last executing test programs: 12m7.979402792s ago: executing program 32 (id=31): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x40000000) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)}, 0x10102) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) io_uring_enter(0xffffffffffffffff, 0x64f7, 0x32aa, 0xc, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x4) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, 0x0) 12m7.471919944s ago: executing program 33 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) 12m6.961755375s ago: executing program 34 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x4) 12m5.473017499s ago: executing program 35 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c000180080001406401"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 7m46.061369684s ago: executing program 4 (id=1567): syz_emit_ethernet(0x6f, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x39, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}], "1e"}}}}}}}, 0x0) 7m45.807550919s ago: executing program 4 (id=1571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000040), 0x0) 7m43.487458712s ago: executing program 4 (id=1588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000580)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) set_mempolicy(0x8000, &(0x7f0000000080)=0x5, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 7m41.957784443s ago: executing program 6 (id=1604): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback}]}, &(0x7f0000000100)=0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 7m41.690161547s ago: executing program 4 (id=1607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c6314, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m41.493247726s ago: executing program 4 (id=1610): openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @remote}}) io_uring_enter(r3, 0x3532, 0x32c9, 0x45, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8}) r7 = syz_open_dev$vcsu(&(0x7f0000000c80), 0xffffffff, 0xc0000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000cc0)={0x0, 0x1f9, 0x400, 0x2, 0x291, 0x0, r3}, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) 7m39.224022352s ago: executing program 6 (id=1628): clock_adjtime(0x6, &(0x7f00000004c0)={0x10, 0x1, 0x8001, 0x3, 0x6f7, 0x8, 0x956, 0x2, 0x5, 0x9, 0x4, 0x9, 0xe, 0xff, 0x8, 0x4, 0x2, 0x4, 0xe0000000, 0x6, 0x0, 0x1, 0x2, 0x0, 0xb3, 0x10000}) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/43, 0x2b}, {&(0x7f0000000180)="f7bfadd03266fedbf2b28619def46c675ed4086291896af5556c3848e4f09ce8b027d160c2219644685e8ba3c8124972f9f3fb72a3a19b374560b2dadd6a4b02a9f775e955f75b9834e99896b1da397b96c0b3f97f48f39e187d6d90bf5cc7c64a4f76e30cc289f37f1ce74ec3047659225bd0b2", 0x74}], 0x1000000000000059) 7m39.027502987s ago: executing program 6 (id=1631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000bc0)=""/4083, 0xff3}, {&(0x7f0000000880)=""/141, 0x8d}], 0x3}, 0x75b}], 0x1, 0x40000042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x1000, 0x8000, 0x2, 0x3de}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(0x0, 0x3) ftruncate(r6, 0xffff) close(0x3) fcntl$addseals(r6, 0x409, 0x3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000001c0)={r6, 0x1, 0x0, 0x8000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000fe"], 0x55117e) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800fa7f1400020076c1429b97fb78e2e8"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7m38.937735956s ago: executing program 4 (id=1633): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x4, @empty}}}, 0x84) r3 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9002) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7fff, 0xfffffffffffffffc, 0x9, 0xf79d, 0x9, 0x0, 0x0, 0x8, 0x6, 0xffffffffffff10ab, 0x4, 0x3, 0x4, 0x5, 0x8000000000000001], 0x2, 0xa0283}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 7m38.813294244s ago: executing program 6 (id=1634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c6314, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m38.638550876s ago: executing program 6 (id=1638): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 7m34.755442355s ago: executing program 6 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6}, 0x100) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2000, 0x0) 7m27.037956335s ago: executing program 36 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 7m23.858366691s ago: executing program 37 (id=1633): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x4, @empty}}}, 0x84) r3 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9002) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7fff, 0xfffffffffffffffc, 0x9, 0xf79d, 0x9, 0x0, 0x0, 0x8, 0x6, 0xffffffffffff10ab, 0x4, 0x3, 0x4, 0x5, 0x8000000000000001], 0x2, 0xa0283}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 7m19.676185156s ago: executing program 38 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6}, 0x100) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2000, 0x0) 3m12.491656487s ago: executing program 7 (id=4097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a", 0x8e}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}], 0x2, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ffd, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) 3m9.974756494s ago: executing program 7 (id=4119): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) r2 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011", 0x83) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3m8.548748208s ago: executing program 7 (id=4136): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}, 0x40) 3m8.265006519s ago: executing program 7 (id=4140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79"], 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev, @in=@private}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x20}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}]}, 0x104}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) 3m7.061535298s ago: executing program 2 (id=4162): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m6.873826053s ago: executing program 2 (id=4164): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @private=0xa010101}, "001963712e9b1c03"}}}}}, 0x0) 3m6.737308648s ago: executing program 2 (id=4166): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x891d, &(0x7f0000000100)) 3m6.318061566s ago: executing program 2 (id=4172): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xa, 0xe}, {0xe, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m5.933583571s ago: executing program 2 (id=4177): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3m5.6468947s ago: executing program 7 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf10000000000000160002000ee600f03d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee60070670200001f000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x40801) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3m5.419207986s ago: executing program 7 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x7c02}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 3m5.318006451s ago: executing program 1 (id=4188): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81", 0x6d}, {0x0}, {0x0}], 0x3}}], 0x2, 0x2090) 3m5.201710953s ago: executing program 1 (id=4189): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a0300000000000000000000000000000000000c3b030000000000000000000a0000080900010073797a3100000000140000001100010000000000000000000a00000a75e78a31b70ef176ff07a95be978cba52ac1c246a609f7233b008e35a77eeb132a7f907bc570f0b264fb0caa5e00d114df89d5e7e1a3cd9e5aa3461790ce0d127dff81f55603dfcd7f0ec86a331d788978643ddbda73407c"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedb9f257befffff07000300", @ANYRES32=r5, @ANYBLOB="0c009900ff0f00000e00000014000201ef47ae481bbb3e531df26cdfe06566f01400fe000949b281b9a8c6d08b116ebbaedc6d510a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000140002014162788eeb6289916d90d09542ea978e"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0xfffffd15}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x3, @dev}, 0x2}}, 0x2e) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40810) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) 3m4.526195449s ago: executing program 2 (id=4195): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 3m4.20531672s ago: executing program 1 (id=4201): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) writev(r0, &(0x7f00000036c0)=[{&(0x7f00000033c0)="930802", 0x3}], 0x1) 3m3.997661341s ago: executing program 1 (id=4206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x180800) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3m2.560698676s ago: executing program 1 (id=4224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 3m2.31758969s ago: executing program 1 (id=4229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 2m50.351213133s ago: executing program 39 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x7c02}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 2m49.435444952s ago: executing program 40 (id=4195): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 2m47.304779934s ago: executing program 41 (id=4229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 16.326233416s ago: executing program 8 (id=6048): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 16.044255248s ago: executing program 8 (id=6051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r3, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20001800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) r9 = socket(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r9, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r9, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r9, &(0x7f0000000000)='\"', 0x1) recvmmsg(r9, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x5d, 0x68, &(0x7f0000000580)="b4337679403b30d48528a85fddc92460d189c874c197448bb232a6404b2ebb440dcd4e1a311e395add3a49b728d770b9d6c4d9c3911f679770a3b45a28fd24e7eea71489459dcf10f14ce9a02803bd76cbefcce8dbaef378bec169d0d0", &(0x7f0000000600)="ed9aeb033c9d06a657e0c6411613c2a0e3cb672eacf5464a6f01aaa308c8d746b6cf71c5dbafb3e474f1c678163719bd461a38f34195a42bc9a518b296a9d030f30c590c79ae49f49142484a54b9946b319b7f03ac29e7a6585f96951216e668e8c719395668c5af", 0x6, 0x0, 0x230}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x805) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8.364710829s ago: executing program 8 (id=6105): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1, 0x5, 0x0) socket(0x10, 0x803, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.121174127s ago: executing program 8 (id=6107): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x10}}], 0x30, 0x40044}}], 0x1, 0x4) 7.985184264s ago: executing program 8 (id=6109): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 3.247414759s ago: executing program 9 (id=6146): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 3.055572806s ago: executing program 9 (id=6148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.801612015s ago: executing program 9 (id=6152): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1, 0x5, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.732131603s ago: executing program 5 (id=6153): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1}]}, 0x10) close(r5) recvmsg(r5, &(0x7f0000000780)={&(0x7f00000001c0)=@ieee802154, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/206, 0xce}, {0x0}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/3, 0x3}], 0xa, &(0x7f00000006c0)=""/158, 0x9e}, 0x40000121) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 2.516630557s ago: executing program 3 (id=6154): sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c2"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xffff, 0xffff}, {0xfff3, 0xfff2}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.346554667s ago: executing program 3 (id=6155): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r4, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @local, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) 2.034536851s ago: executing program 5 (id=6157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x10000, 0x0, 0x17f}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20008001) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd={0x6}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @ptr={0x4}]}}, &(0x7f0000000400)=""/138, 0x3e, 0x8a, 0x0, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000011500000900000081000000a0", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="0200000004000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 1.929713705s ago: executing program 0 (id=6158): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 1.832624675s ago: executing program 3 (id=6159): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 1.641778549s ago: executing program 3 (id=6160): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket(0x2c, 0x80000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) 1.641393867s ago: executing program 0 (id=6161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) 1.604131905s ago: executing program 9 (id=6162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) 1.533782166s ago: executing program 9 (id=6163): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.484587427s ago: executing program 0 (id=6164): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func_proto, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x30, 0x30, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x7}, 0x28) 1.437441342s ago: executing program 3 (id=6165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x13c}, {&(0x7f0000000d00)}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="93b7", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f0c1e46e8a28808a12162eda3aa4e73a42c62d23eaf972f3e30f61eaf203c75415ae3012da85e0a3924b33087dc250153eb92e31b6a4a22c42103aa33c52e82dfef0b0d76f856552e57714df2501ced8905cf95bd7a34209d53f790c0406b8fe646ebac1b19b6fd606f1d27f1f4a73433cf61a3d9d25a7414d7077d1bf501645081f7f7cb54c0e77a01288009fd934f5495600e83e4911fab7f2b0fd7646ca1c234ef270a80d9b2dd758deb3d97e6d291b6527dabc56f3b1177b67", 0xbb}, {0x0}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8044", 0x2}, {&(0x7f00000011c0)="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", 0x136}, {&(0x7f0000000440)="650f831848ea9f160d1d7f444cfd99415b2f5170be0137b35709344f7e8b3bdaa34afabb342681d4288524186e00bc31054c05a573643ec5b28611ba14b4c593c52c03d73b9389bc1fff48443bfcd60aadc5b0336667230a5f1aa29e4c", 0x5d}], 0x3, &(0x7f0000000540)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x50}}], 0x6, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.367941707s ago: executing program 3 (id=6166): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000080)='./bus\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioprio_set$pid(0x3, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) r4 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x2c, r7, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 1.32005242s ago: executing program 0 (id=6167): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 1.233414154s ago: executing program 0 (id=6168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 