last executing test programs: 24m9.030273664s ago: executing program 0 (id=501): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3700, 0x7ffe, 0x1af}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r2, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 24m8.399475471s ago: executing program 0 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 24m7.794646171s ago: executing program 0 (id=504): unshare(0x26020480) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 24m6.37131487s ago: executing program 0 (id=508): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 24m5.970936797s ago: executing program 1 (id=511): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x285, 0x1000004f}, 0x2c) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x7fffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 24m5.920659696s ago: executing program 0 (id=512): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x3700, 0x7ffe, 0x1af}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r2, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 24m5.158150078s ago: executing program 0 (id=515): timer_create(0x3, &(0x7f000049efa0)={0x0, 0x2f}, &(0x7f0000044000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x4, 0x0) syz_clone3(&(0x7f0000000bc0)={0x80001000, &(0x7f0000000200), 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 24m0.053770009s ago: executing program 1 (id=519): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0xb}, &(0x7f00000000c0)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x40010) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={r1, 0xffffa9c2, 0x6, 0x7c28}, 0x10) 23m59.029374087s ago: executing program 1 (id=523): openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 23m58.179779895s ago: executing program 1 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) 23m57.579386232s ago: executing program 1 (id=529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x285, 0x1000004f}, 0x2c) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c120096220102030109021200010000"], 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x7fffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 23m53.43740406s ago: executing program 1 (id=533): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) fchdir(r4) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x0) 23m49.261866836s ago: executing program 32 (id=515): timer_create(0x3, &(0x7f000049efa0)={0x0, 0x2f}, &(0x7f0000044000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x4, 0x0) syz_clone3(&(0x7f0000000bc0)={0x80001000, &(0x7f0000000200), 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23m37.513108613s ago: executing program 33 (id=533): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) fchdir(r4) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x0) 23m14.563323706s ago: executing program 4 (id=578): syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="50a52b", @ANYBLOB="100029bd7000ffdbdf25540000000c00990002000000160000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000"], 0x80}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0xfc, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7e}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfb}, {0x8, 0xb, 0x100002}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf5ae}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d15, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x8919, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 23m10.685088355s ago: executing program 4 (id=584): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m4.765336025s ago: executing program 4 (id=590): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 23m3.77087076s ago: executing program 4 (id=591): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x55, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23m1.798403281s ago: executing program 4 (id=593): unshare(0x26020480) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) epoll_pwait2(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 23m1.363740331s ago: executing program 4 (id=594): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 22m45.985194165s ago: executing program 34 (id=594): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) unshare(0x8020000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 22m0.432819836s ago: executing program 3 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000200ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 21m59.439495077s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 21m58.567553106s ago: executing program 3 (id=675): unshare(0x2a020400) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x38, 0x84, 0x46}, 0x2c) 21m55.999465701s ago: executing program 3 (id=678): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m52.443541308s ago: executing program 3 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) 21m51.646666369s ago: executing program 3 (id=686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x8, 0x7, 0xfefffffffffffffe, 0x5}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x400c807) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18010200fcffffff000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf1800000000000055090100000000009500000000000000180000004d692b2b000000007f0000008500000085000000bf91000000000000b702"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m34.889077034s ago: executing program 35 (id=686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x8, 0x7, 0xfefffffffffffffe, 0x5}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x400c807) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18010200fcffffff000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf1800000000000055090100000000009500000000000000180000004d692b2b000000007f0000008500000085000000bf91000000000000b702"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.034190174s ago: executing program 8 (id=6784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9da8bc0000fedbdb251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018006000100000000001c00038008000200020000000600010000030000060003005d5500"], 0x64}}, 0x0) 13.416633944s ago: executing program 8 (id=6789): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8905, &(0x7f0000000080)) 12.985146805s ago: executing program 8 (id=6791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r1, r1, 0x0, 0x0, 0x0, 0xc2, 0x4, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 12.394932182s ago: executing program 8 (id=6794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 11.744560819s ago: executing program 8 (id=6797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 11.283940821s ago: executing program 8 (id=6801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) 4.851106111s ago: executing program 2 (id=6830): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002"], 0x38}}, 0x0) 4.341427952s ago: executing program 2 (id=6832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="ba980ea8d1e094dfaaaa"]) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000005c0)={r9, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}}, &(0x7f00000003c0)=0x84) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.623848498s ago: executing program 7 (id=6836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtclass={0x64, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x4}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x2c}}, 0x40) 3.237325753s ago: executing program 6 (id=6837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) 3.015933159s ago: executing program 7 (id=6838): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r1, r0, 0x80000001, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) 2.91156792s ago: executing program 5 (id=6839): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x10d, 0x1000}], 0x10}, 0x40) 2.564811214s ago: executing program 6 (id=6840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0xbec, 0x7f, 0xc, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.465612148s ago: executing program 5 (id=6841): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002"], 0x38}}, 0x0) 2.463585495s ago: executing program 2 (id=6842): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000b00)=""/213, 0xd5}], 0x5}, 0x40012000) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 2.049928241s ago: executing program 5 (id=6843): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f0000003c80), 0x0, 0x40000000, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 1.847473137s ago: executing program 6 (id=6844): pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.732319184s ago: executing program 7 (id=6845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.68220825s ago: executing program 2 (id=6846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 1.301325407s ago: executing program 6 (id=6847): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtclass={0x64, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x4}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x2c}}, 0x40) 1.298496607s ago: executing program 5 (id=6848): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f00000004c0)=""/299, 0x110, 0x40, 0x0, 0xffffffffffffff00) 1.27074855s ago: executing program 2 (id=6849): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 1.132839451s ago: executing program 7 (id=6850): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b, 0x6400}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 791.66887ms ago: executing program 6 (id=6851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 694.208465ms ago: executing program 5 (id=6852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 653.773154ms ago: executing program 7 (id=6853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0xbec, 0x7f, 0xc, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 552.160183ms ago: executing program 2 (id=6854): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r1, r0, 0x80000001, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) 100.96546ms ago: executing program 6 (id=6855): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002"], 0x38}}, 0x0) 26.120076ms ago: executing program 7 (id=6856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x0) 0s ago: executing program 5 (id=6857): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): terface deactivated: batadv_slave_1 [ 1398.531164][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.613840][ T3876] veth1_macvtap: left promiscuous mode [ 1398.619608][ T3876] veth0_macvtap: left promiscuous mode [ 1398.632483][ T3876] veth1_vlan: left promiscuous mode [ 1398.638046][ T3876] veth0_vlan: left promiscuous mode [ 1399.217175][ T5820] Bluetooth: hci1: command tx timeout [ 1399.413228][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 1399.437061][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 1399.670492][ T3876] team0 (unregistering): Port device dummy0 removed [ 1400.204440][T17214] bridge0: port 3(syz_tun) entered blocking state [ 1400.211355][T17214] bridge0: port 3(syz_tun) entered disabled state [ 1400.219686][T17214] syz_tun: entered allmulticast mode [ 1400.228204][T17214] syz_tun: entered promiscuous mode [ 1400.235747][T17214] bridge0: port 3(syz_tun) entered blocking state [ 1400.242789][T17214] bridge0: port 3(syz_tun) entered forwarding state [ 1400.276897][T17134] hsr_slave_0: entered promiscuous mode [ 1400.286632][T17134] hsr_slave_1: entered promiscuous mode [ 1400.295421][T17134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.303344][T17134] Cannot create hsr debugfs directory [ 1400.394258][ T3876] IPVS: stop unused estimator thread 0... [ 1401.281241][ T5820] Bluetooth: hci1: command tx timeout [ 1402.101430][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3930'. [ 1402.178027][T17241] netlink: 'syz.5.3931': attribute type 1 has an invalid length. [ 1402.284321][T17134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1402.379260][T17134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1402.507078][T17134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1402.570077][T17134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1403.576236][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.604258][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3936'. [ 1403.780338][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.839041][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.846651][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.962226][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.962872][T17262] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1403.969631][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.391248][T17266] tipc: Enabling of bearer rejected, failed to enable media [ 1404.421060][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3942'. [ 1404.662972][T17273] bridge0: port 3(syz_tun) entered blocking state [ 1404.675884][T17273] bridge0: port 3(syz_tun) entered disabled state [ 1404.683779][T17273] syz_tun: entered allmulticast mode [ 1404.691879][T17273] syz_tun: entered promiscuous mode [ 1404.699186][T17273] bridge0: port 3(syz_tun) entered blocking state [ 1404.706138][T17273] bridge0: port 3(syz_tun) entered forwarding state [ 1405.000921][T17278] netlink: 'syz.5.3944': attribute type 1 has an invalid length. [ 1405.985017][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.191001][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3950'. [ 1407.760178][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1407.785258][T17134] veth0_vlan: entered promiscuous mode [ 1407.874815][T17134] veth1_vlan: entered promiscuous mode [ 1408.149196][T17134] veth0_macvtap: entered promiscuous mode [ 1408.221243][T17134] veth1_macvtap: entered promiscuous mode [ 1408.387410][T17134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.495483][T17134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.593524][T17134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.604385][T17134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.613504][T17134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.622656][T17134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.005137][T17325] bridge0: port 3(syz_tun) entered blocking state [ 1409.013393][T17325] bridge0: port 3(syz_tun) entered disabled state [ 1409.020408][T17325] syz_tun: entered allmulticast mode [ 1409.028674][T17325] syz_tun: entered promiscuous mode [ 1409.036043][T17325] bridge0: port 3(syz_tun) entered blocking state [ 1409.042994][T17325] bridge0: port 3(syz_tun) entered forwarding state [ 1409.294555][T17338] netlink: 'syz.7.3961': attribute type 1 has an invalid length. [ 1410.431294][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3964'. [ 1410.664375][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3966'. [ 1411.716141][T17372] netlink: 'syz.5.3972': attribute type 1 has an invalid length. [ 1413.790654][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1414.064123][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3978'. [ 1414.090904][ T4815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.099195][ T4815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.208859][ T3876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.217372][ T3876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.800274][T17404] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3981'. [ 1416.105722][T17423] netlink: 'syz.7.3988': attribute type 1 has an invalid length. [ 1416.578457][T17428] syzkaller0: entered promiscuous mode [ 1416.585380][T17428] syzkaller0: entered allmulticast mode [ 1417.124429][T17435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.238704][T17435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.500367][T17437] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3994'. [ 1418.594819][T17455] Bluetooth: MGMT ver 1.23 [ 1419.070771][T17460] syzkaller0: entered promiscuous mode [ 1419.076688][T17460] syzkaller0: