ 699.517791][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.541419][ T3647] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.551803][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1904'. [ 699.567816][ T3647] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.588160][ T3647] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.092264][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 700.128516][T11411] syzkaller0: entered promiscuous mode [ 700.134297][T11411] syzkaller0: entered allmulticast mode [ 700.157449][T11410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1908'. [ 700.178098][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 700.566037][T11417] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1912'. [ 700.890938][T11427] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1916'. [ 700.900702][T11427] ksmbd: Unknown IPC event: 1, ignore. [ 701.463545][T11436] syzkaller0: entered promiscuous mode [ 701.469675][T11436] syzkaller0: entered allmulticast mode [ 701.596747][T11438] syzkaller0: entered promiscuous mode [ 701.604236][T11438] syzkaller0: entered allmulticast mode [ 701.879987][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 701.971445][T11447] syz_tun: entered allmulticast mode [ 702.005241][T11446] syz_tun: left allmulticast mode [ 702.431082][ T8926] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 702.642092][ T8926] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 702.656753][ T8926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 702.668389][ T8926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 702.678483][ T8926] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.691816][ T8926] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.702093][ T8926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.840099][ T8926] usb 8-1: config 0 descriptor?? [ 703.489814][ T8926] usbhid 8-1:0.0: can't add hid device: -71 [ 703.496666][ T8926] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 703.521148][ T8926] usb 8-1: USB disconnect, device number 3 [ 703.654229][T11480] __nla_validate_parse: 2 callbacks suppressed [ 703.654307][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 703.667612][T11481] syzkaller0: entered promiscuous mode [ 703.676294][T11481] syzkaller0: entered allmulticast mode [ 703.697453][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 704.272802][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1941'. [ 704.905356][T11504] syzkaller0: entered promiscuous mode [ 704.911251][T11504] syzkaller0: entered allmulticast mode [ 705.537697][T11514] syzkaller0: entered promiscuous mode [ 705.544176][T11514] syzkaller0: entered allmulticast mode [ 705.636646][T11511] syzkaller0: entered promiscuous mode [ 705.642438][T11511] syzkaller0: entered allmulticast mode [ 705.753471][T11518] syz_tun: entered allmulticast mode [ 705.959393][T11516] syz_tun: left allmulticast mode [ 706.188895][ T8926] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 706.378532][ T8926] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.394732][ T8926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.406328][ T8926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 706.416366][ T8926] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.429683][ T8926] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.439083][ T8926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.453902][ T8926] usb 9-1: config 0 descriptor?? [ 706.902326][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.910410][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.920279][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.927923][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.936807][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.944580][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.952302][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.959995][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.967745][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 706.975529][ T8926] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 707.005411][ T8926] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 707.092213][ T8926] usb 9-1: USB disconnect, device number 5 [ 707.636716][T11544] syzkaller0: entered promiscuous mode [ 707.642985][T11544] syzkaller0: entered allmulticast mode [ 708.178810][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.262369][T11553] syzkaller0: entered promiscuous mode [ 708.268086][T11553] syzkaller0: entered allmulticast mode [ 708.366489][T11560] syzkaller0: entered promiscuous mode [ 708.372925][T11560] syzkaller0: entered allmulticast mode [ 709.553015][T11585] syzkaller0: entered promiscuous mode [ 709.559361][T11585] syzkaller0: entered allmulticast mode [ 709.668654][ T8973] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 709.837676][ T8973] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 709.849842][ T8973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 709.861110][ T8973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 709.871977][ T8973] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 709.885568][ T8973] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.894981][ T8973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.919023][ T8973] usb 9-1: config 0 descriptor?? [ 710.084085][T11593] syzkaller0: entered promiscuous mode [ 710.090650][T11593] syzkaller0: entered allmulticast mode [ 710.372749][ T8973] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 710.381601][T11596] syzkaller0: entered promiscuous mode [ 710.391198][T11596] syzkaller0: entered allmulticast mode [ 710.553838][ T8941] usb 9-1: USB disconnect, device number 6 [ 711.258850][T11622] syzkaller0: entered promiscuous mode [ 711.264536][T11622] syzkaller0: entered allmulticast mode [ 711.699882][T11630] syzkaller0: entered promiscuous mode [ 711.705661][T11630] syzkaller0: entered allmulticast mode [ 711.797829][T11635] syzkaller0: entered promiscuous mode [ 711.804048][T11635] syzkaller0: entered allmulticast mode [ 712.303825][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2003'. [ 713.514683][T11670] syzkaller0: entered promiscuous mode [ 713.520682][T11670] syzkaller0: entered allmulticast mode [ 713.783234][T11686] syzkaller0: entered promiscuous mode [ 713.791062][T11686] syzkaller0: entered allmulticast mode [ 713.812849][T11672] syzkaller0: entered promiscuous mode [ 713.818938][T11672] syzkaller0: entered allmulticast mode [ 713.863109][T11680] syzkaller0: entered promiscuous mode [ 713.869135][T11680] syzkaller0: entered allmulticast mode [ 714.193139][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2017'. [ 715.323238][T11717] syzkaller0: entered promiscuous mode [ 715.329118][T11717] syzkaller0: entered allmulticast mode [ 715.576835][T11730] tipc: Enabling of bearer rejected, failed to enable media [ 715.615416][T11722] syzkaller0: entered promiscuous mode [ 715.621502][T11722] syzkaller0: entered allmulticast mode [ 715.696333][T11735] syzkaller0: entered promiscuous mode [ 715.706710][T11735] syzkaller0: entered allmulticast mode [ 716.139245][T11730] syzkaller0: entered promiscuous mode [ 716.144922][T11730] syzkaller0: entered allmulticast mode [ 717.347396][T11769] syzkaller0: entered promiscuous mode [ 717.353733][T11769] syzkaller0: entered allmulticast mode [ 717.900258][T11781] tipc: Enabling of bearer rejected, failed to enable media [ 717.940133][T11781] syzkaller0: entered promiscuous mode [ 717.945935][T11781] syzkaller0: entered allmulticast mode [ 717.963867][T11783] tipc: Enabling of bearer rejected, failed to enable media [ 718.082443][T11787] syzkaller0: entered promiscuous mode [ 718.088437][T11787] syzkaller0: entered allmulticast mode [ 718.479148][ T8973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 718.656060][ T8973] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.668487][ T8973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.680587][ T8973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.690989][ T8973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.704926][ T8973] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.714467][ T8973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.727960][ T8973] usb 2-1: config 0 descriptor?? [ 719.194860][ T8973] usbhid 2-1:0.0: can't add hid device: -71 [ 719.201671][ T8973] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 719.231263][ T8973] usb 2-1: USB disconnect, device number 4 [ 719.360681][T11811] syzkaller0: entered promiscuous mode [ 719.366357][T11811] syzkaller0: entered allmulticast mode [ 719.979835][T11826] tipc: Enabling of bearer rejected, failed to enable media [ 720.033479][T11826] syzkaller0: entered promiscuous mode [ 720.040540][T11826] syzkaller0: entered allmulticast mode [ 720.069284][T11828] tipc: Enabling of bearer rejected, failed to enable media [ 720.117625][T11828] syzkaller0: entered promiscuous mode [ 720.123556][T11828] syzkaller0: entered allmulticast mode [ 721.055990][T11852] syzkaller0: entered promiscuous mode [ 721.062149][T11852] syzkaller0: entered allmulticast mode [ 721.328773][ T8973] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 721.507063][T11862] netlink: 'syz.7.2076': attribute type 32 has an invalid length. [ 721.528064][ T8973] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.540851][ T8973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.553041][ T8973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 721.563555][ T8973] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 721.578538][ T8973] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.589403][ T8973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.654580][ T8973] usb 9-1: config 0 descriptor?? [ 721.711226][T11864] geneve2: left promiscuous mode [ 721.722472][T11864] ip6gre1: left promiscuous mode [ 721.771534][ T3556] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.789191][ T3556] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.817135][ T3556] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.897067][ T3556] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.041978][T11871] tipc: Enabling of bearer rejected, failed to enable media [ 722.102175][ T8973] usbhid 9-1:0.0: can't add hid device: -71 [ 722.109093][ T8973] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 722.130012][T11872] syzkaller0: entered promiscuous mode [ 722.135678][T11872] syzkaller0: entered allmulticast mode [ 722.138900][ T8973] usb 9-1: USB disconnect, device number 7 [ 723.130677][T11888] syzkaller0: entered promiscuous mode [ 723.136358][T11888] syzkaller0: entered allmulticast mode [ 723.690013][T11906] tipc: Enabling of bearer rejected, failed to enable media [ 723.743304][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2093'. [ 723.919822][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.929519][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.129738][T11905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.154645][T11905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.931985][T11905] bond1: left promiscuous mode [ 724.959646][T11906] syzkaller0: entered promiscuous mode [ 724.965319][T11906] syzkaller0: entered allmulticast mode [ 725.035960][ T8269] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.084272][ T8269] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.116370][ T8269] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.148466][ T8269] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.220405][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 725.396197][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.413237][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.425252][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 725.435429][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 725.448775][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.458007][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.511090][ T24] usb 8-1: config 0 descriptor?? [ 725.993233][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 726.000259][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 726.020907][ T24] usb 8-1: USB disconnect, device number 4 [ 726.267189][T11959] syzkaller0: entered promiscuous mode [ 726.273046][T11959] syzkaller0: entered allmulticast mode [ 726.472765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 727.174099][T11978] tipc: Enabling of bearer rejected, failed to enable media [ 727.187804][T11978] syzkaller0: entered promiscuous mode [ 727.193586][T11978] syzkaller0: entered allmulticast mode [ 727.314847][T11980] team1: left promiscuous mode [ 727.329848][T11980] bond1: left promiscuous mode [ 727.346876][T11980] bond2: left promiscuous mode [ 727.595824][T11988] netlink: 'syz.8.2114': attribute type 9 has an invalid length. [ 727.604553][T11988] netlink: 'syz.8.2114': attribute type 7 has an invalid length. [ 727.612643][T11988] netlink: 'syz.8.2114': attribute type 8 has an invalid length. [ 728.064930][T12003] netlink: 'syz.7.2119': attribute type 13 has an invalid length. [ 728.199114][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 728.255838][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 728.386264][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 728.399449][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 728.410887][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 728.421030][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.434347][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.443775][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.458094][ T24] usb 9-1: config 0 descriptor?? [ 728.814144][T12016] tipc: Enabling of bearer rejected, failed to enable media [ 728.857614][T12016] syzkaller0: entered promiscuous mode [ 728.863770][T12016] syzkaller0: entered allmulticast mode [ 728.959805][ T24] hid_parser_main: 20 callbacks suppressed [ 728.959894][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 728.973824][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 728.981736][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 