1.230593074s ago: executing program 9 (id=6169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$FOU_CMD_GET(r2, 0x0, 0x44010) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 777.700882ms ago: executing program 8 (id=6170): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x2, 0x0, 0x0) 762.015198ms ago: executing program 5 (id=6171): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffa}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x4a00, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x4a}, 0x3548}}}]}, 0x78}}, 0x0) 666.25515ms ago: executing program 0 (id=6172): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a0300000000000000000000000000000000000c3b030000000000000000000a0000080900010073797a3100000000140000001100010000000000000000000a00000a75e78a31b70ef176ff07a95be978cba52ac1c246a609f7233b008e35a77eeb132a7f907bc570f0b264fb0caa5e00d114df89d5e7e1a3cd9e5aa3461790ce0d127dff81f55603dfcd7f0ec86a331d788978643ddbda73407c"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedb9f257befffff07000300", @ANYRES32=r4, @ANYBLOB="0c009900ff0f00000e00000014000201ef47ae481bbb3e531df26cdfe06566f01400fe000949b281b9a8c6d08b116ebbaedc6d510a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000140002014162788eeb6289916d90d09542ea978e"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0xfffffd15}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x3, @dev}, 0x2}}, 0x2e) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40810) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 500.59222ms ago: executing program 5 (id=6173): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x800) 175.30783ms ago: executing program 5 (id=6174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) 0s ago: executing program 5 (id=6175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001840)="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", 0x7c2}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000) kernel console output (not intermixed with test programs): using dummy_hcd [ 579.515990][ T811] usb 2-1: Using ep0 maxpacket: 8 [ 579.535864][ T811] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 579.535891][ T811] usb 2-1: config 0 has no interface number 0 [ 579.535932][ T811] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.535956][ T811] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.535979][ T811] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.536002][ T811] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.536039][ T811] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.536061][ T811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.539524][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3440'. [ 579.567727][ T811] usb 2-1: config 0 descriptor?? [ 579.664784][ T811] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 579.839362][T16070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.839978][T16070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.842856][T16070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.885731][ T811] usb 2-1: USB disconnect, device number 7 [ 579.889079][ T811] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 580.906832][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3459'. [ 581.998793][T16140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3474'. [ 582.465632][ T5866] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 582.620887][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.620916][ T5866] usb 2-1: config 0 has no interface number 0 [ 582.623032][ T5866] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 582.623053][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.623063][ T5866] usb 2-1: Product: syz [ 582.623070][ T5866] usb 2-1: Manufacturer: syz [ 582.623077][ T5866] usb 2-1: SerialNumber: syz [ 582.627635][ T5866] usb 2-1: config 0 descriptor?? [ 582.683819][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3481'. [ 582.893867][ T5866] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 582.956788][ T5866] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.957120][ T5866] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 582.957169][ T5866] usb 2-1: media controller created [ 583.046895][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.958923][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3490'. [ 584.209198][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 584.214675][ T5866] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 584.722807][ T5866] usb 2-1: USB disconnect, device number 8 [ 585.385894][T11178] Bluetooth: hci2: command 0x0401 tx timeout [ 585.703378][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 585.703396][ T37] audit: type=1326 audit(1772219058.279:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703438][ T37] audit: type=1326 audit(1772219058.279:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703463][ T37] audit: type=1326 audit(1772219058.279:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff732bfcfce code=0x7ffc0000 [ 585.703486][ T37] audit: type=1326 audit(1772219058.279:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703508][ T37] audit: type=1326 audit(1772219058.289:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703530][ T37] audit: type=1326 audit(1772219058.289:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703551][ T37] audit: type=1326 audit(1772219058.289:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703573][ T37] audit: type=1326 audit(1772219058.289:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 585.703595][ T37] audit: type=1326 audit(1772219058.289:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff732bfcfce code=0x7ffc0000 [ 585.703616][ T37] audit: type=1326 audit(1772219058.289:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16208 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732c3c799 code=0x7ffc0000 [ 586.863644][T16241] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 586.863669][T16241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 586.923534][T16241] vhci_hcd vhci_hcd.0: Device attached [ 586.948725][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3509'. [ 587.275679][ T5866] usb 48-1: SetAddress Request (6) to port 0 [ 587.275756][ T5866] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 588.138346][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3525'. [ 588.256449][T16274] netlink: 'syz.1.3524': attribute type 13 has an invalid length. [ 588.256471][T16274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3524'. [ 588.319395][T16266] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 589.109686][T16270] vlan2: entered promiscuous mode [ 589.109702][T16270] syz_tun: entered promiscuous mode [ 590.281431][T16246] vhci_hcd: connection reset by peer [ 590.281789][T14075] vhci_hcd vhci_hcd.7: stop threads [ 590.281813][T14075] vhci_hcd vhci_hcd.7: release socket [ 590.286199][T14075] vhci_hcd vhci_hcd.7: disconnect device [ 591.170114][T16329] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3547'. [ 591.187595][T16329] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3547'. [ 592.345837][ T5866] usb 48-1: device descriptor read/8, error -110 [ 592.759846][ T5866] usb usb48-port1: attempt power cycle [ 592.767921][T16369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 592.767946][T16369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 592.770377][T16369] vhci_hcd vhci_hcd.0: Device attached [ 592.782158][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3554'. [ 593.105734][ T10] usb 36-1: SetAddress Request (6) to port 0 [ 593.105790][ T10] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 593.346610][ T5866] usb usb48-port1: unable to enumerate USB device [ 595.030015][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3569'. [ 595.154562][T16423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.146507][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 596.146528][ T37] audit: type=1326 audit(1772219068.679:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146574][ T37] audit: type=1326 audit(1772219068.689:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253b4fcfce code=0x7ffc0000 [ 596.146615][ T37] audit: type=1326 audit(1772219068.689:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146654][ T37] audit: type=1326 audit(1772219068.689:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146694][ T37] audit: type=1326 audit(1772219068.689:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146734][ T37] audit: type=1326 audit(1772219068.689:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146775][ T37] audit: type=1326 audit(1772219068.689:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146824][ T37] audit: type=1326 audit(1772219068.689:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f253b4fcfce code=0x7ffc0000 [ 596.146864][ T37] audit: type=1326 audit(1772219068.689:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.146903][ T37] audit: type=1326 audit(1772219068.689:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16439 comm="syz.9.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f253b53c799 code=0x7ffc0000 [ 596.191451][T16370] vhci_hcd: connection reset by peer [ 596.234290][T14081] vhci_hcd vhci_hcd.1: stop threads [ 596.234309][T14081] vhci_hcd vhci_hcd.1: release socket [ 596.234355][T14081] vhci_hcd vhci_hcd.1: disconnect device [ 597.104437][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3591'. [ 598.185701][ T10] usb 36-1: device descriptor read/8, error -110 [ 598.451473][T16465] 8021q: VLANs not supported on ip6gre0 [ 598.587843][ T10] usb usb36-port1: attempt power cycle [ 599.027746][T16536] netlink: 'syz.9.3617': attribute type 13 has an invalid length. [ 599.027769][T16536] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3617'. [ 599.168590][ T10] usb usb36-port1: unable to enumerate USB device [ 600.327009][T16565] syzkaller0: entered promiscuous mode [ 600.327025][T16565] syzkaller0: entered allmulticast mode [ 600.793627][T16573] IPv4: Oversized IP packet from 127.202.26.0 [ 601.059685][T16581] syzkaller1: entered promiscuous mode [ 601.059710][T16581] syzkaller1: entered allmulticast mode [ 601.292176][T16595] Bluetooth: MGMT ver 1.23 [ 602.403642][T16545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.414975][ T811] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 602.588981][ T811] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 602.589010][ T811] usb 10-1: config 0 has no interface number 0 [ 602.591448][ T811] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 602.591475][ T811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.591493][ T811] usb 10-1: Product: syz [ 602.591505][ T811] usb 10-1: Manufacturer: syz [ 602.591517][ T811] usb 10-1: SerialNumber: syz [ 602.648136][ T811] usb 10-1: config 0 descriptor?? [ 603.008903][ T811] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 603.182747][ T10] usb 10-1: USB disconnect, device number 8 [ 603.388212][T16652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3669'. [ 604.025756][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 604.025776][ T37] audit: type=1326 audit(1772219076.589:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.025823][ T37] audit: type=1326 audit(1772219076.589:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3afecfce code=0x7ffc0000 [ 604.025864][ T37] audit: type=1326 audit(1772219076.589:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.025903][ T37] audit: type=1326 audit(1772219076.589:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.025950][ T37] audit: type=1326 audit(1772219076.589:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.025991][ T37] audit: type=1326 audit(1772219076.589:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.026032][ T37] audit: type=1326 audit(1772219076.589:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.026071][ T37] audit: type=1326 audit(1772219076.589:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3afecfce code=0x7ffc0000 [ 604.026113][ T37] audit: type=1326 audit(1772219076.599:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.026155][ T37] audit: type=1326 audit(1772219076.599:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16661 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 604.137661][T16680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.521594][T16694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3688'. [ 605.075714][T12775] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 605.154195][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'. [ 605.166706][T16714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3698'. [ 605.237927][T12775] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 605.237954][T12775] usb 2-1: config 0 has no interface number 0 [ 605.240918][T12775] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 605.240946][T12775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.240966][T12775] usb 2-1: Product: syz [ 605.240979][T12775] usb 2-1: Manufacturer: syz [ 605.240992][T12775] usb 2-1: SerialNumber: syz [ 605.290287][T12775] usb 2-1: config 0 descriptor?? [ 605.431744][T16720] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 605.586025][T12775] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 605.769807][T13552] usb 2-1: USB disconnect, device number 9 [ 606.360239][T16746] vxcan1: entered promiscuous mode [ 606.388917][T16744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3710'. [ 607.224285][T16777] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 607.255056][T16779] syzkaller1: entered promiscuous mode [ 607.255082][T16779] syzkaller1: entered allmulticast mode [ 607.558436][T16807] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3725'. [ 607.936495][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3728'. [ 608.474350][T16844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3739'. [ 608.761499][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'. [ 608.784473][T16860] syzkaller1: entered promiscuous mode [ 608.784498][T16860] syzkaller1: entered allmulticast mode [ 609.168620][T16881] netlink: 'syz.9.3750': attribute type 11 has an invalid length. [ 609.168642][T16881] netlink: 'syz.9.3750': attribute type 23 has an invalid length. [ 609.168655][T16881] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3750'. [ 609.954249][T16908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3763'. [ 610.808540][T16939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3775'. [ 611.170005][T16947] syzkaller1: entered promiscuous mode [ 611.170030][T16947] syzkaller1: entered allmulticast mode [ 611.335636][T12775] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 611.545466][T12775] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 611.545943][T12775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.545968][T12775] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.546009][T12775] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 611.546029][T12775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.563659][T12775] usb 2-1: config 0 descriptor?? [ 612.672169][T12775] ath6kl: Failed to submit usb control message: -110 [ 612.672218][T12775] ath6kl: unable to send the bmi data to the device: -110 [ 