entered allmulticast mode [ 1419.853790][T17471] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4008'. [ 1420.122404][ T1876] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1420.172148][T17477] netlink: 'syz.7.4011': attribute type 1 has an invalid length. [ 1420.463851][ T1876] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1420.473403][ T1876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.544706][ T1876] usb 6-1: config 0 descriptor?? [ 1420.740247][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1420.860853][T17473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4009'. [ 1420.950546][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1420.993864][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1421.000111][ T1876] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1421.062912][ T1876] usb 6-1: USB disconnect, device number 60 [ 1422.251233][T17496] syzkaller0: entered promiscuous mode [ 1422.257173][T17496] syzkaller0: entered allmulticast mode [ 1422.538243][T17501] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4022'. [ 1422.745680][T17506] netlink: 'syz.8.4023': attribute type 1 has an invalid length. [ 1422.819201][T17506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1422.982453][T17510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1423.009984][T17510] bond1: (slave batadv1): making interface the new active one [ 1423.023272][T17510] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1423.083808][T17506] netlink: 'syz.8.4023': attribute type 33 has an invalid length. [ 1423.091904][T17506] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4023'. [ 1423.381332][T17516] netlink: 'syz.6.4028': attribute type 1 has an invalid length. [ 1424.102336][ T5904] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1424.307584][ T5904] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1424.318733][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.378417][ T5904] usb 9-1: config 0 descriptor?? [ 1424.396343][T17528] bridge0: port 3(syz_tun) entered blocking state [ 1424.405510][T17528] bridge0: port 3(syz_tun) entered disabled state [ 1424.410671][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1424.412584][T17528] syz_tun: entered allmulticast mode [ 1424.435067][T17528] syz_tun: entered promiscuous mode [ 1424.442408][T17528] bridge0: port 3(syz_tun) entered blocking state [ 1424.449338][T17528] bridge0: port 3(syz_tun) entered forwarding state [ 1424.707900][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1424.782648][ T5904] gspca_cpia1: usb_control_msg 05, error -71 [ 1424.815888][ T5904] gspca_cpia1: usb_control_msg 01, error -71 [ 1424.822214][ T5904] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1424.887732][ T5904] usb 9-1: USB disconnect, device number 49 [ 1425.106853][T17535] syzkaller0: entered promiscuous mode [ 1425.113659][T17535] syzkaller0: entered allmulticast mode [ 1425.179403][T17539] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4038'. [ 1426.303631][T17550] netlink: 'syz.8.4043': attribute type 1 has an invalid length. [ 1427.141181][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4048'. [ 1427.311778][T17564] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1427.979245][T17572] syzkaller0: entered promiscuous mode [ 1427.985297][T17572] syzkaller0: entered allmulticast mode [ 1428.861616][T17585] netlink: 'syz.8.4058': attribute type 1 has an invalid length. [ 1429.199850][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4061'. [ 1429.209486][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4061'. [ 1429.229060][T17590] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1429.570508][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1429.840525][T17594] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4063'. [ 1430.458637][T17605] syzkaller0: entered promiscuous mode [ 1430.464601][T17605] syzkaller0: entered allmulticast mode [ 1431.189972][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1431.630470][T17622] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4075'. [ 1432.054938][T17627] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4077'. [ 1432.223532][T17629] netlink: 'syz.7.4078': attribute type 1 has an invalid length. [ 1432.902641][ T1876] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1433.089907][ T1876] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1433.099708][ T1876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.165715][ T1876] usb 7-1: config 0 descriptor?? [ 1433.193576][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1433.742433][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1433.771352][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1433.777719][ T1876] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1433.800900][ T1876] usb 7-1: USB disconnect, device number 59 [ 1433.858094][T17645] syzkaller0: entered promiscuous mode [ 1433.864216][T17645] syzkaller0: entered allmulticast mode [ 1434.219062][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4086'. [ 1434.545706][T17653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25 [ 1435.005260][T17664] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1435.522230][T17675] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 1436.134591][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4100'. [ 1436.743363][T17689] syzkaller0: entered promiscuous mode [ 1436.749101][T17689] syzkaller0: entered allmulticast mode [ 1437.544801][T17700] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4106'. [ 1438.318895][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4112'. [ 1438.547073][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4113'. [ 1438.943205][T17722] netlink: 'syz.7.4115': attribute type 1 has an invalid length. [ 1439.111388][T17726] tipc: Started in network mode [ 1439.116782][T17726] tipc: Node identity , cluster identity 4711 [ 1439.123198][T17726] tipc: Failed to obtain node identity [ 1439.128897][T17726] tipc: Enabling of bearer rejected, failed to enable media [ 1439.848985][T17732] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1439.999470][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 1440.674980][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4125'. [ 1441.717723][T17761] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4133'. [ 1442.425791][T17774] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4140'. [ 1444.870101][T17806] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4153'. [ 1445.052474][T17810] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1447.282607][T17843] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4168'. [ 1447.323556][T17846] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4167'. [ 1447.569124][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4169'. [ 1447.648489][T17848] veth1_macvtap: left promiscuous mode [ 1448.183604][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1449.736908][T17880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4183'. [ 1449.808652][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4184'. [ 1451.625567][T17878] raw_sendmsg: syz.6.4182 forgot to set AF_INET. Fix it! [ 1452.409328][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1452.806933][T17918] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4200'. [ 1452.829309][T17919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1454.489194][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4211'. [ 1454.629908][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1455.151746][T17948] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4214'. [ 1455.223033][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1456.347120][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4224'. [ 1457.275664][T17980] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4228'. [ 1457.514263][T17983] netlink: 'syz.7.4227': attribute type 1 has an invalid length. [ 1458.538781][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1459.821850][T18017] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4241'. [ 1460.935728][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 1461.745982][T18049] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4256'. [ 1462.348678][T18061] tipc: Started in network mode [ 1462.355323][T18061] tipc: Node identity , cluster identity 4711 [ 1462.363003][T18061] tipc: Failed to obtain node identity [ 1462.368723][T18061] tipc: Enabling of bearer rejected, failed to enable media [ 1463.689851][T18082] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4270'. [ 1463.730898][T18082] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4270'. [ 1464.727665][T18093] tipc: Enabled bearer , priority 0 [ 1464.825625][T18090] syzkaller0: entered promiscuous mode [ 1464.831363][T18090] syzkaller0: entered allmulticast mode [ 1464.920206][T18090] tipc: Resetting bearer [ 1464.988232][T18089] tipc: Resetting bearer [ 1465.195040][T18089] tipc: Disabling bearer [ 1466.257902][T18111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1466.303744][T18111] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1467.783918][T18130] tipc: Enabled bearer , priority 0 [ 1467.927582][T18130] syzkaller0: entered promiscuous mode [ 1467.933502][T18130] syzkaller0: entered allmulticast mode [ 1468.031005][T18134] netlink: 'syz.8.4294': attribute type 8 has an invalid length. [ 1468.037045][T18132] tipc: Resetting bearer [ 1468.039040][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4294'. [ 1468.142503][T18129] tipc: Resetting bearer [ 1468.307891][T18129] tipc: Disabling bearer [ 1468.783318][T18147] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4299'. [ 1468.808303][T18147] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4299'. [ 1469.347346][T18154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.500975][T18154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.750441][T18154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.906058][T18154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.221430][T18154] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.248987][T18154] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.276094][T18154] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.303652][T18154] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.728900][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1471.510134][T18180] tipc: Started in network mode [ 1471.515578][T18180] tipc: Node identity , cluster identity 4711 [ 1471.522166][T18180] tipc: Failed to obtain node identity [ 1471.527873][T18180] tipc: Enabling of bearer rejected, failed to enable media [ 1471.617308][T18185] syzkaller0: entered promiscuous mode [ 1471.623805][T18185] syzkaller0: entered allmulticast mode [ 1472.886916][T18192] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1472.924245][T18192] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1473.491637][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4319'. [ 1475.446279][T18228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1475.458186][T18228] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1477.757329][T18264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4345'. [ 1477.804110][T18264] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4345'. [ 1478.523119][ T42] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1478.734182][ T42] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1478.743754][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.775692][ T42] usb 7-1: config 0 descriptor?? [ 1478.854839][ T5904] IPVS: starting estimator thread 0... [ 1478.891722][ T42] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1478.948015][T18279] IPVS: using max 240 ests per chain, 12000 per kthread [ 1479.244306][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4349'. [ 1479.253830][T18271] tipc: Enabling of bearer rejected, failed to enable media [ 1479.345423][ T42] gspca_cpia1: usb_control_msg 05, error -71 [ 1479.384220][ T42] gspca_cpia1: usb_control_msg 01, error -71 [ 1479.390450][ T42] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1479.425606][ T42] usb 7-1: USB disconnect, device number 60 [ 1480.142564][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1480.171464][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1480.273630][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4360'. [ 1480.336549][T18298] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4360'. [ 1481.689286][T18321] netlink: 'syz.2.4371': attribute type 1 has an invalid length. [ 1481.697637][T18321] netlink: 'syz.2.4371': attribute type 8 has an invalid length. [ 1481.848623][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1481.858323][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1482.417328][ T1876] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1482.606912][ T1876] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1482.616427][ T1876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.665175][T18333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4377'. [ 1482.687116][ T1876] usb 7-1: config 0 descriptor?? [ 1482.719972][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1482.760398][T18337] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4377'. [ 1483.022361][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'. [ 1483.031728][T18325] tipc: Enabling of bearer rejected, failed to enable media [ 1483.117232][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1483.144083][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1483.150320][ T1876] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1483.210984][ T1876] usb 7-1: USB disconnect, device number 61 [ 1483.480262][T18351] netlink: 'syz.8.4383': attribute type 1 has an invalid length. [ 1484.159921][T18358] tap0: tun_chr_ioctl cmd 1074812118 [ 1484.180872][T18358] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1485.086467][T18370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1485.465297][T18372] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4392'. [ 1485.525338][T18379] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4392'. [ 1486.302614][ T42] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1486.523252][ T42] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1486.532837][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.578773][ T42] usb 9-1: config 0 descriptor?? [ 1486.604878][ T42] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1486.677576][T18399] netlink: 'syz.5.4403': attribute type 1 has an invalid length. [ 1486.813507][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4405'. [ 1486.855689][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4398'. [ 1486.865772][T18389] tipc: Enabling of bearer rejected, failed to enable media [ 1487.051101][ T42] gspca_cpia1: usb_control_msg 05, error -71 [ 1487.077414][ T42] gspca_cpia1: usb_control_msg 01, error -71 [ 1487.083773][ T42] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1487.102830][ T42] usb 9-1: USB disconnect, device number 50 [ 1487.785404][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4410'. [ 1487.823660][T18412] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4410'. [ 1488.597780][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4418'. [ 1488.954221][T18430] team0: No ports can be present during mode change [ 1489.466354][T18441] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4424'. [ 1489.513691][T18441] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4424'. [ 1489.615571][T18446] netlink: 'syz.2.4427': attribute type 1 has an invalid length. [ 1490.537041][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1491.253378][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4440'. [ 1491.311279][T18474] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4440'. [ 1491.385677][ T5820] Bluetooth: hci1: link tx timeout [ 