last executing test programs: 12m19.260245199s ago: executing program 32 (id=1435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) 7m39.934246787s ago: executing program 0 (id=2475): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b8e72c019d3c844c9fdf773695", 0x32}, {&(0x7f0000000380)="7cdb015fbb1990080000006a2615837b64e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab810f9b28f1c727dfb762e85fded2f0afcd5f12f4584d19a07664fe9334ce42ee0246bbeb87b187029b705f45", 0x5b}, {&(0x7f00000016c0)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588697b3406011dff49e483b7af2e2ab2324cdb0854dd9c05fcd9f7891d3f4d166b88a26a1463ac7f87ab1108eb14620661c1eb302caa7417ef79e468c0447f90f85a5b7c8dfed05edcd6cd56eb526a10b859e6e23f7e8d0911defae5937f74d4b60e05992585a3a88d7234c77a5038ae4c84942a6dd682094421a9d22e412f8500823a9482dcddef53022db0e12a7ba36547b7a62e5a22279966bf8c9783d5ca2ebcff237bbbc50ae48f87e4bca97b69279826358efe838bd7a503a2d42ee1989e9302a221882e5d149588122a48becb9d21da437bd16fb3f5de45b8a2098d7597c2d12229f5887719ffeacbf702dd2ca8d3208c56f125a4e90207112d664a279eefb37ed3bd9cd4087a1ade4f8afb23bdf540d2342c714425a382c9c70dc444caa1cccb4f378851829702787c5386caed6b9361e8525cb6b25a8caaf3c6090b43a981f03dcc806caaf5d70750859be2de86be08795188b55538e5bb687bacd577d8d8c12dbdd6fb1f180a19012a052d563fef0ed3a87b3df41a64331db2bf12473d38e03160cc18210425e4aeb63766899824508ba8bdf44f97351d1c9d0fd503863bc10443ec1636cd29a611cc2df523eb995d909d1a4f2807853f6f3dc238d59306367fb25ef0b43be8b4b74d49eb1e0a5fd0b2d682b9f42203026c279b470e31da23e41bfa3fb17fcdeca7b27a14a9fcc1b0e6d41efe6f5b357eaff60460cf61fe3ddddb1cf9b19569f98dc79f1280ae1e163f5b2d8efee979ec17d6108d82443189cffb15baca91855646745d319bae3d6cae9dfbb9bbe70d20e74ac9e55b06bf40eb987112f8cd370f212f03c996baf884d4dab522a23d98bd3699fa244c5abac50a9650d199d9ef94ea932edf2153e02c9ec9c2d3d516a128584e4071b6f8aa04727f2703e80523504880b921d4893dae02326d648ba677bc920567e5282e4630c0e414b24e5c0799ca1ced216f86aec82fe9687b3f924dfef531b3bc2686a1e3042885bfe23445a7c15dce0090a7eb0ebd69be730c01bca3125e0e17f6e6d3496e599ee2ac90c6d6bb21d2e42ce7cb018ec5d8097d074393a5700c646f7c7ca8d0a81f3d6babdf028ef740f2272a5f2bf8f6978c3c6167f49fb5383e286e603ea58251409f6eb9412387fba434d6a2adae5d87ad5b3eae0b990f4a2860d4eaf4f36cd16762361514b9a5b20523c57771b87b921631113d5a1400de65766c57a2b94939cb4170afbd9cbd1be74832bcb81a8c2ceff17bdb76761ca2b7a2aed7f880ee1e3064271b456bd78f1e7cdf192ddc495a9356ce36d95d75b01616528bfdca5523ab300b1221b1690cb76bc41125b67fed8d04d6115cd2afd8569c1c5c25a007ab9638168d6c16ff4bb4e62cb4f723f43758675e7139c12690ecb34fb9334cf54aefd4d91adda73842bccd2e4d5ce192a92a8a6984156df13fef823cbdcf87ca87dd4d6a1d7a61ce161d319c72a0936a05b0da86fa08091436af30ea6234bffe2c163f9b521c2f886aef8b715a7e48055204172228ad64278968ccd01db0df89806cc8557e5f8a66fcf1dadae893f0b51db73c8035846fee2461fb272546d3b6b96ff24d0beff07ef96c2d157fd751d76079276effada716a933be58bf3ffc4b16fcea0736a508fb73e92cffdf72a7be5accce5fe0d62d79f7776945c474339c89452cc7e02ea69585d2451a1b21b8c3d9f785e62eb55e4927435165e