612.672233][T12775] ath6kl: Unable to send get target info: -110 [ 612.674563][T12775] ath6kl: Failed to init ath6kl core: -110 [ 612.675093][T12775] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 612.980301][T16983] netlink: 'syz.2.3787': attribute type 11 has an invalid length. [ 612.980324][T16983] netlink: 'syz.2.3787': attribute type 23 has an invalid length. [ 612.980339][T16983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3787'. [ 614.066792][T17004] syzkaller1: entered promiscuous mode [ 614.066819][T17004] syzkaller1: entered allmulticast mode [ 614.429233][T17025] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 614.846284][T17035] netlink: 'syz.2.3810': attribute type 13 has an invalid length. [ 614.882609][T13552] usb 2-1: USB disconnect, device number 10 [ 614.932143][T17029] IPVS: persistence engine module ip_vs_pe_ not found [ 615.088708][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 615.995725][T17073] netlink: 'syz.9.3819': attribute type 11 has an invalid length. [ 615.995748][T17073] netlink: 'syz.9.3819': attribute type 23 has an invalid length. [ 615.995761][T17073] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3819'. [ 617.613050][T17114] macsec1: entered promiscuous mode [ 617.613074][T17114] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 622.370565][T17262] netlink: 18 bytes leftover after parsing attributes in process `syz.1.3888'. [ 622.770723][T17270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3891'. [ 622.770964][T17270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3891'. [ 623.285775][ T5193] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 623.468392][ T5193] usb 2-1: Using ep0 maxpacket: 32 [ 623.473973][ T5193] usb 2-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 623.474001][ T5193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.479732][ T5193] usb 2-1: config 0 descriptor?? [ 623.501921][ T5193] uvcvideo 2-1:0.0: Found UVC 0.00 device (0458:706e) [ 623.501953][ T5193] uvcvideo 2-1:0.0: No valid video chain found. [ 623.719432][T13552] usb 2-1: USB disconnect, device number 11 [ 623.755861][ T5866] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 623.905727][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 623.908668][ T5866] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 623.908735][ T5866] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.908757][ T5866] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.908779][ T5866] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.908800][ T5866] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.908836][ T5866] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 623.908858][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.157553][ T5866] usb 8-1: usb_control_msg returned -32 [ 624.157602][ T5866] usbtmc 8-1:16.0: can't read capabilities [ 624.275242][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.275303][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.310655][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3908'. [ 624.336298][T17321] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3908'. [ 624.865988][T17347] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 624.922145][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.922688][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.480983][ T995] usb 8-1: USB disconnect, device number 24 [ 626.562076][T17421] netlink: 'syz.1.3939': attribute type 2 has an invalid length. [ 626.979272][T17442] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3947'. [ 627.205818][ T5866] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 627.355615][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 627.357926][ T5866] usb 8-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 627.357954][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.399510][ T5866] usb 8-1: config 0 descriptor?? [ 627.431036][ T5866] uvcvideo 8-1:0.0: Found UVC 0.00 device (0458:706e) [ 627.431070][ T5866] uvcvideo 8-1:0.0: No valid video chain found. [ 627.545787][ T995] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 627.637801][ T5877] usb 8-1: USB disconnect, device number 25 [ 627.725564][ T995] usb 3-1: Using ep0 maxpacket: 8 [ 627.766073][ T995] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 627.766130][ T995] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.766154][ T995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.766176][ T995] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.766206][ T995] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.766243][ T995] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 627.766265][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.992737][ T995] usb 3-1: usb_control_msg returned -32 [ 627.992827][ T995] usbtmc 3-1:16.0: can't read capabilities [ 628.567413][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3959'. [ 628.785307][T17496] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 628.840984][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.841514][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.352714][T17524] netlink: 'syz.7.3964': attribute type 2 has an invalid length. [ 629.435256][T17528] netlink: 'syz.1.3966': attribute type 3 has an invalid length. [ 629.451340][T17528] netlink: 'syz.1.3966': attribute type 3 has an invalid length. [ 630.056306][T17543] block nbd0: not configured, cannot reconfigure [ 631.245662][T17574] syz_tun: entered allmulticast mode [ 631.320719][T17573] syz_tun: left allmulticast mode [ 631.337385][T13552] usb 3-1: USB disconnect, device number 20 [ 633.715962][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 633.868990][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 633.871013][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 633.871067][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.871084][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.871096][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.871108][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.871131][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 633.871142][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.183367][ T10] usb 8-1: usb_control_msg returned -32 [ 634.195896][ T10] usbtmc 8-1:16.0: can't read capabilities [ 634.920005][T17681] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 634.972661][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.973138][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.522012][T17617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.089298][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'. [ 636.113994][T17723] vlan2: entered promiscuous mode [ 636.114013][T17723] ip6gretap0: entered promiscuous mode [ 636.155929][ T995] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 636.362770][ T995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 636.362800][ T995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 636.362823][ T995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 636.362881][ T995] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 636.362903][ T995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.450169][ T995] usb 10-1: config 0 descriptor?? [ 636.452161][T17719] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 636.585143][T13552] usb 8-1: USB disconnect, device number 26 [ 636.690469][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 636.866432][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 636.871276][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 636.871306][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.924128][ T10] usb 2-1: config 0 descriptor?? [ 636.942187][ T10] uvcvideo 2-1:0.0: Found UVC 0.00 device (0458:706e) [ 636.942208][ T10] uvcvideo 2-1:0.0: No valid video chain found. [ 637.302619][ T10] usb 2-1: USB disconnect, device number 12 [ 637.547095][ T995] ath6kl: Failed to submit usb control message: -110 [ 637.547144][ T995] ath6kl: unable to send the bmi data to the device: -110 [ 637.547158][ T995] ath6kl: Unable to send get target info: -110 [ 637.593789][ T995] ath6kl: Failed to init ath6kl core: -110 [ 637.595405][ T995] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 638.192207][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 638.760742][T17765] netlink: 'syz.1.4062': attribute type 3 has an invalid length. [ 640.336915][T13552] usb 10-1: USB disconnect, device number 9 [ 641.200947][T17840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4088'. [ 641.769634][T17866] block nbd0: not configured, cannot reconfigure [ 641.955638][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 641.955655][ T37] audit: type=1326 audit(1772219114.559:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955685][T11178] Bluetooth: hci2: command 0x0401 tx timeout [ 641.955700][ T37] audit: type=1326 audit(1772219114.559:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3afecfce code=0x7ffc0000 [ 641.955737][ T37] audit: type=1326 audit(1772219114.559:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955774][ T37] audit: type=1326 audit(1772219114.559:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955859][ T37] audit: type=1326 audit(1772219114.559:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955897][ T37] audit: type=1326 audit(1772219114.559:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955939][ T37] audit: type=1326 audit(1772219114.559:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.955976][ T37] audit: type=1326 audit(1772219114.559:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3afecfce code=0x7ffc0000 [ 641.956015][ T37] audit: type=1326 audit(1772219114.559:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 641.956056][ T37] audit: type=1326 audit(1772219114.559:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17861 comm="syz.7.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feb3b02c799 code=0x7ffc0000 [ 642.446041][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4102'. [ 642.632481][T17877] vlan2: entered promiscuous mode [ 642.632497][T17877] ip6gretap0: entered promiscuous mode [ 644.219812][T17911] syz_tun: entered allmulticast mode [ 644.221098][T17909] syz_tun: left allmulticast mode [ 644.430962][T17914] bridge_slave_0: left allmulticast mode [ 644.430990][T17914] bridge_slave_0: left promiscuous mode [ 644.464188][T17914] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.637740][T17914] bridge_slave_1: left allmulticast mode [ 644.637768][T17914] bridge_slave_1: left promiscuous mode [ 644.640908][T17914] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.810185][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4125'. [ 644.839962][T17914] bond0: (slave bond_slave_0): Releasing backup interface [ 644.916406][T17914] bond0: (slave bond_slave_1): Releasing backup interface [ 645.023744][T17914] team0: Port device team_slave_0 removed [ 645.125199][T17914] team0: Port device team_slave_1 removed [ 645.126852][T17914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.126877][T17914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.182063][T17914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.182092][T17914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.229718][T17914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.854306][T18008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.910481][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4172'. [ 647.910504][T18045] netlink: 'syz.2.4172': attribute type 21 has an invalid length. [ 647.993102][ T8550] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.993214][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4172'. [ 647.993239][T18045] netlink: 'syz.2.4172': attribute type 21 has an invalid length. [ 647.994374][ T8550] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.997340][ T8550] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.999762][ T8550] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.040003][T18047] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4173'. [ 648.445729][ T5877] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 648.605588][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 648.608684][ T5877] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 648.608707][ T5877] usb 10-1: config 0 has no interface number 0 [ 648.608747][ T5877] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 648.608766][ T5877] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 648.608787][ T5877] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.608810][ T5877] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 648.608845][ T5877] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 648.608865][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.703213][ T5877] usb 10-1: config 0 descriptor?? [ 648.726155][ T5877] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 649.012431][T18085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.014269][T18085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.025345][T18054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.077963][ T5877] usb 10-1: USB disconnect, device number 10 [ 649.097325][T18073] syzkaller0: entered promiscuous mode [ 649.097352][T18073] syzkaller0: entered allmulticast mode [ 649.108102][ T5877] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 652.003622][T18182] netlink: 'syz.1.4229': attribute type 11 has an invalid length. [ 652.003644][T18182] netlink: 'syz.1.4229': attribute type 23 has an invalid length. [ 652.003657][T18182] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4229'. [ 655.118570][T11178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 655.159288][T11178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 655.168077][T11178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 655.170666][T11178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 655.171845][T11178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 657.225962][ T5805] Bluetooth: hci5: command tx timeout [ 659.305900][ T5805] Bluetooth: hci5: command tx timeout [ 661.396245][ T5805] Bluetooth: hci5: command tx timeout [ 663.466190][ T5805] Bluetooth: hci5: command tx timeout [ 663.975135][T11178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.012283][T11178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.015106][T11178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.036078][T11178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.059866][T11178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.851380][T11178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.855020][T11178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.888441][T11178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.912635][T11178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.914921][T11178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.105884][ T5805] Bluetooth: hci2: command tx timeout [ 666.985914][ T5805] Bluetooth: hci6: command tx timeout [ 667.121535][T11178] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 667.155713][T11178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 667.185853][T11178] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 667.214681][T11178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 