1491.391597][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1491.896475][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4446'. [ 1492.185914][T18488] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4447'. [ 1492.943409][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4455'. [ 1493.026212][T18508] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4455'. [ 1493.512296][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 1494.324944][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4465'. [ 1494.843690][T18538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1494.884642][T18538] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1496.317935][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 1496.869312][T18570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1496.971038][T18570] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1498.875591][T18607] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4501'. [ 1499.854352][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4511'. [ 1499.864105][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4511'. [ 1500.614835][T18641] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1501.101125][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4522'. [ 1501.557987][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1501.570908][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1502.342957][T18675] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4533'. [ 1503.042618][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4537'. [ 1503.456684][T18689] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4540'. [ 1503.466301][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4540'. [ 1504.077329][T18703] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4546'. [ 1504.574141][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4551'. [ 1505.256011][T18724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4556'. [ 1505.265613][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4556'. [ 1505.512290][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1505.926907][T18736] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4561'. [ 1507.664856][T18768] __nla_validate_parse: 4 callbacks suppressed [ 1507.664933][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4574'. [ 1507.826680][T18770] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1508.160968][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4579'. [ 1508.232892][T18779] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4580'. [ 1508.778908][T18789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1508.788423][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1509.443425][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1509.475974][T18804] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1509.619969][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.992300][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4593'. [ 1510.110569][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1510.538826][T18819] tipc: Started in network mode [ 1510.544541][T18819] tipc: Node identity b2ddc8e52413, cluster identity 4711 [ 1510.554478][T18819] tipc: Enabled bearer , priority 0 [ 1510.572968][T18819] syzkaller0: entered promiscuous mode [ 1510.578702][T18819] syzkaller0: entered allmulticast mode [ 1510.678933][T18819] tipc: Resetting bearer [ 1510.728362][T18818] tipc: Resetting bearer [ 1510.769542][T18818] tipc: Disabling bearer [ 1512.943786][T18865] __nla_validate_parse: 11 callbacks suppressed [ 1512.943862][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4617'. [ 1513.023673][T18865] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4617'. [ 1513.184690][ T1876] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1513.404814][ T1876] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1513.418659][ T1876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.501717][ T1876] usb 3-1: config 0 descriptor?? [ 1513.537880][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1513.895848][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4624'. [ 1513.923944][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1513.969463][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1513.975866][ T1876] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1514.024599][ T1876] usb 3-1: USB disconnect, device number 91 [ 1514.973724][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4629'. [ 1514.983265][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4629'. [ 1515.144589][T18906] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4632'. [ 1516.070203][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4636'. [ 1516.157932][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4638'. [ 1516.204884][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4638'. [ 1516.753303][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1516.770567][ T42] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1516.977966][ T42] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1516.988185][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.064509][ T42] usb 9-1: config 0 descriptor?? [ 1517.095724][ T42] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1517.417135][ T42] gspca_cpia1: usb_control_msg 05, error -71 [ 1517.440531][ T42] gspca_cpia1: usb_control_msg 01, error -71 [ 1517.448766][ T42] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1517.476213][ T42] usb 9-1: USB disconnect, device number 51 [ 1517.991142][T18953] __nla_validate_parse: 2 callbacks suppressed [ 1517.991302][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4651'. [ 1518.231898][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1518.270562][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1518.830334][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4657'. [ 1518.844886][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4657'. [ 1519.019063][T18971] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4658'. [ 1519.780741][T18985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1519.799756][ T1876] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1519.999144][ T1876] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1520.008830][ T1876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.074974][ T1876] usb 6-1: config 0 descriptor?? [ 1520.113339][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1520.172216][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4666'. [ 1520.203012][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4666'. [ 1520.502784][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1520.510163][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1520.517094][ T1876] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1520.529772][ T1876] usb 6-1: USB disconnect, device number 61 [ 1520.704868][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4671'. [ 1522.539671][T19031] netlink: 'syz.2.4684': attribute type 2 has an invalid length. [ 1523.242456][ T42] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1523.444938][ T42] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1523.456891][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.496990][T19051] __nla_validate_parse: 9 callbacks suppressed [ 1523.497158][T19051] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4693'. [ 1523.534617][ T42] usb 6-1: config 0 descriptor?? [ 1523.579321][ T42] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1523.986586][ T42] gspca_cpia1: usb_control_msg 05, error -71 [ 1524.005639][ T42] gspca_cpia1: usb_control_msg 01, error -71 [ 1524.012887][ T42] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1524.034579][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4695'. [ 1524.077366][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4695'. [ 1524.100038][ T42] usb 6-1: USB disconnect, device number 62 [ 1525.140604][T19077] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4700'. [ 1525.150325][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4700'. [ 1525.871314][T19093] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1525.920371][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4707'. [ 1526.782321][ T42] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1526.990955][ T42] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1527.000610][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.073711][ T42] usb 3-1: config 0 descriptor?? [ 1527.112194][ T42] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1527.355766][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4714'. [ 1527.365530][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4714'. [ 1527.481653][ T42] gspca_cpia1: usb_control_msg 05, error -71 [ 1527.489189][ T42] gspca_cpia1: usb_control_msg 01, error -71 [ 1527.495665][ T42] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1527.529277][ T42] usb 3-1: USB disconnect, device number 92 [ 1528.052959][T19127] netlink: 'syz.6.4717': attribute type 1 has an invalid length. [ 1528.118916][T19127] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4717'. [ 1528.520195][T19133] __nla_validate_parse: 2 callbacks suppressed [ 1528.520271][T19133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4720'. [ 1528.665393][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4721'. [ 1529.703708][T19154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4727'. [ 1529.713462][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'. [ 1530.614174][T19168] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4734'. [ 1530.826658][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1532.604750][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4750'. [ 1532.632992][T19208] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4749'. [ 1534.623713][T19248] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4765'. [ 1534.646558][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4764'. [ 1534.673363][T19247] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1534.691830][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1535.628342][T19261] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4771'. [ 1535.693405][T19261] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4771'. [ 1536.195147][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4775'. [ 1536.548334][T19279] netlink: 'syz.6.4777': attribute type 1 has an invalid length. [ 1536.764427][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4779'. [ 1537.168875][T19290] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4782'. [ 1537.221102][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4782'. [ 1537.681298][T19294] bridge0: port 3(syz_tun) entered disabled state [ 1537.728064][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.737616][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.017629][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.040536][T19294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.291890][T19294] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.306778][T19294] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.318233][T19294] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.327564][T19294] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.088004][T19340] __nla_validate_parse: 5 callbacks suppressed [ 1540.088083][T19340] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4802'. [ 1540.134043][T19340] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4802'. [ 1540.666208][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 1540.813102][T19349] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4806'. [ 1541.167496][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1541.444400][T19362] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4813'. [ 1541.507731][T19362] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4813'. [ 1542.275549][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1542.399542][T19380] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4821'. [ 1542.980557][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4827'. [ 1545.384062][T19439] __nla_validate_parse: 4 callbacks suppressed [ 1545.384150][T19439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4850'. [ 1545.698175][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4851'. [ 1546.035237][T19450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1546.083702][T19450] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1547.038397][T19472] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4865'. [ 1547.072715][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1547.554469][T19481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1547.603648][T19481] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1548.439275][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4880'. [ 1548.532332][ T1876] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1548.746509][ T1876] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1548.756102][ T1876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.790154][ T1876] usb 9-1: config 0 descriptor?? [ 1548.814922][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1549.160022][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1549.189789][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1549.196945][ T1876] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1549.241227][ T1876] usb 9-1: USB disconnect, device number 52 [ 1549.302335][T19512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1550.738519][T19540] __nla_validate_parse: 2 callbacks suppressed [ 1550.738598][T19540] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1550.794434][T19543] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1551.043284][T19549] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4904'. [ 1551.483762][T19558] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4908'. [ 1551.555245][ T5904] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1551.764685][ T5904] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1551.774533][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.824399][ T5904] usb 7-1: config 0 descriptor?? [ 1551.847799][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1552.193612][ T5904] gspca_cpia1: usb_control_msg 05, error -71 [ 1552.228526][ T5904] gspca_cpia1: usb_control_msg 01, error -71 [ 1552.234971][ T5904] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1552.288371][ T5904] usb 7-1: USB disconnect, device number 62 [ 1552.556393][T19576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1552.606032][T19576] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4915'. [ 1553.317650][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4923'. [ 1554.492807][ T5904] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1554.698396][ T5904] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1554.708003][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.736567][ T5904] usb 9-1: config 0 descriptor?? [ 1554.759028][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1555.094673][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4931'. [ 1555.105403][T19605] tipc: Enabled bearer , priority 10 [ 1555.150258][ T5904] gspca_cpia1: usb_control_msg 05, error -71 [ 1555.172560][ T5904] gspca_cpia1: usb_control_msg 01, error -71 [ 1555.178969][ T5904] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1555.213513][ T5904] usb 9-1: USB disconnect, device number 53 [ 1556.222459][ T5904] tipc: Node number set to 2530134245 [ 1558.017826][T19680] netlink: 'syz.2.4957': attribute type 1 has an invalid length. [ 1558.075650][ T5904] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1558.271696][ T5904] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1558.281246][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.338145][ T5904] usb 9-1: config 0 descriptor?? [ 1558.371004][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1558.660022][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4955'. [ 1558.669693][T19673] tipc: Enabling of bearer rejected, already enabled [ 1558.777498][ T5904] gspca_cpia1: usb_control_msg 05, error -71 [ 1558.810100][ T5904] gspca_cpia1: usb_control_msg 01, error -71 [ 1558.816474][ T5904] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1558.869953][ T5904] usb 9-1: USB disconnect, device number 54 [ 1559.828627][ T5904] IPVS: starting estimator thread 0... [ 1559.934703][T19712] IPVS: using max 240 ests per chain, 12000 per kthread [ 1561.432450][ T1876] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1561.651876][ T1876] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1561.661527][ T1876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.704299][ T1876] usb 3-1: config 0 descriptor?? [ 1561.728993][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1562.088009][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1562.097367][T19740] tipc: Enabling of bearer rejected, already enabled [ 1562.182838][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1562.208790][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1562.215160][ T1876] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1562.255618][ T1876] usb 3-1: USB disconnect, device number 93 [ 1564.113719][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5002'. [ 1566.487655][T19843] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5023'. [ 1569.310105][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5045'. [ 1571.060726][T19930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1571.082520][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1572.758674][T19963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5076'. [ 1573.156946][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5079'. [ 1573.300367][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5080'. [ 1573.487712][T19977] tipc: Started in network mode [ 1573.493383][T19977] tipc: Node identity b661e7f08d27, cluster identity 4711 [ 1573.501393][T19977] tipc: Enabled bearer , priority 0 [ 1573.561692][T19971] syzkaller0: entered promiscuous mode [ 1573.567666][T19971] syzkaller0: entered allmulticast mode [ 1573.730966][T19971] tipc: Resetting bearer [ 1573.825554][T19971] tipc: Disabling bearer [ 1574.265964][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1574.318301][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1575.006500][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5093'. [ 1575.456404][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5098'. [ 1575.635388][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5100'. [ 1578.623627][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5111'. [ 1580.239982][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5113'. [ 1580.673480][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1580.705040][T20065] veth1_macvtap: left promiscuous mode [ 1580.710937][T20065] macsec0: entered promiscuous mode [ 1581.355071][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5125'. [ 1581.694272][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1582.693681][T20102] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5137'. [ 1582.856328][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5139'. [ 1584.130444][T20133] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5151'. [ 1584.410087][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5153'. [ 1584.732879][T20140] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5155'. [ 1584.744459][T20140] ip6tnl1: entered promiscuous mode [ 1584.749997][T20140] ip6tnl1: entered allmulticast mode [ 1585.937289][T20166] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5167'. [ 1586.123842][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5168'. [ 1586.349827][T20173] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5171'. [ 1587.647308][T20199] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5183'. [ 1587.818164][T20202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5184'. [ 1587.880969][T20205] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5186'. [ 1588.321148][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5188'. [ 1589.323177][T20227] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1589.488853][T20233] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5200'. [ 1589.788839][T20235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1591.133557][T20263] __nla_validate_parse: 2 callbacks suppressed [ 1591.133635][T20263] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1591.404102][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5218'. [ 1591.463666][T20270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5217'. [ 1592.619128][T20291] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1593.146317][T20301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5232'. [ 1593.168972][T20300] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5231'. [ 1593.304744][T20303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1594.159699][T20324] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5242'. [ 1594.960978][T20335] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5246'. [ 1595.053763][T20338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1595.087574][T20336] netlink: 'syz.6.5247': attribute type 1 has an invalid length. [ 1596.437866][T20365] __nla_validate_parse: 1 callbacks suppressed [ 1596.437949][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5260'. [ 1597.025919][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1598.010693][T20389] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5271'. [ 1599.841720][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5286'. [ 1599.851242][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5286'. [ 1599.930921][T20421] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 1600.121527][T20425] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5287'. [ 1600.210120][T20428] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5289'. [ 1600.500145][T20432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1601.773319][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5301'. [ 1601.823517][T20461] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5302'. [ 1602.165693][T20464] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5304'. [ 1602.873161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b5da400: rx timeout, send abort [ 1603.373957][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b5db400: rx timeout, send abort [ 1603.382937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b5da400: abort rx timeout. Force session deactivation [ 1603.862631][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5318'. [ 1603.882716][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b5db400: abort rx timeout. Force session deactivation [ 1604.354981][T20511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5320'. [ 1604.708711][T20515] netlink: 'syz.7.5324': attribute type 1 has an invalid length. [ 1604.955980][T20515] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1604.968751][T20515] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1604.989377][T20515] bond1: (slave vti0): making interface the new active one [ 1605.004734][T20515] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1606.388629][T20552] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5338'. [ 1607.613802][T20577] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1607.961317][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5352'. [ 1607.971053][T20583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5352'. [ 1609.294234][T20607] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1609.678873][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1609.688349][T20614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1611.084767][T20643] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5378'. [ 1611.724191][T20651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5382'. [ 1611.733948][T20651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5382'. [ 1612.534005][T20665] netlink: 'syz.5.5390': attribute type 1 has an invalid length. [ 1612.743985][T20671] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1613.436258][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1613.445803][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1614.077580][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 1614.554011][T20703] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5406'. [ 1614.884388][T20710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5408'. [ 1615.224669][T20716] netlink: 'syz.6.5412': attribute type 1 has an invalid length. [ 1615.349513][T20719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5413'. [ 1615.360332][T20719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5413'. [ 1616.373885][T20739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1617.325312][T20754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5428'. [ 1617.335102][T20754] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5428'. [ 1617.832854][T20764] netlink: 'syz.6.5433': attribute type 1 has an invalid length. [ 1617.895688][T20766] __nla_validate_parse: 1 callbacks suppressed [ 1617.895767][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5434'. [ 1619.487916][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5443'. [ 1619.497559][T20789] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5443'. [ 1619.670623][T20793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5446'. [ 1620.049108][T20801] netlink: 'syz.2.5450': attribute type 1 has an invalid length. [ 1621.317375][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5459'. [ 1621.327177][T20821] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5459'. [ 1621.363748][T20823] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5460'. [ 1621.828067][T20834] netlink: 'syz.6.5464': attribute type 1 has an invalid length. [ 1622.310925][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5468'. [ 1622.372189][ T5904] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1622.563167][ T5904] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1622.573969][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.625283][ T5904] usb 6-1: config 0 descriptor?? [ 1622.650161][ T5904] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1622.919857][T20837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5467'. [ 1622.929576][T20837] tipc: Started in network mode [ 1622.935335][T20837] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1622.943599][T20837] tipc: Enabled bearer , priority 10 [ 1622.965596][T20849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5474'. [ 1622.976853][T20849] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5474'. [ 1623.028548][ T5904] gspca_cpia1: usb_control_msg 05, error -71 [ 1623.059171][ T5904] gspca_cpia1: usb_control_msg 01, error -71 [ 1623.066510][ T5904] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1623.104487][ T5904] usb 6-1: USB disconnect, device number 63 [ 1623.339432][T20858] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5476'. [ 1624.000286][T20868] netlink: 'syz.5.5481': attribute type 1 has an invalid length. [ 1624.063498][ T1876] tipc: Node number set to 43690 [ 1624.694834][T20882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5487'. [ 1624.704611][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5487'. [ 1624.763284][T20882] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1624.963447][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5489'. [ 1625.472876][ T1876] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1625.707335][ T1876] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1625.716871][ T1876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.764120][ T1876] usb 9-1: config 0 descriptor?? [ 1625.813515][ T1876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1625.996294][T20907] netlink: 'syz.6.5498': attribute type 1 has an invalid length. [ 1626.104171][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5491'. [ 1626.113796][T20891] tipc: Enabling of bearer rejected, already enabled [ 1626.269082][ T1876] gspca_cpia1: usb_control_msg 05, error -71 [ 1626.300275][ T1876] gspca_cpia1: usb_control_msg 01, error -71 [ 1626.306758][ T1876] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1626.351704][ T1876] usb 9-1: USB disconnect, device number 55 [ 1626.982848][T20922] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5503'. [ 1626.997582][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5503'. [ 1627.770908][T20930] tipc: Enabled bearer , priority 0 [ 1627.815840][T20936] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 1627.823820][T20936] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 1628.162851][T20943] netlink: 'syz.5.5513': attribute type 1 has an invalid length. [ 1628.333891][T20948] __nla_validate_parse: 2 callbacks suppressed [ 1628.333972][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5516'. [ 1628.729295][T20955] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5518'. [ 1628.739114][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5518'. [ 1629.024496][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5521'. [ 1629.553484][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5525'. [ 1629.717991][T20967] tipc: Enabled bearer , priority 0 [ 1629.763507][T20967] syzkaller0: entered promiscuous mode [ 1629.769325][T20967] syzkaller0: entered allmulticast mode [ 1629.869177][T20966] tipc: Resetting bearer [ 1629.950058][T20966] tipc: Disabling bearer [ 1629.983172][T20977] netlink: 'syz.7.5530': attribute type 1 has an invalid length. [ 1630.649063][T20987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1630.658585][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1630.807849][T20993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5537'. [ 1631.128662][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1631.641148][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5544'. [ 1631.683599][T21008] tipc: Enabled bearer , priority 0 [ 1631.717407][T21008] syzkaller0: entered promiscuous mode [ 1631.723375][T21008] syzkaller0: entered allmulticast mode [ 1631.849094][T21006] tipc: Resetting bearer [ 1631.926350][T21006] tipc: Disabling bearer [ 1632.523424][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1633.664072][T21046] __nla_validate_parse: 3 callbacks suppressed [ 1633.664153][T21046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5562'. [ 1633.726236][T21048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5561'. [ 1633.740129][T21046] tipc: Enabling of bearer rejected, already enabled [ 1634.282573][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 1634.400108][T21061] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5568'. [ 1635.193693][T21080] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5578'. [ 1635.581103][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5579'. [ 1635.677470][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5582'. [ 1635.743206][T21083] tipc: Started in network mode [ 1635.748393][T21083] tipc: Node identity b6322ed9207c, cluster identity 4711 [ 1635.757646][T21083] tipc: Enabled bearer , priority 0 [ 1635.810101][T21083] syzkaller0: entered promiscuous mode [ 1635.816053][T21083] syzkaller0: entered allmulticast mode [ 1635.900597][T21082] tipc: Resetting bearer [ 1635.971297][T21082] tipc: Disabling bearer [ 1636.427302][T21101] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1637.310767][T21120] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5593'. [ 1637.914443][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5597'. [ 1637.999713][T21130] tipc: Enabled bearer , priority 0 [ 1638.037238][T21130] syzkaller0: entered promiscuous mode [ 1638.044226][T21130] syzkaller0: entered allmulticast mode [ 1638.163754][T21128] tipc: Resetting bearer [ 1638.219866][T21128] tipc: Disabling bearer [ 