728.989473][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 728.997291][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 729.005102][ T24] plantronics 0003:047F:FFFF.0005: collection stack underflow [ 729.013083][ T24] plantronics 0003:047F:FFFF.0005: item 0 0 0 12 parsing failed [ 729.030430][ T24] plantronics 0003:047F:FFFF.0005: parse failed [ 729.037445][ T24] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 730.711357][T12060] netlink: 'syz.7.2134': attribute type 13 has an invalid length. [ 730.902782][T12066] tipc: Enabling of bearer rejected, failed to enable media [ 731.015431][T12068] team0: Device gtp0 is up. Set it down before adding it as a team port [ 731.349949][ T8943] usb 9-1: USB disconnect, device number 8 [ 731.818501][ T5866] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 732.034929][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 732.060074][ T5866] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 732.068618][ T5866] usb 8-1: config 0 has no interface number 0 [ 732.094745][ T5866] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 732.104266][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.112545][ T5866] usb 8-1: Product: syz [ 732.116896][ T5866] usb 8-1: Manufacturer: syz [ 732.121863][ T5866] usb 8-1: SerialNumber: syz [ 732.195794][ T5866] usb 8-1: config 0 descriptor?? [ 732.236040][ T5866] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 732.244226][ T5866] pctv452e: pctv452e_power_ctrl: 1 [ 732.244226][ T5866] [ 732.251807][ T5866] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 732.251807][ T5866] [ 732.262372][ T5866] dvb-usb: bulk message failed: -22 (5/0) [ 732.276532][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 732.290204][ T5866] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 732.298944][ T5866] usb 8-1: media controller created [ 732.304329][ T5866] dvb-usb: bulk message failed: -22 (8/0) [ 732.310177][ T5866] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 732.318436][ T5866] dvb-usb: MAC address reading failed. [ 732.371258][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. ** 1 printk messages dropped ** [ 732.433139][T12075] ===================================================== [ 732.433423][T12075] BUG: KMSAN: uninit-value in hex_string+0x681/0x740 [ 732.433522][T12075] hex_string+0x681/0x740 [ 732.433610][T12075] pointer+0x2c7/0x1bd0 [ 732.433695][T12075] vsnprintf+0xf8a/0x1bd0 [ 732.433793][T12075] vscnprintf+0x6d/0x120 [ 732.433877][T12075] printk_sprint+0x53/0x5c0 [ 732.433977][T12075] vprintk_store+0xbb9/0x1530 [ 732.434041][T12075] vprintk_emit+0x21a/0xb60 [ 732.434105][T12075] vprintk_default+0x3f/0x50 [ 732.434173][T12075] vprintk+0x36/0x50 [ 732.434253][T12075] _printk+0x17e/0x1b0 [ 732.434358][T12075] pctv452e_i2c_msg+0x82a/0x8f0 [ 732.434503][T12075] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 732.434597][T12075] __i2c_transfer+0xecd/0x3110 [ 732.434698][T12075] i2c_transfer+0x300/0x4b0 [ 732.434770][T12075] i2c_transfer_buffer_flags+0x138/0x200 [ 732.434851][T12075] i2cdev_read+0x1b2/0x3c0 [ 732.434938][T12075] vfs_read+0x27c/0xf90 [ 732.435071][T12075] __x64_sys_pread64+0x2ab/0x3b0 [ 732.435140][T12075] x64_sys_call+0x3370/0x3e30 [ 732.435240][T12075] do_syscall_64+0xd9/0xfa0 [ 732.435366][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.435446][T12075] [ 732.435468][T12075] Uninit was created at: [ 732.435614][T12075] __kmalloc_cache_noprof+0x8f5/0x16b0 [ 732.435706][T12075] pctv452e_i2c_msg+0x98/0x8f0 [ 732.435800][T12075] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 732.435894][T12075] __i2c_transfer+0xecd/0x3110 [ 732.435968][T12075] i2c_transfer+0x300/0x4b0 [ 732.436039][T12075] i2c_transfer_buffer_flags+0x138/0x200 [ 732.436122][T12075] i2cdev_read+0x1b2/0x3c0 [ 732.436196][T12075] vfs_read+0x27c/0xf90 [ 732.436300][T12075] __x64_sys_pread64+0x2ab/0x3b0 [ 732.436373][T12075] x64_sys_call+0x3370/0x3e30 [ 732.436473][T12075] do_syscall_64+0xd9/0xfa0 [ 732.436593][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.436685][T12075] [ 732.436739][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.7.2138 Not tainted syzkaller #0 PREEMPT(none) [ 732.436835][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.436900][T12075] ===================================================== [ 732.436929][T12075] Disabling lock debugging due to kernel taint [ 732.436968][T12075] Kernel panic - not syncing: kmsan.panic set ... [ 732.657496][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.7.2138 Tainted: G B syzkaller #0 PREEMPT(none) [ 732.668596][T12075] Tainted: [B]=BAD_PAGE [ 732.672829][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.683012][T12075] Call Trace: [ 732.686403][T12075] [ 