667.237436][T11178] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 668.195666][T11178] Bluetooth: hci2: command tx timeout [ 668.893403][T14074] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.068167][T11178] Bluetooth: hci6: command tx timeout [ 669.289187][T14074] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.306341][T11178] Bluetooth: hci7: command tx timeout [ 669.671619][T14074] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.128691][T14074] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.266153][T11178] Bluetooth: hci2: command tx timeout [ 670.915398][T18319] chnl_net:caif_netlink_parms(): no params data found [ 671.029056][T18659] chnl_net:caif_netlink_parms(): no params data found [ 671.134696][T18632] chnl_net:caif_netlink_parms(): no params data found [ 671.145591][T11178] Bluetooth: hci6: command tx timeout [ 671.274193][T14074] bridge_slave_1: left allmulticast mode [ 671.274222][T14074] bridge_slave_1: left promiscuous mode [ 671.274445][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.367114][T14074] bridge_slave_0: left allmulticast mode [ 671.367143][T14074] bridge_slave_0: left promiscuous mode [ 671.367392][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.386092][T11178] Bluetooth: hci7: command tx timeout [ 672.346737][T11178] Bluetooth: hci2: command tx timeout [ 672.467624][T14074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.537421][T14074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.599447][T14074] bond0 (unregistering): Released all slaves [ 672.780896][T18736] chnl_net:caif_netlink_parms(): no params data found [ 673.225944][T11178] Bluetooth: hci6: command tx timeout [ 673.465748][T11178] Bluetooth: hci7: command tx timeout [ 673.632913][T18319] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.633090][T18319] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.633294][T18319] bridge_slave_0: entered allmulticast mode [ 673.636703][T18319] bridge_slave_0: entered promiscuous mode [ 674.034044][T18319] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.034160][T18319] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.034405][T18319] bridge_slave_1: entered allmulticast mode [ 674.038355][T18319] bridge_slave_1: entered promiscuous mode [ 674.056740][T18659] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.056856][T18659] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.057166][T18659] bridge_slave_0: entered allmulticast mode [ 674.059676][T18659] bridge_slave_0: entered promiscuous mode [ 674.271938][T18659] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.272080][T18659] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.272281][T18659] bridge_slave_1: entered allmulticast mode [ 674.274526][T18659] bridge_slave_1: entered promiscuous mode [ 674.295855][T18632] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.295974][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.296216][T18632] bridge_slave_0: entered allmulticast mode [ 674.298578][T18632] bridge_slave_0: entered promiscuous mode [ 674.451765][T18632] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.451883][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.452077][T18632] bridge_slave_1: entered allmulticast mode [ 674.470814][T18632] bridge_slave_1: entered promiscuous mode [ 674.659933][T14074] hsr_slave_0: left promiscuous mode [ 674.701433][T14074] hsr_slave_1: left promiscuous mode [ 674.702494][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.702517][T14074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.747027][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.747053][T14074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.842152][T14074] veth1_macvtap: left promiscuous mode [ 674.842218][T14074] veth0_macvtap: left promiscuous mode [ 675.545737][T11178] Bluetooth: hci7: command tx timeout [ 675.722400][T14074] team0 (unregistering): Port device team_slave_1 removed [ 675.778768][T14074] team0 (unregistering): Port device team_slave_0 removed [ 676.222126][T18319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.338551][T18736] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.338638][T18736] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.338773][T18736] bridge_slave_0: entered allmulticast mode [ 676.340211][T18736] bridge_slave_0: entered promiscuous mode [ 676.388676][T18319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.396978][T18659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.436237][T18736] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.436355][T18736] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.436545][T18736] bridge_slave_1: entered allmulticast mode [ 676.439154][T18736] bridge_slave_1: entered promiscuous mode [ 676.556895][T18659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.575437][T18632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.732697][T18632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.760487][T18319] team0: Port device team_slave_0 added [ 676.827450][T18736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.830862][T18319] team0: Port device team_slave_1 added [ 676.854346][T18659] team0: Port device team_slave_0 added [ 676.902275][T18736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.944080][T18659] team0: Port device team_slave_1 added [ 676.947718][T18632] team0: Port device team_slave_0 added [ 677.067301][T18632] team0: Port device team_slave_1 added [ 677.141559][T18319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.141574][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.141600][T18319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.200629][T18736] team0: Port device team_slave_0 added [ 677.201422][T18659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.201437][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.201463][T18659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.202936][T18319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.202949][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.202971][T18319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.262168][T18736] team0: Port device team_slave_1 added [ 677.262945][T18659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.262958][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.262982][T18659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.301425][T18632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.301442][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.301467][T18632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.390151][T18632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.390169][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.390195][T18632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.999034][T18736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.999051][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.999077][T18736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.090499][T18736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.090515][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.090542][T18736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.102578][T18319] hsr_slave_0: entered promiscuous mode [ 678.103975][T18319] hsr_slave_1: entered promiscuous mode [ 678.104867][T18319] debugfs: 'hsr0' already exists in 'hsr' [ 678.104890][T18319] Cannot create hsr debugfs directory [ 678.141378][T18659] hsr_slave_0: entered promiscuous mode [ 678.142639][T18659] hsr_slave_1: entered promiscuous mode [ 678.143525][T18659] debugfs: 'hsr0' already exists in 'hsr' [ 678.143546][T18659] Cannot create hsr debugfs directory [ 678.173634][T14074] IPVS: stop unused estimator thread 0... [ 678.314436][T18632] hsr_slave_0: entered promiscuous mode [ 678.324896][T18632] hsr_slave_1: entered promiscuous mode [ 678.332172][T18632] debugfs: 'hsr0' already exists in 'hsr' [ 678.332197][T18632] Cannot create hsr debugfs directory [ 678.401066][T18736] hsr_slave_0: entered promiscuous mode [ 678.401840][T18736] hsr_slave_1: entered promiscuous mode [ 678.402354][T18736] debugfs: 'hsr0' already exists in 'hsr' [ 678.402383][T18736] Cannot create hsr debugfs directory [ 680.019120][T14074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.383022][T14074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.731948][T14074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.158894][T14074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.119429][T14074] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.580950][T14074] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.718861][T14074] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.903013][T14074] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.574628][T14074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.574665][T14074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.080680][T14074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.080715][T14074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.455251][T14074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.455287][T14074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.738825][T14074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.738860][T14074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.408969][T14074] bridge_slave_1: left allmulticast mode [ 685.408999][T14074] bridge_slave_1: left promiscuous mode [ 685.409249][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.487207][T14074] bridge_slave_0: left allmulticast mode [ 685.487237][T14074] bridge_slave_0: left promiscuous mode [ 685.487475][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.580562][T14074] vlan2: left allmulticast mode [ 685.580585][T14074] ip6gretap0: left allmulticast mode [ 685.580972][T14074] bridge0: port 3(vlan2) entered disabled state [ 685.671239][T14074] bridge_slave_1: left allmulticast mode [ 685.671268][T14074] bridge_slave_1: left promiscuous mode [ 685.671500][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.719471][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.719539][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.770461][T14074] bridge_slave_0: left allmulticast mode [ 685.770489][T14074] bridge_slave_0: left promiscuous mode [ 685.770717][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.766556][T14074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.846648][T14074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.901079][T14074] bond0 (unregistering): Released all slaves [ 688.774188][T14074] bond0 (unregistering): Released all slaves [ 689.338474][T14074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.436377][T14074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.479891][T14074] bond0 (unregistering): Released all slaves [ 694.135752][T14074] hsr_slave_0: left promiscuous mode [ 694.186601][T14074] hsr_slave_1: left promiscuous mode [ 694.187580][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.187603][T14074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.239067][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.239093][T14074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.485824][T14074] hsr_slave_0: left promiscuous mode [ 694.526264][T14074] hsr_slave_1: left promiscuous mode [ 694.675705][T14074] hsr_slave_0: left promiscuous mode [ 694.716954][T14074] hsr_slave_1: left promiscuous mode [ 694.717959][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.717983][T14074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.776806][T14074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.776832][T14074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.899597][T14074] veth1_macvtap: left promiscuous mode [ 694.901753][T14074] veth0_macvtap: left promiscuous mode [ 694.901935][T14074] veth1_vlan: left promiscuous mode [ 694.903017][T14074] veth0_vlan: left promiscuous mode [ 695.086484][T14074] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 695.086947][T14074] veth1_macvtap: left promiscuous mode [ 695.087043][T14074] veth0_macvtap: left promiscuous mode [ 695.087208][T14074] veth1_vlan: left promiscuous mode [ 695.087376][T14074] veth0_vlan: left promiscuous mode [ 695.246064][T14074] veth1_macvtap: left promiscuous mode [ 695.246159][T14074] veth0_macvtap: left promiscuous mode [ 695.246393][T14074] veth1_vlan: left promiscuous mode [ 695.246557][T14074] veth0_vlan: left promiscuous mode [ 696.577168][T14074] team0 (unregistering): Port device team_slave_1 removed [ 696.617456][T14074] team0 (unregistering): Port device team_slave_0 removed [ 698.166620][T14074] team0 (unregistering): Port device team_slave_1 removed [ 698.216355][T14074] team0 (unregistering): Port device team_slave_0 removed [ 699.154559][T18319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 699.199079][T18319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 699.245609][T18319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 699.347444][T18319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 699.522464][T18659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 699.553949][T18659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 699.671159][T18659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 699.787423][T18659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 700.063368][T18632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 700.143518][T18632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 700.197597][T18632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 700.329957][T18632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 700.652532][T18736] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 700.729278][T18736] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 700.773882][T18319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.782427][T18736] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 700.832539][T18736] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 701.025883][T18319] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.115404][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.118441][T14079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.163485][T18659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.179688][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.179763][T14079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.298558][T18659] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.411774][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.412042][T14075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.462160][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.462992][T14071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.605376][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.752226][T18736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.841835][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.007990][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.008110][ T8550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.088821][T18736] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.094922][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.095074][T14079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.102707][T14074] IPVS: stop unused estimator thread 