1638.899846][T21150] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5602'. [ 1641.128888][T21195] team0 (unregistering): Port device team_slave_0 removed [ 1641.193825][T21195] team0 (unregistering): Port device team_slave_1 removed [ 1641.303825][T21195] team0 (unregistering): Port device dummy0 removed [ 1646.373223][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5662'. [ 1646.574550][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1647.101701][T21310] tipc: Enabled bearer , priority 0 [ 1647.111686][T21310] syzkaller0: entered promiscuous mode [ 1647.117622][T21310] syzkaller0: entered allmulticast mode [ 1647.137235][T21314] netlink: 'syz.7.5670': attribute type 11 has an invalid length. [ 1647.188201][T21308] tipc: Resetting bearer [ 1647.229354][T21308] tipc: Disabling bearer [ 1647.283283][T21317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.813909][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5674'. [ 1648.727731][T21342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1648.737489][T21342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1648.747597][T21342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1648.757140][T21342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1648.944256][T21346] tipc: Enabled bearer , priority 0 [ 1648.997851][T21345] tipc: Disabling bearer [ 1649.176153][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1651.012502][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5696'. [ 1651.022283][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5696'. [ 1652.482359][T21397] batman_adv: batadv0: Adding interface: dummy0 [ 1652.489000][T21397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.515015][T21397] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1653.092743][T21408] __nla_validate_parse: 2 callbacks suppressed [ 1653.092835][T21408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5712'. [ 1654.621770][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5724'. [ 1654.942868][T21442] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5726'. [ 1659.826396][T21524] tipc: Resetting bearer [ 1660.092241][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1660.160409][T21530] syz_tun: left allmulticast mode [ 1660.165831][T21530] syz_tun: left promiscuous mode [ 1660.172008][T21530] bridge0: port 3(syz_tun) entered disabled state [ 1660.312545][T21530] : left allmulticast mode [ 1660.317308][T21530] : left promiscuous mode [ 1660.323474][T21530] bridge0: port 1() entered disabled state [ 1660.428708][T21530] bridge_slave_1: left allmulticast mode [ 1660.434973][T21530] bridge_slave_1: left promiscuous mode [ 1660.441567][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.560501][T21530] bond0: (slave bond_slave_0): Releasing backup interface [ 1660.732780][T21530] bond0: (slave bond_slave_1): Releasing backup interface [ 1660.897797][T21530] team0: Port device team_slave_0 removed [ 1661.061396][T21530] team0: Port device team_slave_1 removed [ 1661.072419][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.082040][T21530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.161455][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.169843][T21530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.564600][T21585] tipc: Enabling of bearer rejected, failed to enable media [ 1665.082721][T21610] batadv0: entered promiscuous mode [ 1665.230378][T21608] batadv0: left promiscuous mode [ 1665.263643][T21613] netlink: 'syz.5.5790': attribute type 11 has an invalid length. [ 1665.273555][T21613] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5790'. [ 1665.461280][T21617] tipc: Enabling of bearer rejected, failed to enable media [ 1667.722367][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5813'. [ 1668.224298][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1668.253705][T21674] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5819'. [ 1668.505297][T21677] netlink: 'syz.8.5820': attribute type 10 has an invalid length. [ 1668.612880][T21677] team0: Port device dummy0 added [ 1668.788278][T21684] tipc: Enabling of bearer rejected, already enabled [ 1668.853787][T21684] tipc: Resetting bearer [ 1669.655332][T21693] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5827'. [ 1670.275609][T21706] netlink: 'syz.2.5834': attribute type 10 has an invalid length. [ 1670.292578][T21707] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1670.696275][T21710] tipc: Enabled bearer , priority 0 [ 1670.731082][T21710] syzkaller0: entered promiscuous mode [ 1670.737038][T21710] syzkaller0: entered allmulticast mode [ 1670.782261][T21710] tipc: Resetting bearer [ 1670.795718][T21709] tipc: Resetting bearer [ 1670.837298][T21709] tipc: Disabling bearer [ 1671.184890][T21724] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5841'. [ 1671.336426][T21726] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1671.875777][T21736] tipc: Enabled bearer , priority 0 [ 1671.913912][T21736] syzkaller0: entered promiscuous mode [ 1671.919681][T21736] syzkaller0: entered allmulticast mode [ 1672.029443][T21735] tipc: Resetting bearer [ 1672.065367][T21735] tipc: Disabling bearer [ 1672.097563][T21739] netlink: 'syz.5.5848': attribute type 10 has an invalid length. [ 1672.204492][T21739] team0: Port device dummy0 added [ 1672.294965][T21742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1672.843860][T21752] tipc: Enabled bearer , priority 0 [ 1672.917380][T21749] syzkaller0: entered promiscuous mode [ 1672.923519][T21749] syzkaller0: entered allmulticast mode [ 1672.997501][T21752] tipc: Resetting bearer [ 1673.058005][T21747] tipc: Resetting bearer [ 1673.086896][T21756] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5855'. [ 1673.109741][T21747] tipc: Disabling bearer [ 1673.170058][T21758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1674.966464][T21784] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5869'. [ 1675.173357][T21787] tipc: Enabled bearer , priority 0 [ 1675.243922][T21790] syzkaller0: entered promiscuous mode [ 1675.249806][T21790] syzkaller0: entered allmulticast mode [ 1675.300079][T21787] tipc: Resetting bearer [ 1675.394566][T21785] tipc: Resetting bearer [ 1675.441687][T21785] tipc: Disabling bearer [ 1675.670218][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1675.679795][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1675.689538][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1675.710263][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1675.726556][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1676.900893][T21794] chnl_net:caif_netlink_parms(): no params data found [ 1677.522055][T21823] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5882'. [ 1677.831246][T14662] tipc: Resetting bearer [ 1677.837987][ T5820] Bluetooth: hci3: command tx timeout [ 1677.882678][T14662] bridge0: port 3(syz_tun) entered disabled state [ 1677.938845][T14662] syz_tun (unregistering): left allmulticast mode [ 1677.945855][T14662] syz_tun (unregistering): left promiscuous mode [ 1677.952769][T14662] bridge0: port 3(syz_tun) entered disabled state [ 1677.986927][T14662] tipc: Disabling bearer [ 1678.110780][ T4815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.122761][ T4815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.242279][T21794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.249938][T21794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.262300][T21794] bridge_slave_0: entered allmulticast mode [ 1678.271503][T21794] bridge_slave_0: entered promiscuous mode [ 1678.334277][T21794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.342049][T21794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.349730][T21794] bridge_slave_1: entered allmulticast mode [ 1678.359503][T21794] bridge_slave_1: entered promiscuous mode [ 1678.443433][ T4815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.454148][ T4815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.480211][T21833] tipc: Enabled bearer , priority 0 [ 1678.503101][T21829] syzkaller0: entered promiscuous mode [ 1678.508831][T21829] syzkaller0: entered allmulticast mode [ 1678.589063][T21829] tipc: Resetting bearer [ 1678.613326][ T4815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.624195][ T4815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.648582][T21828] tipc: Resetting bearer [ 1678.660274][T21828] tipc: Disabling bearer [ 1678.769649][ T4815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.780472][ T4815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.811286][T21794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.963044][T21794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.387096][T21851] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5892'. [ 1679.450622][T21794] team0: Port device team_slave_0 added [ 1679.523048][ T4815] bridge_slave_1: left allmulticast mode [ 1679.529126][ T4815] bridge_slave_1: left promiscuous mode [ 1679.536898][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.598718][ T4815] bridge_slave_0: left allmulticast mode [ 1679.605082][ T4815] bridge_slave_0: left promiscuous mode [ 1679.613519][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.943044][ T5820] Bluetooth: hci3: command tx timeout [ 1680.097587][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5893'. [ 1680.324203][T21865] netlink: 'syz.5.5895': attribute type 11 has an invalid length. [ 1680.618729][T21872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.697612][ T4815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.730278][ T4815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.760528][ T4815] bond0 (unregistering): Released all slaves [ 1680.786277][T21794] team0: Port device team_slave_1 added [ 1680.983606][ T4815] tipc: Disabling bearer [ 1681.007496][ T4815] tipc: Left network mode [ 1681.274369][T21794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.281665][T21794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.308596][T21794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.428339][T21794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.436541][T21794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.464536][T21794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.561784][ T4815] hsr_slave_0: left promiscuous mode [ 1681.570951][ T4815] hsr_slave_1: left promiscuous mode [ 1681.582201][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.590538][ T4815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.613041][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1681.620785][ T4815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.640266][ T4815] veth0_macvtap: left promiscuous mode [ 1681.646388][ T4815] veth1_vlan: left promiscuous mode [ 1681.652622][ T4815] veth0_vlan: left promiscuous mode [ 1681.992763][ T5820] Bluetooth: hci3: command tx timeout [ 1682.858941][T21794] hsr_slave_0: entered promiscuous mode [ 1682.870775][T21794] hsr_slave_1: entered promiscuous mode [ 1682.879369][T21794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1682.888794][T21794] Cannot create hsr debugfs directory [ 1683.308523][T21892] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5903'. [ 1684.076890][ T5820] Bluetooth: hci3: command tx timeout [ 1684.079046][T21905] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5906'. [ 1685.086284][T21909] team0: Port device dummy0 removed [ 1685.306793][T21794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1685.335466][T21794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1685.400873][T21794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1685.462550][T21794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1686.281197][T21794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.450656][T21794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.516579][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.524205][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.600169][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.607906][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.809205][T21937] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5919'. [ 1688.287106][T21794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.593708][T21794] veth0_vlan: entered promiscuous mode [ 1688.680079][T21794] veth1_vlan: entered promiscuous mode [ 1688.912833][T21794] veth0_macvtap: entered promiscuous mode [ 1688.988815][T21794] veth1_macvtap: entered promiscuous mode [ 1689.141723][T21794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.185884][T21794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.256490][T21970] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5932'. [ 1689.286261][T21794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.295596][T21794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.305169][T21794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.314288][T21794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.052547][T22004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5944'. [ 1691.297066][T22008] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5945'. [ 1691.666771][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5948'. [ 1692.403233][T22029] tipc: Enabled bearer , priority 0 [ 1692.456462][T22031] syzkaller0: entered promiscuous mode [ 1692.462415][T22031] syzkaller0: entered allmulticast mode [ 1692.522161][T22029] tipc: Resetting bearer [ 1692.551535][T22028] tipc: Resetting bearer [ 1692.604143][T22028] tipc: Disabling bearer [ 1693.830961][T22056] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5961'. [ 1693.958001][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1694.111408][ T7531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.120787][ T7531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.313761][ T3764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.321851][ T3764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.994312][T22076] 8021q: VLANs not supported on caif0 [ 1695.013571][T22077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5868'. [ 1696.020474][T22091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5975'. [ 1696.639324][T22103] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5981'. [ 1696.729165][T22106] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1696.737958][T22106] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1696.746589][T22106] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1696.755226][T22106] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1696.771347][T22106] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1697.433183][T22121] netlink: 'syz.7.5987': attribute type 1 has an invalid length. [ 1698.141732][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5991'. [ 1698.442429][T22137] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5994'. [ 1698.798644][T22141] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.808069][T22141] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.817365][T22141] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.826515][T22141] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.843716][T22141] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1699.158489][T22150] netlink: 'syz.8.6000': attribute type 11 has an invalid length. [ 1699.172413][T22150] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6000'. [ 1699.770640][T22158] netlink: 'syz.6.6002': attribute type 1 has an invalid length. [ 1700.399832][T22164] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6006'. [ 1700.547245][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1700.839108][T22170] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6009'. [ 1701.408007][T22178] tipc: Enabled bearer , priority 0 [ 1701.454523][T22177] tipc: Disabling bearer [ 1701.494705][T22180] netlink: 'syz.7.6014': attribute type 11 has an invalid length. [ 1701.504556][T22180] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6014'. [ 