95d807144f82355a8ab35c144c2e9cbfb7e7880344960fbe96283b828a403279d6aefcef8a9d88f615a3ee576d86c6d708d65b959d5954b95ace30f1e6beb145e0d41f544f78791034f325b12af763004ecb9f045c66f9a6812ab148a3ca4d28076c81829e7e41f2dbc65d814c6561cf9209e7d723917fb3e657a3d9f60d65ebac8d7e7e7fe94ddf8e3cf360cb65097d1ac76b893fd730ce923cf96cb6b6e5782b83b10f289621b82c37cafe04c8c5a521d3c6a43f6d15941aaa428bc22db8d53255aa217ffe8e0b02334a2bade0960066e9c84f9713b9912cfb55223d3bd17f3d3df7825bc03e3739a7cdf7e1a3ce0b77df0c6b3bb566922f52e85fbfb3f9dbcd46bf18f1a6734a3ca727a316f750d1d03eaad603674fecb1ec7d879e771c1c37b6c97b098717b40553a13d6a4831c557ab449614f780e68becfeffb8c2af86a3be388658ae1a86d4715f0c7892ffc39158d2f8348ce98eed5fe0ab1afcbd256a5f464867ddcfd077f12f6c8716859c9a46b007191455558efe2f5c4c816104f4515e96d461331d9e69dbdfa6d8e23bb9c5b8012726819f365d50f258ef30d675876fd95e06791864af2e6b4fc08e0f8162341c0cc0f5d238bd8b25e1036ef8f111c69818391237571330e174793350c9c2aada62f21108e144abe0b86ae2711e5f81cf0c1c7b9f89d36b144feada6aae488fc2f613d3868e388a141794162268b33aa35a5096259127328f22811be740daccb6bb78967e24be01cadf0c7344d1a4f01a94b3daaa4d4193ac1a6e651346a3ac7637ff852526ece318a40e9479189163d8f8d17593d0f5354c141a6461922ffbd80ea70105dcc903c3318ee185aba86d227a79e7744249743cd9b7ac651ce2528aee678c6608b373a9acc9906c3b97263a94a20a7af97d558ce3035879eb4ffdb52f40a70b27c888a7b92e5e9be492d6fbf0292a9debcf5bb28e681ed31fc929f7899036b6825c1e7bf9bbef7f92049bbc3047bd0a4315f7d2359cf8956c02f4c28a4ec3d1a8964ed79b52d2f0f2e8e8fa2987fd088f0afd26feda64efde38412ac3b0c1af45e4a56755b1e80d4879e8b1a63cdb0ddc834021db256305fe6f57b86927dbffce49269edcdd4938063f677a007ff4b0cfe3a304acdb665e3ceb0c4ca5398398a16ed9bfab650cda3e99e4872e5e4507a59263d0e7fbdda2414e3608466626becce4d4c4bc620a1c5824fcaf9e6f7394e6b954f5001de631b84148fd8e71f14dbd046c2aba8260c1c4467e6099ba569950bfc102a3e5d3e42bd65d6c11f61b91b9a9e0ede1ee8ee807803d3b2215989657f86d1e5f9289fc2823d64f9a0abfff0f3acbd4558e2bb02be2b15e84732f140672f72978b6e159ced84cf399f02824fb72828ef8cb2982dc1c1a0de6efa442dfc7e28b58fc67c752518fcd5b6ca58b626adaa3ffe1161eb586497841454ff80c96d70e4686885d94b84336c82f554fbcfaee9ff26924e478227b54895f0a14bd497f17924bc64a59ccc77fa322a75bd3f0d5278de02c2020e7b57f3ec63274dd4d5f921a9de61b39b068e093a9fddedb10a6b3cbc2567bfad1013c2c19fcb4e74708fc68c28472df82c85700248514cc294877762bf5371c7507f46614e015fbcecf3b273dd73266b45113146464a3eaf46bdb7118f91a87c85c955b971b427e9cb284ec8667a7797b59261c97a9698b9d448128c4042c1c23fbd4f69b009cb812fdfd534713d75889153bc86bf7616d7aafd0e1251bfe3c21632b6b265620e87f1c3f4889276529f256aeaff16aadc02554d59ea1664317494d7fe675fa814abe2d590c1eb425e7df8dd30887fbc2541b12d0ca36062a522074738e75399865a4dd142ceafe90f76cf505a34d30a2aafc211a7a753cc93342b6f107902b3656c127c401e2d00a68720279200065885982b4a553f29b3e9512621f2d7ea7ca521b3281d92ec844eb42997a53f819bafe1dd5d5c9b20a8aa2370cd8c6f4d554f87f2df542ec8a221218c1ad2df9ad9184d57e7aa0341805dc4b3b8f61697c1a365ec543d74ecb4a58bdd0a30b8245d82753616ef6f6a2bfcc661af785903c9022e092449f1ef5bc7d55217a56f7e8bd