0... [ 702.139274][T14074] IPVS: stop unused estimator thread 0... [ 702.141669][T14074] IPVS: stop unused estimator thread 0... [ 702.170970][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.171087][ T8550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.243294][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.243439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.396647][T18319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.773727][T18659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.047677][T18659] veth0_vlan: entered promiscuous mode [ 703.092544][T18659] veth1_vlan: entered promiscuous mode [ 703.290069][T18659] veth0_macvtap: entered promiscuous mode [ 703.294465][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.348454][T18659] veth1_macvtap: entered promiscuous mode [ 703.418995][T18736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.482475][T18659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.578265][T18659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.648226][ T157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.689942][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.717352][ T157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.722286][T18319] veth0_vlan: entered promiscuous mode [ 703.762735][ T157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.789432][T18632] veth0_vlan: entered promiscuous mode [ 703.876150][T18319] veth1_vlan: entered promiscuous mode [ 703.975094][T18632] veth1_vlan: entered promiscuous mode [ 704.330322][T14075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.330342][T14075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.449622][T18319] veth0_macvtap: entered promiscuous mode [ 704.510570][T18632] veth0_macvtap: entered promiscuous mode [ 704.524458][T18319] veth1_macvtap: entered promiscuous mode [ 704.536546][T14085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.536567][T14085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.567499][T18632] veth1_macvtap: entered promiscuous mode [ 704.668014][T18319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.688136][T18736] veth0_vlan: entered promiscuous mode [ 704.692414][T18632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.725094][T18319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.783391][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.803480][ T157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.804705][ T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.807018][T18736] veth1_vlan: entered promiscuous mode [ 704.816512][ T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.840824][ T157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.852449][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.870547][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.882448][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.884271][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.484380][T18736] veth0_macvtap: entered promiscuous mode [ 705.547498][T14075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.547518][T14075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.586224][T18736] veth1_macvtap: entered promiscuous mode [ 705.650408][T20434] syzkaller0: entered promiscuous mode [ 705.650430][T20434] syzkaller0: entered allmulticast mode [ 705.701349][T14075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.701371][T14075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.748379][T18736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.749003][ T8550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.749020][ T8550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.137604][T18736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.233668][T14075] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.240903][T14074] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.244822][T14074] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.245007][ T8550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.245022][ T8550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.248525][T14074] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.579575][T20469] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5180'. [ 706.743438][T14069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.743458][T14069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.879419][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.879439][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.337295][T14408] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 707.509913][T14408] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.509941][T14408] usb 6-1: config 0 has no interface number 0 [ 707.532393][T14408] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 707.532423][T14408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.532442][T14408] usb 6-1: Product: syz [ 707.532456][T14408] usb 6-1: Manufacturer: syz [ 707.532470][T14408] usb 6-1: SerialNumber: syz [ 707.579852][T14408] usb 6-1: config 0 descriptor?? [ 707.659504][T20500] netlink: 'syz.8.5188': attribute type 2 has an invalid length. [ 707.747658][T20499] IPv6: NLM_F_CREATE should be specified when creating new route [ 707.925826][T14408] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 707.937091][T14408] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 707.937416][T14408] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 707.937484][T14408] usb 6-1: media controller created [ 707.999181][T20504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5189'. [ 708.046227][T14408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.240345][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.259015][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.269121][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.276813][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.281782][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.146469][T14408] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 709.152906][T20539] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5199'. [ 709.269863][ T31] usb 6-1: USB disconnect, device number 39 [ 710.438958][T11178] Bluetooth: hci0: command tx timeout [ 711.485088][T20547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5200'. [ 711.654956][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5204'. [ 711.675865][T20562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5204'. [ 711.730752][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5204'. [ 712.127316][T20567] veth1_macvtap: left promiscuous mode [ 712.175691][ T1939] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 712.415100][ T1939] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.415128][ T1939] usb 9-1: config 0 has no interface number 0 [ 712.420329][ T1939] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 712.420359][ T1939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.420378][ T1939] usb 9-1: Product: syz [ 712.420391][ T1939] usb 9-1: Manufacturer: syz [ 712.420405][ T1939] usb 9-1: SerialNumber: syz [ 712.495661][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 712.495677][ T37] audit: type=1326 audit(1772219185.059:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.495722][ T37] audit: type=1326 audit(1772219185.069:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f7c88cfce code=0x7ffc0000 [ 712.495765][ T37] audit: type=1326 audit(1772219185.069:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.495804][ T37] audit: type=1326 audit(1772219185.079:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.495843][ T37] audit: type=1326 audit(1772219185.079:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.495881][ T37] audit: type=1326 audit(1772219185.089:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.495920][ T37] audit: type=1326 audit(1772219185.089:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.496078][ T37] audit: type=1326 audit(1772219185.089:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.496119][ T37] audit: type=1326 audit(1772219185.089:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f7c88cfce code=0x7ffc0000 [ 712.496158][ T37] audit: type=1326 audit(1772219185.089:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20574 comm="syz.3.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 712.502777][ T995] IPVS: starting estimator thread 0... [ 712.514834][T11178] Bluetooth: hci0: command tx timeout [ 712.522016][ T1939] usb 9-1: config 0 descriptor?? [ 712.591764][T20586] IPVS: using max 9 ests per chain, 21600 per kthread [ 712.858017][ T1939] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 712.861015][ T1939] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 712.861265][ T1939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 712.863013][ T1939] usb 9-1: media controller created [ 712.917745][ T1939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.091703][T14085] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.238512][T20585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5214'. [ 713.247972][T20585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5214'. [ 713.479463][T20595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5217'. [ 713.614878][T14085] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.034330][ T1939] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 714.112340][T14085] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.259688][ T1939] usb 9-1: USB disconnect, device number 14 [ 714.366905][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5222'. [ 714.504530][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5224'. [ 714.585694][T11178] Bluetooth: hci0: command tx timeout [ 714.591078][T14085] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.663404][T20615] vlan2: entered promiscuous mode [ 714.663436][T20615] ip6gretap0: entered promiscuous mode [ 714.731988][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5228'. [ 714.805973][T20619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5227'. [ 715.374843][T20513] chnl_net:caif_netlink_parms(): no params data found [ 715.686122][ T811] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 715.792432][T14085] bridge_slave_1: left allmulticast mode [ 715.792460][T14085] bridge_slave_1: left promiscuous mode [ 715.792867][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.847755][ T811] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.847782][ T811] usb 6-1: config 0 has no interface number 0 [ 715.851716][ T811] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 715.851743][ T811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.851762][ T811] usb 6-1: Product: syz [ 715.851774][ T811] usb 6-1: Manufacturer: syz [ 715.851787][ T811] usb 6-1: SerialNumber: syz [ 715.907451][ T811] usb 6-1: config 0 descriptor?? [ 715.934181][T14085] bridge_slave_0: left allmulticast mode [ 715.934210][T14085] bridge_slave_0: left promiscuous mode [ 715.934454][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.163669][ T811] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 716.175288][ T811] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.195181][ T811] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 716.195248][ T811] usb 6-1: media controller created [ 716.226220][ T811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.665761][T11178] Bluetooth: hci0: command tx timeout [ 717.037700][T14085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.119621][T14085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.143515][T14085] bond0 (unregistering): Released all slaves [ 717.309009][ T811] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 717.529990][ T811] usb 6-1: USB disconnect, device number 40 [ 718.496336][T20690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.680688][T20513] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.680804][T20513] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.681073][T20513] bridge_slave_0: entered allmulticast mode [ 718.720061][T20513] bridge_slave_0: entered promiscuous mode [ 718.790231][T20513] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.790350][T20513] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.790576][T20513] bridge_slave_1: entered allmulticast mode [ 718.824289][T20513] bridge_slave_1: entered promiscuous mode [ 719.165842][T14085] hsr_slave_0: left promiscuous mode [ 719.175634][ T1939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 719.216873][T14085] hsr_slave_1: left promiscuous mode [ 719.221464][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.221482][T14085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.270768][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.270787][T14085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.337995][ T1939] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.338024][ T1939] usb 1-1: config 0 has no interface number 0 [ 719.340312][ T1939] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 719.340412][ T1939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.340423][ T1939] usb 1-1: Product: syz [ 719.340430][ T1939] usb 1-1: Manufacturer: syz [ 719.340437][ T1939] usb 1-1: SerialNumber: syz [ 719.344884][ T1939] usb 1-1: config 0 descriptor?? [ 719.442153][T14085] veth1_macvtap: left promiscuous mode [ 719.442217][T14085] veth0_macvtap: left promiscuous mode [ 719.442350][T14085] veth1_vlan: left promiscuous mode [ 719.442442][T14085] veth0_vlan: left promiscuous mode [ 719.690003][ T1939] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 719.700977][ T1939] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 719.701304][ T1939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 719.701360][ T1939] usb 1-1: media controller created [ 719.808775][ T1939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.250543][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 720.250559][ T37] audit: type=1326 audit(1772219192.859:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.250942][ T37] audit: type=1326 audit(1772219192.859:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.251469][ T37] audit: type=1326 audit(1772219192.859:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.251895][ T37] audit: type=1326 audit(1772219192.859:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.252258][ T37] audit: type=1326 audit(1772219192.859:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.252482][ T37] audit: type=1326 audit(1772219192.859:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.252923][ T37] audit: type=1326 audit(1772219192.859:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.253491][ T37] audit: type=1326 audit(1772219192.859:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.254073][ T37] audit: type=1326 audit(1772219192.859:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.254389][ T37] audit: type=1326 audit(1772219192.859:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20746 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 720.911792][ T1939] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 721.072292][ T5877] usb 1-1: USB disconnect, device number 3 [ 721.316358][T14085] team0 (unregistering): Port device team_slave_1 removed [ 721.376687][T14085] team0 (unregistering): Port device team_slave_0 removed [ 721.671416][T20513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.808875][T20513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.041426][T20771] dvmrp1: entered allmulticast mode [ 722.044966][T20513] team0: Port device team_slave_0 added [ 722.061896][T20513] team0: Port device team_slave_1 added [ 722.162036][T20775] __nla_validate_parse: 5 callbacks suppressed [ 722.162056][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5290'. [ 722.162084][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5290'. [ 722.298480][T20775] geneve2: entered promiscuous mode [ 722.298507][T20775] geneve2: entered allmulticast mode [ 722.381936][T20780] Bluetooth: MGMT ver 1.23 [ 722.506341][T20773] dvmrp1: left allmulticast mode [ 722.834393][T20513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.834404][T20513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.834418][T20513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.038586][T20513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.038596][T20513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.038611][T20513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.507268][T20513] hsr_slave_0: entered promiscuous mode [ 723.512222][T20513] hsr_slave_1: entered promiscuous mode [ 723.614858][T14085] IPVS: stop unused estimator thread 0... [ 724.437399][T20805] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5301'. [ 724.564721][T20809] netlink: 'syz.5.5301': attribute type 11 has an invalid length. [ 724.564752][T20809] netlink: 'syz.5.5301': attribute type 23 has an invalid length. [ 724.564766][T20809] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5301'. [ 725.777561][T20513] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 725.835603][T20513] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 725.888893][T20513] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 725.965934][T20513] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 726.732366][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5320'. [ 726.770365][T20513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.962558][T20513] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.993275][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.993419][T14071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.044538][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.053814][T14085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.104237][T20869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5324'. [ 728.078203][T20513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.297151][T20892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5330'. [ 728.718765][T20909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5335'. [ 729.091695][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5339'. [ 729.158677][T20928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5341'. [ 729.184274][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.184298][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.184323][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.258746][T14071] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.269385][T14071] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.269630][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.269647][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.269670][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5340'. [ 729.270652][T14071] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.271782][T14071] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.396280][T20513] veth0_vlan: entered promiscuous mode [ 729.417502][T20513] veth1_vlan: entered promiscuous mode [ 729.557875][T20513] veth0_macvtap: entered promiscuous mode [ 729.576004][T20513] veth1_macvtap: entered promiscuous mode [ 729.669094][T20513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.707572][T20513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.735863][T14075] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.741911][T14079] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.742171][T14079] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.773055][T14071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.804335][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 729.804354][ T37] audit: type=1326 audit(1772219202.409:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804395][ T37] audit: type=1326 audit(1772219202.409:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804417][ T37] audit: type=1326 audit(1772219202.409:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804438][ T37] audit: type=1326 audit(1772219202.409:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804459][ T37] audit: type=1326 audit(1772219202.409:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804480][ T37] audit: type=1326 audit(1772219202.409:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.804500][ T37] audit: type=1326 audit(1772219202.409:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.805030][ T37] audit: type=1326 audit(1772219202.409:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.805291][ T37] audit: type=1326 audit(1772219202.409:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 729.805408][ T37] audit: type=1326 audit(1772219202.409:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20886 comm="syz.5.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 730.590953][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.590974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.770176][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.770197][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.655641][ T31] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 732.839166][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 732.839187][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 732.839201][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 732.839225][ T31] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 732.839236][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.978612][ T31] usb 6-1: config 0 descriptor?? [ 733.000522][T21011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.039983][ T31] ath6kl: Failed to submit usb control message: -110 [ 734.040036][ T31] ath6kl: unable to send the bmi data to the device: -110 [ 734.040049][ T31] ath6kl: Unable to send get target info: -110 [ 734.057491][ T31] ath6kl: Failed to init ath6kl core: -110 [ 734.058934][ T31] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 735.515824][T21053] __nla_validate_parse: 10 callbacks suppressed [ 735.515844][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.515860][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.515884][T21053] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.516909][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.516926][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.516947][T21053] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5371'. [ 735.748876][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 735.756385][ T37] audit: type=1326 audit(1772219208.359:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.766484][ T37] audit: type=1326 audit(1772219208.359:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.766534][ T37] audit: type=1326 audit(1772219208.359:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.766572][ T37] audit: type=1326 audit(1772219208.359:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.766735][ T37] audit: type=1326 audit(1772219208.359:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.776827][ T37] audit: type=1326 audit(1772219208.359:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.784181][ T37] audit: type=1326 audit(1772219208.359:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.784227][ T37] audit: type=1326 audit(1772219208.359:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.784260][ T37] audit: type=1326 audit(1772219208.359:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 735.784293][ T37] audit: type=1326 audit(1772219208.359:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21031 comm="syz.9.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 736.093859][T21062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5374'. [ 737.033223][ T1939] usb 6-1: USB disconnect, device number 41 [ 737.965724][T21111] netlink: 'syz.8.5384': attribute type 1 has an invalid length. [ 737.965746][T21111] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5384'. [ 738.020268][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5389'. [ 738.695151][T21135] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5393'. [ 738.952897][T21143] netlink: zone id is out of range [ 738.952913][T21143] netlink: zone id is out of range [ 738.952921][T21143] netlink: zone id is out of range [ 738.952929][T21143] netlink: zone id is out of range [ 738.952937][T21143] netlink: zone id is out of range [ 738.952944][T21143] netlink: zone id is out of range [ 738.952952][T21143] netlink: zone id is out of range [ 738.952960][T21143] netlink: zone id is out of range [ 738.952967][T21143] netlink: zone id is out of range [ 738.952974][T21143] netlink: zone id is out of range [ 740.084894][T21188] netlink: 'syz.0.5403': attribute type 1 has an invalid length. [ 740.450407][T21199] bridge0: entered promiscuous mode [ 740.470255][T21199] bridge0: port 3(macvtap1) entered blocking state [ 740.470462][T21199] bridge0: port 3(macvtap1) entered disabled state [ 740.470825][T21199] macvtap1: entered allmulticast mode [ 740.470840][T21199] bridge0: entered allmulticast mode [ 740.481954][T21199] macvtap1: left allmulticast mode [ 740.481975][T21199] bridge0: left allmulticast mode [ 740.599767][T21199] bridge0: left promiscuous mode [ 741.830620][T21234] __nla_validate_parse: 2 callbacks suppressed [ 741.830633][T21234] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5415'. [ 742.052353][T21239] warning: `syz.5.5418' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 743.210513][T21251] veth2: entered allmulticast mode [ 743.886299][T21285] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5426'. [ 744.666510][T21311] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5436'. [ 744.847491][ T57] wlan1: Trigger new scan to find an IBSS to join [ 744.909100][T21317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5434'. [ 745.662876][T21331] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5439'. [ 746.126788][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064c00400: rx timeout, send abort [ 746.629623][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064c00400: abort rx timeout. Force session deactivation [ 746.632893][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064c00000: rx timeout, send abort [ 746.845365][T21359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5448'. [ 747.132982][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064c00000: abort rx timeout. Force session deactivation [ 747.154481][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.154551][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.746188][T21385] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5455'. [ 747.831245][T21389] netlink: 'syz.5.5458': attribute type 10 has an invalid length. [ 748.079983][T21390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5456'. [ 748.275218][T21405] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.275374][T21405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.275385][T21405] IPv6: NLM_F_CREATE should be set when creating new route [ 748.286249][T21405] IPv6: NLM_F_CREATE should be set when creating new route [ 748.879620][T21425] netlink: 'syz.9.5467': attribute type 4 has an invalid length. [ 749.769885][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5469'. [ 749.822149][T14079] wlan1: Trigger new scan to find an IBSS to join [ 750.770443][T14079] wlan1: Creating new IBSS network, BSSID 32:5e:8c:46:67:66 [ 752.598459][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5496'. [ 753.688141][T21588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5508'. [ 753.998956][T21596] dvmrp1: entered allmulticast mode [ 756.203330][T21652] dvmrp1: entered allmulticast mode [ 756.734585][T21664] syzkaller0: entered promiscuous mode [ 756.734603][T21664] syzkaller0: entered allmulticast mode [ 756.762829][T21664] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 757.434775][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5535'. [ 757.434812][T21690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5535'. [ 757.472718][T21690] geneve3: entered promiscuous mode [ 757.472742][T21690] geneve3: entered allmulticast mode [ 758.052851][T21705] dvmrp1: entered allmulticast mode [ 759.815923][T21741] net_ratelimit: 48 callbacks suppressed [ 759.815944][T21741] netlink: zone id is out of range [ 759.815976][T21741] netlink: zone id is out of range [ 759.815984][T21741] netlink: zone id is out of range [ 759.815992][T21741] netlink: zone id is out of range [ 759.815999][T21741] netlink: zone id is out of range [ 759.816007][T21741] netlink: zone id is out of range [ 759.816015][T21741] netlink: zone id is out of range [ 759.816022][T21741] netlink: zone id is out of range [ 759.816029][T21741] netlink: zone id is out of range [ 759.816036][T21741] netlink: zone id is out of range [ 760.218935][T11178] Bluetooth: hci0: link tx timeout [ 760.219364][T11178] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.224941][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 760.224976][T21751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5550'. [ 760.251043][T11178] Bluetooth: hci0: link tx timeout [ 760.251064][T11178] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.828261][T21774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5559'. [ 761.305016][T11178] Bluetooth: hci0: link tx timeout [ 761.305038][T11178] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.339149][T11178] Bluetooth: hci0: link tx timeout [ 761.339168][T11178] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 761.656968][T21810] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5571'. [ 762.055547][T21822] veth2: entered allmulticast mode [ 762.271292][T11178] Bluetooth: hci0: command 0x0406 tx timeout [ 762.811195][T21852] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5582'. [ 763.809810][T21896] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5594'. [ 764.294754][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 765.528556][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5612'. [ 765.913071][T21966] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5614'. [ 766.004563][T21968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5615'. [ 766.321560][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5621'. [ 766.321584][T21981] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5621'. [ 766.375231][T21986] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5623'. [ 766.380168][T21981] geneve2: entered promiscuous mode [ 766.380192][T21981] geneve2: entered allmulticast mode [ 766.592206][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5624'. [ 766.797030][T22003] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5627'. [ 767.491733][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'. [ 767.491766][T22027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5636'. [ 768.540409][T22073] syzkaller0: entered promiscuous mode [ 768.540435][T22073] syzkaller0: entered allmulticast mode [ 771.138248][T22138] __nla_validate_parse: 6 callbacks suppressed [ 771.138267][T22138] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5669'. [ 771.474977][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 771.474994][ T37] audit: type=1326 audit(1772219244.079:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475037][ T37] audit: type=1326 audit(1772219244.079:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475061][ T37] audit: type=1326 audit(1772219244.079:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475086][ T37] audit: type=1326 audit(1772219244.079:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475108][ T37] audit: type=1326 audit(1772219244.079:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475130][ T37] audit: type=1326 audit(1772219244.079:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475168][ T37] audit: type=1326 audit(1772219244.079:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475191][ T37] audit: type=1326 audit(1772219244.079:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.475213][ T37] audit: type=1326 audit(1772219244.079:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 771.476066][ T37] audit: type=1326 audit(1772219244.089:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22112 comm="syz.9.