732.689432][T12075] __dump_stack+0x26/0x30 [ 732.693924][T12075] dump_stack_lvl+0x53/0x270 [ 732.698687][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.704670][T12075] dump_stack+0x1e/0x25 [ 732.708972][T12075] vpanic+0x435/0xd30 [ 732.713148][T12075] panic+0x15d/0x160 [ 732.717289][T12075] kmsan_report+0x31c/0x320 [ 732.721955][T12075] ? __msan_warning+0x1b/0x30 [ 732.726765][T12075] ? hex_string+0x681/0x740 [ 732.731425][T12075] ? pointer+0x2c7/0x1bd0 [ 732.735887][T12075] ? vsnprintf+0xf8a/0x1bd0 [ 732.740519][T12075] ? vscnprintf+0x6d/0x120 [ 732.745086][T12075] ? printk_sprint+0x53/0x5c0 [ 732.749896][T12075] ? vprintk_store+0xbb9/0x1530 [ 732.754872][T12075] ? vprintk_emit+0x21a/0xb60 [ 732.759680][T12075] ? vprintk_default+0x3f/0x50 [ 732.764561][T12075] ? vprintk+0x36/0x50 [ 732.768798][T12075] ? _printk+0x17e/0x1b0 [ 732.773226][T12075] ? pctv452e_i2c_msg+0x82a/0x8f0 [ 732.778436][T12075] ? pctv452e_i2c_xfer+0x2e6/0x4c0 [ 732.783704][T12075] ? __i2c_transfer+0xecd/0x3110 [ 732.788838][T12075] ? i2c_transfer+0x300/0x4b0 [ 732.793762][T12075] ? i2c_transfer_buffer_flags+0x138/0x200 [ 732.799712][T12075] ? i2cdev_read+0x1b2/0x3c0 [ 732.804420][T12075] ? vfs_read+0x27c/0xf90 [ 732.808921][T12075] ? __x64_sys_pread64+0x2ab/0x3b0 [ 732.814159][T12075] ? x64_sys_call+0x3370/0x3e30 [ 732.819171][T12075] ? do_syscall_64+0xd9/0xfa0 [ 732.824017][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.830243][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.835507][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.841468][T12075] ? format_decode+0x1131/0x1160 [ 732.846538][T12075] ? filter_irq_stacks+0x49/0x190 [ 732.851875][T12075] ? stack_depot_save_flags+0x35/0x7b0 [ 732.857532][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.863504][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.868785][T12075] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 732.875336][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.880595][T12075] __msan_warning+0x1b/0x30 [ 732.885236][T12075] hex_string+0x681/0x740 [ 732.889748][T12075] pointer+0x2c7/0x1bd0 [ 732.894067][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.899337][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.905315][T12075] vsnprintf+0xf8a/0x1bd0 [ 732.909835][T12075] vscnprintf+0x6d/0x120 [ 732.914221][T12075] printk_sprint+0x53/0x5c0 [ 732.918852][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.924843][T12075] vprintk_store+0xbb9/0x1530 [ 732.929669][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.934980][T12075] vprintk_emit+0x21a/0xb60 [ 732.939643][T12075] vprintk_default+0x3f/0x50 [ 732.944365][T12075] vprintk+0x36/0x50 [ 732.948414][T12075] _printk+0x17e/0x1b0 [ 732.952735][T12075] pctv452e_i2c_msg+0x82a/0x8f0 [ 732.957794][T12075] ? kmsan_get_metadata+0xfb/0x160 [ 732.963088][T12075] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 732.968304][T12075] ? __pfx_pctv452e_i2c_xfer+0x10/0x10 [ 732.973996][T12075] __i2c_transfer+0xecd/0x3110 [ 732.978924][T12075] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 732.985479][T12075] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 732.991372][T12075] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 732.997652][T12075] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 733.003538][T12075] i2c_transfer+0x300/0x4b0 [ 733.008219][T12075] i2c_transfer_buffer_flags+0x138/0x200 [ 733.014038][T12075] i2cdev_read+0x1b2/0x3c0 [ 733.018614][T12075] ? __pfx_i2cdev_read+0x10/0x10 [ 733.023710][T12075] vfs_read+0x27c/0xf90 [ 733.028072][T12075] ? __fget_files+0x3b9/0x4a0 [ 733.032988][T12075] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 733.038972][T12075] __x64_sys_pread64+0x2ab/0x3b0 [ 733.044058][T12075] x64_sys_call+0x3370/0x3e30 [ 733.048902][T12075] do_syscall_64+0xd9/0xfa0 [ 733.053593][T12075] ? irqentry_exit+0x16/0x60 [ 733.058437][T12075] ? clear_bhb_loop+0x40/0x90 [ 733.063273][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.069327][T12075] RIP: 0033:0x7f89cc38f749 [ 733.073858][T12075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.093616][T12075] RSP: 002b:00007f89cd1a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 733.102211][T12075] RAX: ffffffffffffffda RBX: 00007f89cc5e6180 RCX: 00007f89cc38f749 [ 733.110313][T12075] RDX: 00000000000000f5 RSI: 0000000000000000 RDI: 0000000000000006 [ 733.118376][T12075] RBP: 00007f89cc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 733.126444][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.134534][T12075] R13: 00007f89cc5e6218 R14: 00007f89cc5e6180 R15: 00007fff323e6a58 [ 733.142704][T12075] [ 733.146214][T12075] Kernel Offset: disabled [ 733.150599][T12075] Rebooting in 86400 seconds..