1702.003363][T22189] netlink: 'syz.8.6018': attribute type 1 has an invalid length. [ 1702.407479][T22195] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6020'. [ 1702.631268][T22199] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6023'. [ 1703.329881][T22210] tipc: Started in network mode [ 1703.335551][T22210] tipc: Node identity , cluster identity 4711 [ 1703.342353][T22210] tipc: Failed to obtain node identity [ 1703.348156][T22210] tipc: Enabling of bearer rejected, failed to enable media [ 1703.405066][T22212] netlink: 'syz.5.6029': attribute type 1 has an invalid length. [ 1703.826295][T22219] netlink: 'syz.5.6032': attribute type 1 has an invalid length. [ 1704.622707][T22228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1704.788618][T22229] tipc: Resetting bearer [ 1705.692316][T22246] tipc: Started in network mode [ 1705.697514][T22246] tipc: Node identity , cluster identity 4711 [ 1705.704065][T22246] tipc: Failed to obtain node identity [ 1705.709767][T22246] tipc: Enabling of bearer rejected, failed to enable media [ 1706.139095][T22252] netlink: 'syz.8.6046': attribute type 1 has an invalid length. [ 1706.354028][T22257] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1706.363736][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1706.373252][T22257] netlink: 31 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1706.382883][T22257] netlink: 'syz.6.6048': attribute type 3 has an invalid length. [ 1706.390859][T22257] netlink: 'syz.6.6048': attribute type 2 has an invalid length. [ 1706.399082][T22257] netlink: 31 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1706.534304][T22262] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6050'. [ 1706.963579][T22264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.144133][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6053'. [ 1708.256121][T22285] tipc: Enabled bearer , priority 0 [ 1708.352668][T22284] tipc: Disabling bearer [ 1709.003859][T22295] netlink: 'syz.8.6063': attribute type 1 has an invalid length. [ 1709.013920][T22293] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6062'. [ 1710.127217][T22312] tipc: Enabled bearer , priority 0 [ 1710.186962][T22310] tipc: Disabling bearer [ 1711.427284][T22336] netlink: 'syz.6.6080': attribute type 1 has an invalid length. [ 1712.570017][T22349] tipc: Enabled bearer , priority 0 [ 1712.604427][T22348] tipc: Disabling bearer [ 1713.652689][T22364] netlink: 'syz.7.6094': attribute type 11 has an invalid length. [ 1713.660764][T22364] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6094'. [ 1713.878084][T22367] netlink: 'syz.8.6095': attribute type 4 has an invalid length. [ 1713.971125][T22372] netlink: 'syz.8.6095': attribute type 4 has an invalid length. [ 1714.054317][T22372] syzkaller1: entered promiscuous mode [ 1714.060300][T22372] syzkaller1: entered allmulticast mode [ 1714.131273][T22374] netlink: 'syz.7.6098': attribute type 1 has an invalid length. [ 1714.633707][T22379] tipc: Started in network mode [ 1714.638793][T22379] tipc: Node identity , cluster identity 4711 [ 1714.645643][T22379] tipc: Failed to obtain node identity [ 1714.651350][T22379] tipc: Enabling of bearer rejected, failed to enable media [ 1716.078993][T22400] netlink: 'syz.6.6108': attribute type 11 has an invalid length. [ 1716.087193][T22400] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6108'. [ 1717.035880][T22412] tipc: Enabled bearer , priority 0 [ 1717.121790][T22411] tipc: Disabling bearer [ 1717.260423][T22419] syz_tun: left allmulticast mode [ 1717.266087][T22419] syz_tun: left promiscuous mode [ 1717.272749][T22419] bridge0: port 3(syz_tun) entered disabled state [ 1717.308637][T22419] batman_adv: batadv0: Removing interface: dummy0 [ 1717.330830][T22419] bridge_slave_0: left allmulticast mode [ 1717.337334][T22419] bridge_slave_0: left promiscuous mode [ 1717.344272][T22419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.399104][T22419] bridge_slave_1: left allmulticast mode [ 1717.405333][T22419] bridge_slave_1: left promiscuous mode [ 1717.412045][T22419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.443840][T22422] netlink: 'syz.5.6117': attribute type 1 has an invalid length. [ 1717.526078][T22419] bond0: (slave bond_slave_0): Releasing backup interface [ 1717.560494][T22419] bond0: (slave bond_slave_1): Releasing backup interface [ 1717.594365][T22419] team0: Port device team_slave_0 removed [ 1717.612965][T22419] team0: Port device team_slave_1 removed [ 1717.620950][T22419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.643089][T22419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.658957][T22419] bond1: (slave vti0): Releasing backup interface [ 1717.679675][T22419] bond0: (slave vxlan0): Releasing backup interface [ 1717.693491][T22419] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.707573][T22419] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.719017][T22419] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.729030][T22419] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1718.639077][T22436] netlink: 'syz.6.6123': attribute type 11 has an invalid length. [ 1718.647420][T22436] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6123'. [ 1719.241667][T22446] tipc: Enabled bearer , priority 0 [ 1719.295268][T22445] tipc: Disabling bearer [ 1719.950689][T22458] tipc: Resetting bearer [ 1721.210385][T22475] netlink: 'syz.7.6137': attribute type 11 has an invalid length. [ 1721.218786][T22475] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6137'. [ 1721.249819][T22476] netlink: 'syz.8.6139': attribute type 1 has an invalid length. [ 1721.927624][T22486] tipc: Enabled bearer , priority 0 [ 1722.026061][T22481] tipc: Disabling bearer [ 1724.077539][T22526] netlink: 'syz.5.6159': attribute type 1 has an invalid length. [ 1724.242208][T22528] tipc: Enabled bearer , priority 0 [ 1724.328958][T22525] tipc: Disabling bearer [ 1725.537583][T22541] tipc: Started in network mode [ 1725.542901][T22541] tipc: Node identity bebb4348a651, cluster identity 4711 [ 1725.550994][T22541] tipc: Enabled bearer , priority 0 [ 1725.649134][T22545] tipc: Resetting bearer [ 1725.710643][T22546] syzkaller0: entered promiscuous mode [ 1725.720057][T22546] syzkaller0: entered allmulticast mode [ 1725.769532][T22541] tipc: Resetting bearer [ 1725.847255][T22540] tipc: Resetting bearer [ 1725.884276][T22540] tipc: Disabling bearer [ 1726.559891][T22560] tipc: Enabled bearer , priority 0 [ 1726.615814][T22559] tipc: Disabling bearer [ 1726.678369][T22562] netlink: 'syz.7.6174': attribute type 1 has an invalid length. [ 1728.864441][T22588] tipc: Enabled bearer , priority 0 [ 1728.889014][T22587] tipc: Disabling bearer [ 1729.026129][T22595] bridge_slave_0: left allmulticast mode [ 1729.032394][T22595] bridge_slave_0: left promiscuous mode [ 1729.038976][T22595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.111414][T22595] bridge_slave_1: left allmulticast mode [ 1729.118083][T22595] bridge_slave_1: left promiscuous mode [ 1729.124903][T22595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.265102][T22595] bond0: (slave bond_slave_0): Releasing backup interface [ 1729.365309][T22595] bond0: (slave bond_slave_1): Releasing backup interface [ 1729.523229][T22595] team0: Port device team_slave_0 removed [ 1729.603806][T22595] team0: Port device team_slave_1 removed [ 1729.614550][T22595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.623562][T22595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.698441][T22595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.706764][T22595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.932421][T22606] netlink: 'syz.6.6193': attribute type 1 has an invalid length. [ 1730.695907][T22617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 1731.333939][T22627] tipc: Enabled bearer , priority 0 [ 1731.363858][T22625] tipc: Disabling bearer [ 1731.585716][T22630] netlink: 'syz.6.6202': attribute type 11 has an invalid length. [ 1731.594076][T22630] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6202'. [ 1732.315572][T22649] syz_tun: left allmulticast mode [ 1732.320873][T22649] syz_tun: left promiscuous mode [ 1732.327077][T22649] bridge0: port 3(syz_tun) entered disabled state [ 1732.398020][T22649] bridge_slave_0: left allmulticast mode [ 1732.406328][T22649] bridge_slave_0: left promiscuous mode [ 1732.415060][T22649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.451566][T22649] bridge_slave_1: left allmulticast mode [ 1732.457876][T22649] bridge_slave_1: left promiscuous mode [ 1732.467439][T22649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.522245][T22649] bond0: (slave bond_slave_0): Releasing backup interface [ 1732.559865][T22649] bond0: (slave bond_slave_1): Releasing backup interface [ 1732.645993][T22649] team0: Port device team_slave_0 removed [ 1732.710552][T22649] team0: Port device team_slave_1 removed [ 1732.721570][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1732.729504][T22649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1732.790838][T22655] netlink: 'syz.5.6212': attribute type 1 has an invalid length. [ 1732.820925][T22648] tipc: Enabling of bearer rejected, failed to enable media [ 1733.198015][T22657] tipc: Enabled bearer , priority 0 [ 1733.213590][T22657] syzkaller0: entered promiscuous mode [ 1733.219317][T22657] syzkaller0: entered allmulticast mode [ 1733.351137][T22656] tipc: Resetting bearer [ 1733.406340][T22656] tipc: Disabling bearer [ 1733.934542][T22666] netlink: 'syz.7.6217': attribute type 11 has an invalid length. [ 1733.943400][T22666] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6217'. [ 1735.630500][T22698] netlink: 'syz.2.6231': attribute type 11 has an invalid length. [ 1735.639026][T22698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6231'. [ 1735.962603][T22704] netlink: 'syz.7.6234': attribute type 1 has an invalid length. [ 1736.293886][T22706] tipc: Enabling of bearer rejected, failed to enable media [ 1738.711722][T22742] netlink: 'syz.7.6245': attribute type 11 has an invalid length. [ 1738.720965][T22742] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6245'. [ 1739.538905][T22751] tipc: Enabled bearer , priority 0 [ 1739.563722][T22751] syzkaller0: entered promiscuous mode [ 1739.569564][T22751] syzkaller0: entered allmulticast mode [ 1739.612546][T19303] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1739.661130][T22750] tipc: Resetting bearer [ 1739.721165][T22750] tipc: Disabling bearer [ 1739.786634][T19303] usb 9-1: Using ep0 maxpacket: 32 [ 1739.818309][T19303] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1739.842542][T22756] netlink: 'syz.7.6251': attribute type 1 has an invalid length. [ 1739.872954][T19303] usb 9-1: language id specifier not provided by device, defaulting to English [ 1739.926507][T19303] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1739.936872][T19303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.945247][T19303] usb 9-1: Product:   [ 1739.949642][T19303] usb 9-1: Manufacturer: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞጕ㌬몍Ⲟ뿇棌 [ 1739.965369][T19303] usb 9-1: SerialNumber: syz [ 1740.576771][T22748] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1740.952397][T19303] usb 9-1: USB disconnect, device number 56 [ 1741.145546][T22767] tipc: Enabled bearer , priority 0 [ 1741.185909][T22767] syzkaller0: entered promiscuous mode [ 1741.191733][T22767] syzkaller0: entered allmulticast mode [ 1741.223267][T22767] tipc: Resetting bearer [ 1741.242150][T22764] tipc: Resetting bearer [ 1741.279330][T22764] tipc: Disabling bearer [ 1741.371673][T22771] netlink: 'syz.5.6257': attribute type 11 has an invalid length. [ 1741.382086][T22771] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1741.978385][T22779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6261'. [ 1742.054103][T22780] tipc: Enabled bearer , priority 0 [ 1742.099375][T22777] tipc: Disabling bearer [ 1742.348354][T22784] tipc: Enabled bearer , priority 0 [ 1742.358438][T22784] syzkaller0: entered promiscuous mode [ 1742.364301][T22784] syzkaller0: entered allmulticast mode [ 1742.378750][T22788] netlink: 'syz.5.6265': attribute type 1 has an invalid length. [ 1742.451058][T22783] tipc: Resetting bearer [ 1742.495667][T22783] tipc: Disabling bearer [ 1743.128278][T22798] netlink: 'syz.2.6269': attribute type 12 has an invalid length. [ 1743.152898][T22798] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:19999 [ 1743.364445][T22800] netlink: 'syz.7.6270': attribute type 11 has an invalid length. [ 1743.376601][T22800] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6270'. [ 1744.279857][T22812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6276'. [ 1744.309468][T22818] tipc: Enabled bearer , priority 0 [ 1744.340749][T22818] syzkaller0: entered promiscuous mode [ 1744.348450][T22818] syzkaller0: entered allmulticast mode [ 1744.383241][T22812] tipc: Enabled bearer , priority 0 [ 1744.470932][T22817] tipc: Resetting bearer [ 1744.504711][T22817] tipc: Disabling bearer [ 1744.585737][T22811] tipc: Disabling bearer [ 1745.084458][T22831] netlink: 'syz.8.6284': attribute type 11 has an invalid length. [ 1745.093134][T22831] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6284'. [ 1745.693527][T22842] netlink: 'syz.8.6289': attribute type 1 has an invalid length. [ 1746.691186][T22855] tipc: Enabled bearer , priority 0 [ 1746.738327][T22853] tipc: Disabling bearer [ 1747.270511][T22866] netlink: 'syz.6.6299': attribute type 11 has an invalid length. [ 1747.279719][T22866] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1747.494151][T22870] tipc: Enabled bearer , priority 0 [ 1747.587627][T22868] tipc: Disabling bearer [ 1748.263201][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6310'. [ 1748.349282][T22885] tipc: Enabled bearer , priority 0 [ 1748.406364][T22884] tipc: Disabling bearer [ 1748.586139][T22891] netlink: 'syz.5.6312': attribute type 1 has an invalid length. [ 1749.280413][T22901] netlink: 'syz.2.6315': attribute type 11 has an invalid length. [ 1749.289074][T22901] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1749.523682][T22903] tipc: Enabled bearer , priority 0 [ 1749.626243][T22902] tipc: Disabling bearer [ 1749.831742][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1750.405138][T22921] tipc: Enabled bearer , priority 0 [ 1750.523599][T22920] tipc: Disabling bearer [ 1750.970730][T22932] netlink: 'syz.7.6329': attribute type 1 has an invalid length. [ 1751.077901][T22934] netlink: 'syz.2.6330': attribute type 11 has an invalid length. [ 1751.088322][T22934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1752.039808][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6339'. [ 1752.268807][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6341'. [ 1752.394767][T22957] tipc: Enabled bearer , priority 0 [ 1752.475284][T22955] tipc: Disabling bearer [ 1753.862712][T22988] netlink: 'syz.7.6355': attribute type 1 has an invalid length. [ 1753.959351][T22986] tipc: Enabled bearer , priority 0 [ 1753.980196][T22985] tipc: Disabling bearer [ 1754.170306][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6356'. [ 1754.194923][T22989] tipc: Enabled bearer , priority 0 [ 1754.270080][T22987] tipc: Disabling bearer [ 1755.379550][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1756.283702][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6372'. [ 1756.354077][T23026] tipc: Enabled bearer , priority 0 [ 1756.418074][T23025] tipc: Disabling bearer [ 1757.983529][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6388'. [ 1758.029755][T23059] tipc: Enabling of bearer rejected, failed to enable media [ 1759.100241][T23078] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6396'. [ 1759.110686][T23078] openvswitch: netlink: Message has 44053 unknown bytes. [ 1762.384339][T23137] tipc: Enabled bearer , priority 