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2214c9c799 code=0x7ffc0000 [ 774.021948][T22144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.349376][T22235] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5685'. [ 774.653074][T22247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5689'. [ 774.653096][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5689'. [ 774.815548][ T9] IPVS: starting estimator thread 0... [ 774.968381][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5696'. [ 774.968414][T22266] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5696'. [ 774.972335][T22260] IPVS: using max 9 ests per chain, 21600 per kthread [ 775.038251][T22269] net_ratelimit: 47 callbacks suppressed [ 775.038267][T22269] netlink: zone id is out of range [ 775.038275][T22269] netlink: zone id is out of range [ 775.038282][T22269] netlink: zone id is out of range [ 775.038288][T22269] netlink: zone id is out of range [ 775.038295][T22269] netlink: zone id is out of range [ 775.038302][T22269] netlink: zone id is out of range [ 775.038309][T22269] netlink: zone id is out of range [ 775.038317][T22269] netlink: zone id is out of range [ 775.038324][T22269] netlink: zone id is out of range [ 775.038331][T22269] netlink: zone id is out of range [ 775.272947][T22266] geneve2: entered promiscuous mode [ 775.272974][T22266] geneve2: entered allmulticast mode [ 776.261156][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5706'. [ 776.464003][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5708'. [ 776.742155][T22318] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5712'. [ 777.414609][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5713'. [ 777.431129][T22286] lec:lec_atm_close: lec0: Shut down! [ 779.139889][T22387] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5730'. [ 779.945688][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 780.230201][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 780.235580][ T37] audit: type=1326 audit(1772219252.819:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.243425][ T37] audit: type=1326 audit(1772219252.819:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255687][ T37] audit: type=1326 audit(1772219252.829:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255741][ T37] audit: type=1326 audit(1772219252.829:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255779][ T37] audit: type=1326 audit(1772219252.829:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255823][ T37] audit: type=1326 audit(1772219252.829:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255862][ T37] audit: type=1326 audit(1772219252.829:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255902][ T37] audit: type=1326 audit(1772219252.829:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255940][ T37] audit: type=1326 audit(1772219252.829:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.255976][ T37] audit: type=1326 audit(1772219252.829:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22371 comm="syz.0.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 780.833197][T14069] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.334655][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5746'. [ 782.774680][T22494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5758'. [ 782.986803][T22420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.556611][T22518] unsupported nlmsg_type 40 [ 783.660654][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5767'. [ 783.673146][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5767'. [ 783.794866][T22518] netlink: 'syz.3.5766': attribute type 16 has an invalid length. [ 783.794887][T22518] netlink: 'syz.3.5766': attribute type 17 has an invalid length. [ 783.834178][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.858425][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.095762][T22518] net_ratelimit: 104 callbacks suppressed [ 784.095769][T22518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 784.332768][T22543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5771'. [ 785.238980][T22574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5782'. [ 785.456644][T22583] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5785'. [ 786.899978][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5801'. [ 787.420813][T22600] lec:lec_atm_close: lec0: Shut down! [ 788.851666][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5818'. [ 790.197672][ T5805] Bluetooth: hci7: command 0x0406 tx timeout [ 790.197968][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 790.217396][T14412] Bluetooth: hci6: command 0x0406 tx timeout [ 791.692747][T22731] lec:lec_atm_close: lec0: Shut down! [ 792.088288][T22764] netlink: 'syz.5.5835': attribute type 2 has an invalid length. [ 792.429800][T22777] netlink: 'syz.9.5840': attribute type 10 has an invalid length. [ 792.429822][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5840'. [ 792.474858][T22777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 792.580706][T22781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5842'. [ 793.215814][T20173] block nbd64: NBD_DISCONNECT [ 793.875802][T20173] udevd[20173]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 794.363439][T22819] netlink: zone id is out of range [ 794.363452][T22819] netlink: zone id is out of range [ 794.363458][T22819] netlink: zone id is out of range [ 794.363464][T22819] netlink: zone id is out of range [ 794.363470][T22819] netlink: zone id is out of range [ 794.363476][T22819] netlink: zone id is out of range [ 794.363481][T22819] netlink: zone id is out of range [ 794.363487][T22819] netlink: zone id is out of range [ 794.363493][T22819] netlink: zone id is out of range [ 794.622444][T22830] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5850'. [ 794.865209][T22836] netlink: 'syz.3.5853': attribute type 10 has an invalid length. [ 794.865315][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5853'. [ 797.891309][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5878'. [ 799.428434][T22992] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5900'. [ 799.927469][T23008] netlink: 'syz.5.5907': attribute type 1 has an invalid length. [ 799.927491][T23008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5907'. [ 800.269392][T20173] udevd[20173]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 800.476224][T23021] net_ratelimit: 49 callbacks suppressed [ 800.476313][T23021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.933066][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5917'. [ 800.946576][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5917'. [ 801.094134][T23044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5920'. [ 801.311679][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 801.311696][ T37] audit: type=1326 audit(1772219273.919:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.312199][ T37] audit: type=1326 audit(1772219273.919:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.313715][ T37] audit: type=1326 audit(1772219273.919:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.314033][ T37] audit: type=1326 audit(1772219273.919:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.315416][ T37] audit: type=1326 audit(1772219273.919:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.321709][ T37] audit: type=1326 audit(1772219273.939:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23052 comm="syz.5.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 801.814590][T23069] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.302837][T23085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5931'. [ 802.464279][T20173] udevd[20173]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 802.465244][T23091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5934'. [ 802.668462][T23100] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5933'. [ 803.744046][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5938'. [ 805.558631][T23165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.719732][T23173] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5959'. [ 806.021758][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5961'. [ 806.216513][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5963'. [ 806.220457][T14408] IPVS: starting estimator thread 0... [ 806.385693][T23186] IPVS: using max 9 ests per chain, 21600 per kthread [ 807.103376][ T5458] lec:lec_start_xmit: lec0:No lecd attached [ 807.309092][T23208] netlink: 228 bytes leftover after parsing attributes in process `syz.9.5970'. [ 807.684264][ T811] IPVS: starting estimator thread 0... [ 807.786096][T23221] IPVS: using max 15 ests per chain, 36000 per kthread [ 808.345873][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5978'. [ 808.590314][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.590384][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.910255][T23240] ODEBUG: Out of memory. ODEBUG disabled [ 809.414469][T23266] netlink: 228 bytes leftover after parsing attributes in process `syz.9.5984'. [ 809.423766][T23265] IPv6: NLM_F_CREATE should be specified when creating new route [ 809.702698][ T5866] IPVS: starting estimator thread 0... [ 809.787291][T23273] IPVS: using max 15 ests per chain, 36000 per kthread [ 810.942895][T23308] netlink: 'syz.0.5998': attribute type 10 has an invalid length. [ 810.942919][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 811.291259][ T37] audit: type=1326 audit(1772219283.899:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.5.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 811.291547][ T37] audit: type=1326 audit(1772219283.899:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.5.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 811.291675][ T37] audit: type=1326 audit(1772219283.899:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.5.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 811.291831][ T37] audit: type=1326 audit(1772219283.899:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.5.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 811.292273][ T37] audit: type=1326 audit(1772219283.899:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.5.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 811.770043][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6002'. [ 812.439786][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6007'. [ 812.439810][T23339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6007'. [ 812.606580][T23339] geneve2: entered promiscuous mode [ 812.606597][T23339] geneve2: entered allmulticast mode [ 812.745568][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 812.745858][ C1] lec:lec_tx_timeout: lec0 [ 812.746186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 813.246122][ T37] audit: type=1326 audit(1772219285.789:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.8.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f2e5c799 code=0x7ffc0000 [ 813.246173][ T37] audit: type=1326 audit(1772219285.789:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.8.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f2e5c799 code=0x7ffc0000 [ 813.246213][ T37] audit: type=1326 audit(1772219285.789:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.8.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f02f2e5c799 code=0x7ffc0000 [ 813.246252][ T37] audit: type=1326 audit(1772219285.789:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.8.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f2e5c799 code=0x7ffc0000 [ 813.246301][ T37] audit: type=1326 audit(1772219285.789:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.8.6005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f2e5c799 code=0x7ffc0000 [ 813.516034][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6011'. [ 813.832435][T23364] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6012'. [ 814.891391][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6025'. [ 814.891427][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6025'. [ 815.281537][T23417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.771713][T23436] tipc: Started in network mode [ 815.771743][T23436] tipc: Node identity daf78a202589, cluster identity 4711 [ 815.795878][T23436] tipc: Enabled bearer , priority 0 [ 815.796786][T23436] syzkaller0: entered promiscuous mode [ 815.796807][T23436] syzkaller0: entered allmulticast mode [ 816.074365][T23435] tipc: Resetting bearer [ 816.321947][T23435] tipc: Disabling bearer [ 816.355563][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 816.355580][ T37] audit: type=1326 audit(1772219288.959:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.355623][ T37] audit: type=1326 audit(1772219288.959:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.355661][ T37] audit: type=1326 audit(1772219288.959:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.355694][ T37] audit: type=1326 audit(1772219288.959:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.365865][ T37] audit: type=1326 audit(1772219288.969:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.375973][ T37] audit: type=1326 audit(1772219288.979:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.376021][ T37] audit: type=1326 audit(1772219288.979:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.379566][ T37] audit: type=1326 audit(1772219288.979:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.386135][ T37] audit: type=1326 audit(1772219288.979:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.386182][ T37] audit: type=1326 audit(1772219288.979:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23410 comm="syz.5.