0 [ 1763.357375][T23137] tipc: Disabling bearer [ 1765.307185][T23175] tipc: Enabling of bearer rejected, failed to enable media [ 1766.494134][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6446'. [ 1766.518380][T23195] vlan2: entered promiscuous mode [ 1766.523820][T23195] bridge0: entered promiscuous mode [ 1766.661523][T23199] syzkaller0: entered promiscuous mode [ 1766.667831][T23199] syzkaller0: entered allmulticast mode [ 1767.101710][T23206] syzkaller0: entered promiscuous mode [ 1767.107960][T23206] syzkaller0: entered allmulticast mode [ 1767.225167][T23206] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1767.582802][T23216] trusted_key: syz.8.6457 sent an empty control message without MSG_MORE. [ 1768.658992][T23235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6463'. [ 1768.674499][T23235] bridge0: port 1(syz_tun) entered blocking state [ 1768.681383][T23235] bridge0: port 1(syz_tun) entered disabled state [ 1768.688676][T23235] syz_tun: entered allmulticast mode [ 1768.699837][T23235] syz_tun: entered promiscuous mode [ 1768.708332][T23235] bridge0: port 1(syz_tun) entered blocking state [ 1768.715335][T23235] bridge0: port 1(syz_tun) entered forwarding state [ 1769.900031][T23251] tipc: Resetting bearer [ 1769.931958][T23251] bridge0: port 3(syz_tun) entered disabled state [ 1770.024135][T23251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.032212][T23251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.265559][T23251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.290574][T23251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1770.556953][T23251] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.566409][T23251] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.575247][T23251] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.583998][T23251] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.835215][T23251] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1770.844169][T23251] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1770.855558][T23251] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1770.864970][T23251] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1771.887126][T23271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6479'. [ 1773.499882][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6489'. [ 1773.652823][T23299] tipc: Enabling of bearer rejected, failed to enable media [ 1774.389521][T23316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6494'. [ 1774.409660][T23316] bridge0: port 1(syz_tun) entered blocking state [ 1774.417013][T23316] bridge0: port 1(syz_tun) entered disabled state [ 1774.425248][T23316] syz_tun: entered allmulticast mode [ 1774.436191][T23316] syz_tun: entered promiscuous mode [ 1774.444707][T23316] bridge0: port 1(syz_tun) entered blocking state [ 1774.451590][T23316] bridge0: port 1(syz_tun) entered forwarding state [ 1775.555228][T23330] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 1775.705166][T23330] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 1775.714203][T23330] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1779.725596][T23394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6527'. [ 1781.432692][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6542'. [ 1781.514218][T23426] tipc: Enabling of bearer rejected, failed to enable media [ 1783.347170][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6554'. [ 1783.379899][T23455] tipc: Enabling of bearer rejected, failed to enable media [ 1784.767437][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6566'. [ 1784.797332][T23481] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1785.025275][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6568'. [ 1785.216155][T23488] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6569'. [ 1785.266840][T23488] tipc: Enabling of bearer rejected, failed to enable media [ 1785.421995][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1787.356416][T23524] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6585'. [ 1787.712981][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6586'. [ 1787.863040][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6589'. [ 1788.783224][T23541] tipc: Enabled bearer , priority 0 [ 1788.810983][T23541] syzkaller0: entered promiscuous mode [ 1788.816980][T23541] syzkaller0: entered allmulticast mode [ 1788.936696][T23539] tipc: Resetting bearer [ 1788.952487][T23546] netlink: 'syz.8.6594': attribute type 10 has an invalid length. [ 1788.977609][T23539] tipc: Disabling bearer [ 1789.039688][T23546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1789.053440][T23546] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1789.537188][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6599'. [ 1789.837162][T23558] syzkaller0: entered promiscuous mode [ 1789.843294][T23558] syzkaller0: entered allmulticast mode [ 1789.861203][T23560] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1789.956945][T23560] gretap0: entered promiscuous mode [ 1790.028194][T23562] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6603'. [ 1790.734414][T23574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6609'. [ 1791.035248][T23578] tipc: Enabled bearer , priority 0 [ 1791.073775][T23578] syzkaller0: entered promiscuous mode [ 1791.079505][T23578] syzkaller0: entered allmulticast mode [ 1791.105957][T23580] tipc: Enabled bearer , priority 0 [ 1791.158207][T23583] syzkaller0: entered promiscuous mode [ 1791.164400][T23583] syzkaller0: entered allmulticast mode [ 1791.175298][T23576] tipc: Resetting bearer [ 1791.215810][T23576] tipc: Disabling bearer [ 1791.291376][T23580] tipc: Resetting bearer [ 1791.351108][T23579] tipc: Resetting bearer [ 1791.400065][T23579] tipc: Disabling bearer [ 1791.416181][T23586] netlink: 392 bytes leftover after parsing attributes in process `syz.2.6614'. [ 1791.749974][T23590] syzkaller0: entered promiscuous mode [ 1791.755975][T23590] syzkaller0: entered allmulticast mode [ 1792.710264][T23602] nbd0: detected capacity change from 0 to 128 [ 1792.742719][ T5820] block nbd0: Receive control failed (result -32) [ 1792.831378][T23607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1793.368498][T23613] tipc: Enabling of bearer rejected, failed to enable media [ 1793.488777][T23617] tipc: Enabled bearer , priority 0 [ 1793.533830][T23617] syzkaller0: entered promiscuous mode [ 1793.539690][T23617] syzkaller0: entered allmulticast mode [ 1793.616666][T23620] tipc: Resetting bearer [ 1793.666382][T23616] tipc: Resetting bearer [ 1793.697343][T23616] tipc: Disabling bearer [ 1793.846247][T23623] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6629'. [ 1794.556551][T23640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1795.203968][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6639'. [ 1796.608727][T23672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6651'. [ 1797.027664][T23678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6656'. [ 1797.354476][T23684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6657'. [ 1797.616791][T23691] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 1798.257289][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6664'. [ 1798.406035][T23703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1798.804951][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6668'. [ 1798.865252][T23708] tipc: Enabled bearer , priority 0 [ 1798.930345][T23707] tipc: Disabling bearer [ 1799.049674][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1799.412979][T23718] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6672'. [ 1799.424163][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6672'. [ 1799.434483][T23718] netlink: 'syz.6.6672': attribute type 3 has an invalid length. [ 1800.128135][T23729] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 1801.070615][T23739] __nla_validate_parse: 3 callbacks suppressed [ 1801.070694][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6681'. [ 1801.086613][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6681'. [ 1801.174015][T23741] tipc: Enabled bearer , priority 0 [ 1801.262576][T23740] tipc: Disabling bearer [ 1801.553050][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6684'. [ 1801.655040][T23748] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1801.664733][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1801.676329][T23748] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1801.686359][T23748] netlink: 'syz.6.6685': attribute type 3 has an invalid length. [ 1801.694482][T23748] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1801.795283][T23752] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 1801.961742][T23756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6688'. [ 1802.174196][T23758] syzkaller0: entered promiscuous mode [ 1802.180064][T23758] syzkaller0: entered allmulticast mode [ 1802.455286][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6692'. [ 1802.495076][T23765] bridge0: port 1(syz_tun) entered blocking state [ 1802.502232][T23765] bridge0: port 1(syz_tun) entered disabled state [ 1802.509291][T23765] syz_tun: entered allmulticast mode [ 1802.517724][T23765] syz_tun: entered promiscuous mode [ 1803.246331][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1803.941056][T23783] netlink: 'syz.2.6700': attribute type 3 has an invalid length. [ 1804.011645][T23787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 1805.993437][T23817] netlink: 'syz.7.6714': attribute type 3 has an invalid length. [ 1806.079978][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1806.093166][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1806.103063][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1806.124463][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1806.158936][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1806.589371][T23825] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 1807.183477][T23818] chnl_net:caif_netlink_parms(): no params data found [ 1807.665426][T23844] __nla_validate_parse: 12 callbacks suppressed [ 1807.665504][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6722'. [ 1807.934547][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6723'. [ 1807.970011][T16190] tipc: Resetting bearer [ 1807.994830][T16190] bridge0: port 1(syz_tun) entered disabled state [ 1808.034870][T16190] syz_tun (unregistering): left allmulticast mode [ 1808.041678][T16190] syz_tun (unregistering): left promiscuous mode [ 1808.048761][T16190] bridge0: port 1(syz_tun) entered disabled state [ 1808.075249][T16190] tipc: Disabling bearer [ 1808.206770][ T7531] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.218611][ T7531] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.232992][ T5827] Bluetooth: hci0: command tx timeout [ 1808.390582][ T7531] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.401739][ T7531] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.612585][ T7531] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.623505][ T7531] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.914186][ T7531] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1808.925632][ T7531] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.028958][T23818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.036931][T23818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.049056][T23818] bridge_slave_0: entered allmulticast mode [ 1809.058780][T23818] bridge_slave_0: entered promiscuous mode [ 1809.078688][T23818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.087092][T23818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.094930][T23818] bridge_slave_1: entered allmulticast mode [ 1809.104429][T23818] bridge_slave_1: entered promiscuous mode [ 1809.747455][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1809.977789][T23866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 1810.008519][ T7531] bond0 (unregistering): Released all slaves [ 1810.173951][T23818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.208295][ T7531] tipc: Left network mode [ 1810.233911][T23818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.655438][T23818] team0: Port device team_slave_0 added [ 1810.728112][ T7531] hsr_slave_0: left promiscuous mode [ 1810.740612][ T7531] hsr_slave_1: left promiscuous mode [ 1810.786623][ T7531] veth1_macvtap: left promiscuous mode [ 1810.793016][ T7531] veth0_macvtap: left promiscuous mode [ 1810.798924][ T7531] veth1_vlan: left promiscuous mode [ 1810.804696][ T7531] veth0_vlan: left promiscuous mode [ 1811.702364][T23818] team0: Port device team_slave_1 added [ 1812.061094][T23818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.068443][T23818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1812.094909][T23818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.252147][T23818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.259473][T23818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1812.286522][T23818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.757789][T23818] hsr_slave_0: entered promiscuous mode [ 1812.767718][T23818] hsr_slave_1: entered promiscuous mode [ 1812.776325][T23818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1812.784277][T23818] Cannot create hsr debugfs directory [ 1813.341206][T23902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 1813.991155][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6747'. [ 1814.182943][T23818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1814.226051][T23818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1814.317074][T23818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1814.359105][T23818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1814.484559][T23920] netlink: 'syz.6.6751': attribute type 21 has an invalid length. [ 1815.173613][T23818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1815.326834][T23818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.388329][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.395952][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1815.504964][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.512611][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1815.664984][T23934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 1816.472629][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6760'. [ 1816.827345][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1816.865584][T23953] netlink: 'syz.8.6763': attribute type 29 has an invalid length. [ 1816.905258][T23953] netlink: 'syz.8.6763': attribute type 29 has an invalid length. [ 1816.928592][T23953] netlink: 'syz.8.6763': attribute type 29 has an invalid length. [ 1816.941789][T23953] netlink: 'syz.8.6763': attribute type 29 has an invalid length. [ 1817.218283][T23818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.616294][T23967] syzkaller0: entered promiscuous mode [ 1817.623559][T23967] syzkaller0: entered allmulticast mode [ 1817.742135][T23969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 1818.575021][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6773'. [ 1818.896954][T23818] veth0_vlan: entered promiscuous mode [ 1818.951044][T23818] veth1_vlan: entered promiscuous mode [ 1819.159878][T23818] veth0_macvtap: entered promiscuous mode [ 1819.221417][T23818] veth1_macvtap: entered promiscuous mode [ 1819.387718][T23818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.477667][T23818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.541761][T23818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.551239][T23818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.561191][T23818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.570452][T23818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.621447][T23991] tipc: Enabling of bearer rejected, failed to enable media [ 1820.165036][T24001] syzkaller0: entered promiscuous mode [ 1820.170924][T24001] syzkaller0: entered allmulticast mode [ 1820.253806][T24003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 1821.389333][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6784'. [ 1821.917110][T24030] tipc: Enabling of bearer rejected, failed to enable media [ 1822.384703][T24036] syzkaller0: entered promiscuous mode [ 1822.390590][T24036] syzkaller0: entered allmulticast mode [ 1822.444760][T24039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 1823.730398][T24062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6798'. [ 1823.912312][ T4042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.920281][ T4042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.018138][T24064] syzkaller0: entered promiscuous mode [ 1824.025533][T24064] syzkaller0: entered allmulticast mode [ 1824.103610][T24069] tipc: Enabling of bearer rejected, failed to enable media [ 1824.121549][ T7531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.130096][ T7531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.738867][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6710'. [ 1824.748211][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6710'. [ 1825.602918][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1825.616158][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1825.625453][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1825.639393][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1825.650330][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1826.399856][T24083] chnl_net:caif_netlink_parms(): no params data found [ 1826.825055][T24100] tipc: Enabled bearer , priority 0 [ 1826.871262][T24100] syzkaller0: entered promiscuous mode [ 1826.878569][T24100] syzkaller0: entered allmulticast mode [ 1826.945411][T24099] tipc: Resetting bearer [ 1826.998153][T24099] tipc: Disabling bearer [ 1827.495029][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6816'. [ 1827.504364][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6816'. [ 1827.676067][ T5820] Bluetooth: hci2: command tx timeout [ 1827.717771][T16535] syz_tun (unregistering): left allmulticast mode [ 1827.726812][T16535] syz_tun (unregistering): left promiscuous mode [ 1827.733667][T16535] bridge0: port 3(syz_tun) entered disabled state [ 1827.747345][T16535] tipc: Disabling bearer [ 1828.036715][T24083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.046439][T24083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.054605][T24083] bridge_slave_0: entered allmulticast mode [ 1828.063796][T24083] bridge_slave_0: entered promiscuous mode [ 1828.138275][T24120] tipc: Started in network mode [ 1828.144084][T24120] tipc: Node identity 2e55be5edd48, cluster identity 4711 [ 1828.152311][T24120] tipc: Enabled bearer , priority 0 [ 1828.205083][T24083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.212878][T24083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.220586][T24083] bridge_slave_1: entered allmulticast mode [ 1828.230515][T24083] bridge_slave_1: entered promiscuous mode [ 1828.285661][T24119] tipc: Disabling bearer [ 1828.428952][T24083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.504370][T24083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.805711][T24083] team0: Port device team_slave_0 added [ 1828.883015][T14045] bridge_slave_1: left allmulticast mode [ 1828.888908][T14045] bridge_slave_1: left promiscuous mode [ 1828.895804][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.910197][T24133] netlink: 'syz.2.6825': attribute type 4 has an invalid length. [ 1828.918471][T24133] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1828.961258][T14045] bridge_slave_0: left allmulticast mode [ 1828.967283][T14045] bridge_slave_0: left promiscuous mode [ 1828.974210][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.339737][T14045] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1829.578782][T14045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.614607][T14045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.705976][T14045] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1829.736632][T14045] bond0 (unregistering): Released all slaves [ 1829.754688][ T5820] Bluetooth: hci2: command tx timeout [ 1829.829162][T14045] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1829.853766][T14045] bond1 (unregistering): Released all slaves [ 1829.906555][T24083] team0: Port device team_slave_1 added [ 1830.000637][T24133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1830.142919][T24144] tipc: Enabled bearer , priority 0 [ 1830.163680][T14045] tipc: Left network mode [ 1830.297371][T24139] tipc: Disabling bearer [ 1830.545014][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1830.558483][T24156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1830.657363][T24083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.664742][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.691172][T24083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.914229][T14045] hsr_slave_0: left promiscuous mode [ 1830.954579][T14045] hsr_slave_1: left promiscuous mode [ 1830.963735][T14045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.973702][T14045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1831.343969][T14045] team0 (unregistering): Port device team_slave_1 removed [ 1831.438685][T14045] team0 (unregistering): Port device team_slave_0 removed [ 1831.683709][T14045] team0 (unregistering): Port device dummy0 removed [ 1831.747328][T24083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.755823][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.784271][T24083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.847224][ T5820] Bluetooth: hci2: command tx timeout [ 1831.884334][T24169] tipc: Enabled bearer , priority 0 [ 1832.000693][T24173] tipc: Disabling bearer [ 1832.131108][T24083] hsr_slave_0: entered promiscuous mode [ 1832.147250][T24083] hsr_slave_1: entered promiscuous mode [ 1832.257216][T14045] IPVS: stop unused estimator thread 0... [ 1832.949076][T24187] tipc: Enabled bearer , priority 0 [ 1832.984173][T24187] tipc: Resetting bearer [ 1833.010327][T24191] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1833.027286][T24186] tipc: Disabling bearer [ 1833.055293][T24191] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1833.912226][ T5820] Bluetooth: hci2: command tx timeout [ 1834.009001][T24083] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1834.032613][T24083] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1834.163307][T24083] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1834.220577][T24083] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1834.773883][T24216] tipc: Enabled bearer , priority 0 [ 1834.837010][T24214] tipc: Resetting bearer [ 1834.906980][T24212] tipc: Disabling bearer [ 1835.158492][T24083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.235292][T24083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.316017][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.323664][ T4815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.388800][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.396370][ T4815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.454754][T24225] ===================================================== [ 1835.462355][T24225] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 1835.469655][T24225] batadv_get_vid+0x2d0/0x3b0 [ 1835.474591][T24225] batadv_interface_tx+0x2e9/0x1e60 [ 1835.479968][T24225] dev_hard_start_xmit+0x22c/0xa30 [ 1835.485488][T24225] __dev_queue_xmit+0x3cb4/0x5e20 [ 1835.490685][T24225] __bpf_redirect+0x162d/0x1760 [ 1835.495881][T24225] bpf_clone_redirect+0x366/0x530 [ 1835.501095][T24225] ___bpf_prog_run+0x1297/0xeba0 [ 1835.506457][T24225] __bpf_prog_run512+0xc5/0x100 [ 1835.511495][T24225] bpf_test_run+0x350/0xab0 [ 1835.516321][T24225] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1835.522064][T24225] bpf_prog_test_run+0x5bf/0xa40 [ 1835.527242][T24225] __sys_bpf+0x6ca/0xe60 [ 1835.531655][T24225] __ia32_sys_bpf+0xa4/0xf0 [ 1835.536455][T24225] ia32_sys_call+0x2544/0x42c0 [ 1835.541427][T24225] __do_fast_syscall_32+0xb0/0x150 [ 1835.546954][T24225] do_fast_syscall_32+0x38/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1835.552098][T24225] do_SYSENTER_32+0x1f/0x30 [ 1835.556789][T24225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1835.563439][T24225] [ 1835.565868][T24225] Uninit was created at: [ 1835.570440][T24225] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1835.576638][T24225] kmalloc_reserve+0x13c/0x4b0 [ 1835.581623][T24225] pskb_expand_head+0x1fc/0x1610 [ 1835.586878][T24225] skb_ensure_writable+0x44e/0x510 [ 1835.592328][T24225] bpf_clone_redirect+0x1c1/0x530 [ 1835.597569][T24225] ___bpf_prog_run+0x1297/0xeba0 [ 1835.602776][T24225] __bpf_prog_run512+0xc5/0x100 [ 1835.607805][T24225] bpf_test_run+0x350/0xab0 [ 1835.612570][T24225] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1835.618224][T24225] bpf_prog_test_run+0x5bf/0xa40 [ 1835.623438][T24225] __sys_bpf+0x6ca/0xe60 [ 1835.627839][T24225] __ia32_sys_bpf+0xa4/0xf0 [ 1835.632573][T24225] ia32_sys_call+0x2544/0x42c0 [ 1835.637494][T24225] __do_fast_syscall_32+0xb0/0x150 [ 1835.642924][T24225] do_fast_syscall_32+0x38/0x80 [ 1835.647960][T24225] do_SYSENTER_32+0x1f/0x30 [ 1835.652733][T24225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1835.659272][T24225] [ 1835.661765][T24225] CPU: 0 UID: 0 PID: 24225 Comm: syz.5.6857 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(none) [ 1835.674254][T24225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1835.684670][T24225] ===================================================== [ 1835.691741][T24225] Disabling lock debugging due to kernel taint [ 1835.698108][T24225] Kernel panic - not syncing: kmsan.panic set ... [ 1835.704686][T24225] CPU: 0 UID: 0 PID: 24225 Comm: syz.5.6857 Tainted: G B 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(none) [ 1835.718542][T24225] Tainted: [B]=BAD_PAGE [ 1835.722811][T24225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1835.733081][T24225] Call Trace: [ 1835.736497][T24225] [ 1835.739539][T24225] __dump_stack+0x26/0x30 [ 1835.744081][T24225] dump_stack_lvl+0x53/0x270 [ 1835.748894][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1835.754897][T24225] dump_stack+0x1e/0x25 [ 1835.759248][T24225] panic+0x4bd/0xd50 [ 1835.763395][T24225] kmsan_report+0x31c/0x320 [ 1835.768083][T24225] ? __do_fast_syscall_32+0xb0/0x150 [ 1835.773568][T24225] ? __msan_warning+0x1b/0x30 [ 1835.778406][T24225] ? batadv_get_vid+0x2d0/0x3b0 [ 1835.783427][T24225] ? batadv_interface_tx+0x2e9/0x1e60 [ 1835.788975][T24225] ? dev_hard_start_xmit+0x22c/0xa30 [ 1835.794457][T24225] ? __dev_queue_xmit+0x3cb4/0x5e20 [ 1835.799844][T24225] ? __bpf_redirect+0x162d/0x1760 [ 1835.805058][T24225] ? bpf_clone_redirect+0x366/0x530 [ 1835.810452][T24225] ? ___bpf_prog_run+0x1297/0xeba0 [ 1835.815749][T24225] ? __bpf_prog_run512+0xc5/0x100 [ 1835.820956][T24225] ? bpf_test_run+0x350/0xab0 [ 1835.825820][T24225] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1835.831663][T24225] ? bpf_prog_test_run+0x5bf/0xa40 [ 1835.836974][T24225] ? __sys_bpf+0x6ca/0xe60 [ 1835.841592][T24225] ? __ia32_sys_bpf+0xa4/0xf0 [ 1835.846435][T24225] ? ia32_sys_call+0x2544/0x42c0 [ 1835.851538][T24225] ? __do_fast_syscall_32+0xb0/0x150 [ 1835.856998][T24225] ? do_fast_syscall_32+0x38/0x80 [ 1835.862194][T24225] ? do_SYSENTER_32+0x1f/0x30 [ 1835.867035][T24225] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1835.873743][T24225] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1835.880213][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1835.885492][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1835.890766][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1835.896037][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1835.902042][T24225] ? batadv_meshif_is_valid+0x81/0x90 [ 1835.907588][T24225] ? filter_irq_stacks+0x49/0x190 [ 1835.912868][T24225] ? stack_depot_save_flags+0x35/0x7b0 [ 1835.918609][T24225] ? packet_rcv+0x1c2f/0x20b0 [ 1835.923508][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1835.928793][T24225] __msan_warning+0x1b/0x30 [ 1835.933443][T24225] batadv_get_vid+0x2d0/0x3b0 [ 1835.938276][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1835.944267][T24225] batadv_interface_tx+0x2e9/0x1e60 [ 1835.949637][T24225] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1835.956176][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1835.961450][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1835.967422][T24225] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1835.973229][T24225] dev_hard_start_xmit+0x22c/0xa30 [ 1835.978544][T24225] __dev_queue_xmit+0x3cb4/0x5e20 [ 1835.983739][T24225] ? skb_release_data+0xa12/0xac0 [ 1835.988927][T24225] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1835.995393][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.000665][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.006636][T24225] ? __dev_queue_xmit+0x30c/0x5e20 [ 1836.011957][T24225] __bpf_redirect+0x162d/0x1760 [ 1836.016990][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.022287][T24225] bpf_clone_redirect+0x366/0x530 [ 1836.027508][T24225] ___bpf_prog_run+0x1297/0xeba0 [ 1836.032642][T24225] __bpf_prog_run512+0xc5/0x100 [ 1836.037676][T24225] ? __cond_resched+0xb9/0x130 [ 1836.042699][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.048687][T24225] ? preempt_schedule_irq+0xa1/0x110 [ 1836.054201][T24225] ? stack_depot_save_flags+0x35/0x7b0 [ 1836.059855][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.065132][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.070402][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.076383][T24225] ? ktime_get+0x530/0x590 [ 1836.081042][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.086326][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.091608][T24225] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1836.098149][T24225] ? kmsan_get_metadata+0x150/0x160 [ 1836.103508][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.109479][T24225] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1836.115114][T24225] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1836.120739][T24225] bpf_test_run+0x350/0xab0 [ 1836.125405][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.130679][T24225] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1836.137224][T24225] ? kmsan_get_metadata+0xfb/0x160 [ 1836.142496][T24225] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.148472][T24225] ? bpf_test_run+0x1b0/0xab0 [ 1836.153362][T24225] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1836.159066][T24225] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1836.165060][T24225] bpf_prog_test_run+0x5bf/0xa40 [ 1836.170199][T24225] __sys_bpf+0x6ca/0xe60 [ 1836.174641][T24225] __ia32_sys_bpf+0xa4/0xf0 [ 1836.179300][T24225] ia32_sys_call+0x2544/0x42c0 [ 1836.184230][T24225] __do_fast_syscall_32+0xb0/0x150 [ 1836.189526][T24225] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1836.195420][T24225] do_fast_syscall_32+0x38/0x80 [ 1836.200438][T24225] do_SYSENTER_32+0x1f/0x30 [ 1836.205101][T24225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1836.211626][T24225] RIP: 0023:0xf704e539 [ 1836.215819][T24225] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1836.235605][T24225] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1836.244200][T24225] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 1836.252312][T24225] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1836.260413][T24225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1836.268510][T24225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1836.276607][T24225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1836.284733][T24225] [ 1836.288138][T24225] Kernel Offset: disabled [ 1836.292533][T24225] Rebooting in 86400 seconds..