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f92d9dec799 code=0x7ffc0000 [ 816.836235][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6037'. [ 817.785661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 817.785690][ C1] lec:lec_tx_timeout: lec0 [ 817.785806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 817.869154][T23480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.933229][T23487] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6048'. [ 817.935372][T23487] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6048'. [ 819.646356][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'. [ 819.646393][T23529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6058'. [ 819.717150][T23529] geneve4: entered promiscuous mode [ 819.717175][T23529] geneve4: entered allmulticast mode [ 820.725406][T23565] bridge_slave_0: left allmulticast mode [ 820.725435][T23565] bridge_slave_0: left promiscuous mode [ 820.755791][T23565] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.832935][T23565] bridge_slave_1: left allmulticast mode [ 820.832964][T23565] bridge_slave_1: left promiscuous mode [ 820.833335][T23565] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.046530][T23565] bond0: (slave bond_slave_0): Releasing backup interface [ 821.149063][T23565] bond0: (slave bond_slave_1): Releasing backup interface [ 821.290803][T23565] team0: Port device team_slave_0 removed [ 821.359018][T23565] team0: Port device team_slave_1 removed [ 821.359998][T23565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.360032][T23565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.419447][T23565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.419475][T23565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.537814][T23565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 821.985806][T23599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6077'. [ 822.300636][ T60] Bluetooth: hci0: link tx timeout [ 822.300652][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 822.301559][ T60] Bluetooth: hci0: link tx timeout [ 822.301570][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 822.301642][ T60] Bluetooth: hci0: link tx timeout [ 822.301649][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 822.795579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 822.795614][ C1] lec:lec_tx_timeout: lec0 [ 822.795652][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 823.319554][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6085'. [ 823.627271][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6088'. [ 823.751380][T23648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'. [ 823.917509][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6089'. [ 824.291945][ T60] Bluetooth: hci0: link tx timeout [ 824.291967][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 824.292062][ T60] Bluetooth: hci0: link tx timeout [ 824.292073][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 824.292127][ T60] Bluetooth: hci0: link tx timeout [ 824.292136][ T60] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 824.352984][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 826.409418][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 826.409438][ T37] audit: type=1326 audit(1772219299.019:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.6112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 826.412459][ T37] audit: type=1326 audit(1772219299.019:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.6112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 826.412728][ T37] audit: type=1326 audit(1772219299.019:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.6112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 826.414403][ T37] audit: type=1326 audit(1772219299.019:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23718 comm="syz.3.6112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 826.771315][T23729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6115'. [ 827.522344][T23740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.815542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 827.815573][ C1] lec:lec_tx_timeout: lec0 [ 827.816015][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 828.754831][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6128'. [ 828.793809][T23765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6128'. [ 828.832764][T23768] dvmrp1: entered allmulticast mode [ 828.978576][T23776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6131'. [ 829.615661][ T37] audit: type=1326 audit(1772219302.219:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23788 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 829.621156][ T37] audit: type=1326 audit(1772219302.229:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23788 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 829.621713][ T37] audit: type=1326 audit(1772219302.229:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23788 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 829.622550][ T37] audit: type=1326 audit(1772219302.229:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23788 comm="syz.0.6136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fab5dc7c799 code=0x7ffc0000 [ 829.901102][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6140'. [ 830.103403][T23812] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6142'. [ 830.270594][T23815] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6144'. [ 831.140723][T23831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6149'. [ 831.168317][T23830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6150'. [ 831.666389][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 831.666414][T23844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6154'. [ 831.797917][T23842] dvmrp1: left allmulticast mode [ 832.825690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 832.825736][ C1] lec:lec_tx_timeout: lec0 [ 832.825874][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 832.837119][ T37] audit: type=1326 audit(1772219305.449:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23874 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 832.837164][ T37] audit: type=1326 audit(1772219305.449:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23874 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 832.837202][ T37] audit: type=1326 audit(1772219305.449:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23874 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 832.865662][ T37] audit: type=1326 audit(1772219305.469:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23874 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f7c8cc799 code=0x7ffc0000 [ 833.202211][T23882] syzkaller0: entered promiscuous mode [ 833.202237][T23882] syzkaller0: entered allmulticast mode [ 833.526590][T23885] tipc: Enabled bearer , priority 0 [ 833.595753][T23881] tipc: Resetting bearer [ 833.763466][T23897] IPv6: NLM_F_CREATE should be specified when creating new route [ 833.934150][T23881] tipc: Disabling bearer [ 834.202224][ C1] ================================================================== [ 834.202243][ C1] BUG: KASAN: slab-use-after-free in detach_timer+0xc8/0x300 [ 834.202277][ C1] Read of size 8 at addr ffff88801dbc8cd0 by task ktimers/1/29 [ 834.202296][ C1] [ 834.202310][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 834.202335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.202348][ C1] Call Trace: [ 834.202357][ C1] [ 834.202367][ C1] dump_stack_lvl+0xe8/0x150 [ 834.202402][ C1] print_report+0xba/0x230 [ 834.202428][ C1] ? detach_timer+0xc8/0x300 [ 834.202445][ C1] kasan_report+0x117/0x150 [ 834.202478][ C1] ? detach_timer+0xc8/0x300 [ 834.202498][ C1] detach_timer+0xc8/0x300 [ 834.202519][ C1] __run_timer_base+0x624/0x9f0 [ 834.202552][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 834.202580][ C1] ? rt_spin_lock+0x1e0/0x400 [ 834.202609][ C1] run_timer_softirq+0xb7/0x170 [ 834.202636][ C1] handle_softirqs+0x1de/0x6f0 [ 834.202667][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 834.202696][ C1] run_ktimerd+0x69/0x100 [ 834.202724][ C1] smpboot_thread_fn+0x541/0xa50 [ 834.202753][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 834.202784][ C1] kthread+0x388/0x470 [ 834.202802][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 834.202837][ C1] ? __pfx_kthread+0x10/0x10 [ 834.202857][ C1] ret_from_fork+0x51e/0xb90 [ 834.202885][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 834.202912][ C1] ? __switch_to+0xc7d/0x1450 [ 834.202935][ C1] ? __pfx_kthread+0x10/0x10 [ 834.202955][ C1] ret_from_fork_asm+0x1a/0x30 [ 834.202978][ C1] [ 834.202986][ C1] [ 834.202991][ C1] Allocated by task 14817: [ 834.203000][ C1] kasan_save_track+0x3e/0x80 [ 834.203024][ C1] __kasan_kmalloc+0x93/0xb0 [ 834.203052][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 834.203075][ C1] rose_add_node+0x26f/0xf50 [ 834.203088][ C1] rose_rt_ioctl+0xdc1/0x1350 [ 834.203098][ C1] rose_ioctl+0x3fb/0x8f0 [ 834.203112][ C1] sock_do_ioctl+0x101/0x320 [ 834.203128][ C1] sock_ioctl+0x5c9/0x7f0 [ 834.203141][ C1] __se_sys_ioctl+0xff/0x170 [ 834.203156][ C1] do_syscall_64+0x14d/0xf80 [ 834.203169][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.203179][ C1] [ 834.203181][ C1] Freed by task 29: [ 834.203186][ C1] kasan_save_track+0x3e/0x80 [ 834.203198][ C1] kasan_save_free_info+0x46/0x50 [ 834.203208][ C1] __kasan_slab_free+0x5c/0x80 [ 834.203221][ C1] kfree+0x1c1/0x6c0 [ 834.203232][ C1] rose_timer_expiry+0x4cb/0x600 [ 834.203244][ C1] call_timer_fn+0x192/0x640 [ 834.203252][ C1] __run_timer_base+0x6a3/0x9f0 [ 834.203266][ C1] run_timer_softirq+0xb7/0x170 [ 834.203279][ C1] handle_softirqs+0x1de/0x6f0 [ 834.203292][ C1] run_ktimerd+0x69/0x100 [ 834.203306][ C1] smpboot_thread_fn+0x541/0xa50 [ 834.203320][ C1] kthread+0x388/0x470 [ 834.203328][ C1] ret_from_fork+0x51e/0xb90 [ 834.203340][ C1] ret_from_fork_asm+0x1a/0x30 [ 834.203349][ C1] [ 834.203351][ C1] The buggy address belongs to the object at ffff88801dbc8c00 [ 834.203351][ C1] which belongs to the cache kmalloc-512 of size 512 [ 834.203361][ C1] The buggy address is located 208 bytes inside of [ 834.203361][ C1] freed 512-byte region [ffff88801dbc8c00, ffff88801dbc8e00) [ 834.203372][ C1] [ 834.203375][ C1] The buggy address belongs to the physical page: [ 834.203391][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801dbc8000 pfn:0x1dbc8 [ 834.203403][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 834.203411][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 834.203426][ C1] page_type: f5(slab) [ 834.203436][ C1] raw: 0080000000000240 ffff88813fe1cc80 ffffea00009ed310 ffffea0001885610 [ 834.203446][ C1] raw: ffff88801dbc8000 000000000010000b 00000000f5000000 0000000000000000 [ 834.203456][ C1] head: 0080000000000240 ffff88813fe1cc80 ffffea00009ed310 ffffea0001885610 [ 834.203465][ C1] head: ffff88801dbc8000 000000000010000b 00000000f5000000 0000000000000000 [ 834.203474][ C1] head: 0080000000000002 ffffea000076f201 00000000ffffffff 00000000ffffffff [ 834.203483][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 834.203489][ C1] page dumped because: kasan: bad access detected [ 834.203497][ C1] page_owner tracks the page as allocated [ 834.203501][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5162, tgid 5162 (udevd), ts 45072017758, free_ts 35271698711 [ 834.203522][ C1] post_alloc_hook+0x231/0x280 [ 834.203536][ C1] get_page_from_freelist+0x28bb/0x2950 [ 834.203546][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 834.203555][ C1] allocate_slab+0x77/0x660 [ 834.203566][ C1] refill_objects+0x334/0x3c0 [ 834.203575][ C1] __pcs_replace_empty_main+0x328/0x5f0 [ 834.203586][ C1] __kmalloc_cache_noprof+0x44e/0x690 [ 834.203599][ C1] kernfs_fop_open+0x39a/0xcb0 [ 834.203612][ C1] do_dentry_open+0x83d/0x13e0 [ 834.203622][ C1] vfs_open+0x3b/0x350 [ 834.203631][ C1] path_openat+0x2e43/0x38a0 [ 834.203644][ C1] do_file_open+0x23e/0x4a0 [ 834.203657][ C1] do_sys_openat2+0x113/0x200 [ 834.203667][ C1] __x64_sys_openat+0x138/0x170 [ 834.203677][ C1] do_syscall_64+0x14d/0xf80 [ 834.203689][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.203698][ C1] page last free pid 5172 tgid 5172 stack trace: [ 834.203704][ C1] __free_frozen_pages+0xfe3/0x1170 [ 834.203718][ C1] __slab_free+0x24f/0x2a0 [ 834.203731][ C1] qlist_free_all+0x97/0x100 [ 834.203742][ C1] kasan_quarantine_reduce+0x148/0x160 [ 834.203754][ C1] __kasan_slab_alloc+0x22/0x80 [ 834.203767][ C1] kmem_cache_alloc_noprof+0x33b/0x680 [ 834.203780][ C1] do_getname+0x2e/0x250 [ 834.203788][ C1] vfs_fstatat+0x45/0x170 [ 834.203797][ C1] __x64_sys_newfstatat+0x151/0x200 [ 834.203807][ C1] do_syscall_64+0x14d/0xf80 [ 834.203819][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.203834][ C1] [ 834.203836][ C1] Memory state around the buggy address: [ 834.203842][ C1] ffff88801dbc8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 834.203849][ C1] ffff88801dbc8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.203856][ C1] >ffff88801dbc8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.203861][ C1] ^ [ 834.203867][ C1] ffff88801dbc8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.203874][ C1] ffff88801dbc8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.203879][ C1] ================================================================== [ 834.203894][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 834.203903][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 834.203915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.203922][ C1] Call Trace: [ 834.203927][ C1] [ 834.203931][ C1] vpanic+0x56c/0xa60 [ 834.203948][ C1] ? __pfx_vpanic+0x10/0x10 [ 834.203965][ C1] panic+0xc5/0xd0 [ 834.203979][ C1] ? __pfx_panic+0x10/0x10 [ 834.203995][ C1] ? detach_timer+0xc8/0x300 [ 834.204004][ C1] ? rcu_is_watching+0x15/0xb0 [ 834.204016][ C1] ? detach_timer+0xc8/0x300 [ 834.204025][ C1] ? detach_timer+0xc8/0x300 [ 834.204034][ C1] check_panic_on_warn+0x89/0xb0 [ 834.204046][ C1] ? detach_timer+0xc8/0x300 [ 834.204055][ C1] end_report+0x73/0x180 [ 834.204070][ C1] ? detach_timer+0xc8/0x300 [ 834.204080][ C1] kasan_report+0x128/0x150 [ 834.204096][ C1] ? detach_timer+0xc8/0x300 [ 834.204106][ C1] detach_timer+0xc8/0x300 [ 834.204116][ C1] __run_timer_base+0x624/0x9f0 [ 834.204134][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 834.204148][ C1] ? rt_spin_lock+0x1e0/0x400 [ 834.204161][ C1] run_timer_softirq+0xb7/0x170 [ 834.204176][ C1] handle_softirqs+0x1de/0x6f0 [ 834.204192][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 834.204207][ C1] run_ktimerd+0x69/0x100 [ 834.204223][ C1] smpboot_thread_fn+0x541/0xa50 [ 834.204238][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 834.204255][ C1] kthread+0x388/0x470 [ 834.204266][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 834.204280][ C1] ? __pfx_kthread+0x10/0x10 [ 834.204291][ C1] ret_from_fork+0x51e/0xb90 [ 834.204306][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 834.204319][ C1] ? __switch_to+0xc7d/0x1450 [ 834.204332][ C1] ? __pfx_kthread+0x10/0x10 [ 834.204343][ C1] ret_from_fork_asm+0x1a/0x30 [ 834.204355][ C1] [ 834.204515][ C1] Kernel Offset: disabled