91243db88fc408d82dd6f9aee62f0558212e8d53b6b50947d4999d751186b81fcac95d0e2dc7612ee5573d88c44887c2963d33a468189d9e76ed98e77aa67509bc168272e737dee018a93e125637abf2355b449b87bb8fd502af240e73a6aa250ae823c5df567ddabd017adbf54790007a9d777a16d23c9f1ab300125dad2b9d91217527b518018590a1ea53ce6008622f30810b2bdc503fe6d8593a3e72be54c540bb34fafe134077569712c96e1cc7047d3578119ffc545779b6bffb7e40a955cd96abd57f0cab09d787f063606e7aded4678908965f41b6353bdf295f38572aed0281162dcab62b69f9fcbcf8373d1f304fda317b69724284bd2b1c1aa4f8b96b580870944612317559978f471dd47c605f64e656f67f8c8eea0e135ac2f04c8d09fe6cbfdf9110313ef90c3cc936bc8d4e4994856edaaa4e7d4a207da2136fdabe6c686c44b9c262c28f828b332d1cba03e5b9fb0f27692dd5068e4d99096ce52c25b0a3a9cc0665ca9f24d9d782a427276c4f06bb97cd03b02add5fe55035cf63061b7d2543d85822f698583e664bce8a7146694de9651e84f2dbba325c7d32015b413206a2605b5bd7bf681b14099264d82ff98f0abd6c5c4a500a10c7c32587bfed5e592f971e6ace5026a4977a7d91a89eb579651d1c50b800d8e8c7fd9389bb8ba3c4e4642854695dd1299a726d6edbbfee72a608b4d44df4d6b3355af506199c3c061bb94f6d841ff16f9d77e750aaf4fab6682af32277813cd892a9eadb0f98fe5cd2cac80e5b678f65094f11d0d13d380a385ee0d43a7b5204f09a2dec453047353b40b53602da5d1dc4f3f22f5d8b6e28b21ee3ed19876b38d4515a7293a9c2c32d0e52cccb359395ba27ea38e2dab9eb8e6593eaec15ecf9a25bf1354533a025a0eefa9c846355128b8d6973db2eb91bac31614f9d9d0d51fa7cde3161b9155956929330db2a77ac77a7b1cd8906d11709518469df8e699d260c2d58343e9dc44c1c38484181e01a9b554aaf9e9229ed63d29730c86b7bb445c8efa546c0903b0a16f7601f28094b17f88", 0xe86}], 0x3}, 0x24004089) 7m39.848477408s ago: executing program 0 (id=2476): unshare(0x2a020400) bind(0xffffffffffffffff, &(0x7f0000000200)=@phonet={0x23, 0x3, 0xf, 0x6e}, 0x80) 7m39.711199721s ago: executing program 0 (id=2478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) 7m39.44946023s ago: executing program 0 (id=2480): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000580)}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) 7m38.917028515s ago: executing program 0 (id=2481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2f) dup(0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x1098c2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f38798d000000003991f3787269de5382929be107a698db9edbc0257c0bb0205084640cc1c859d69828feab5d0ac72f62c0bf387044a185428df3ab4cc2525d41adb01c8c13c71b6a98dac98f678e2472d5a6a8a5b2f69ac595a8bea681e962033baf38e57debcb4a900797d1f406f72c22a58b8255e88e662270140fe5646e9e558f594eaf8856161f4815b9948a065b3c8d75913b04ea16c3b0fc01db5e42f8c6b19b2f14994700a509701d4066bf3e07b637c32f260a86c7d383362a41060c965f41a4c3c819342935ca7af09a6fb3bd9cba3459c25d9f8709b0", 0x172) 7m38.254402477s ago: executing program 0 (id=2483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0xa2ec9000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010024bd70000000000300000000000000070002000008000300", @ANYRES32=r9, @ANYBLOB="08000100e0000001080002007f000001"], 0x34}}, 0xea5bc50b6199d7fe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 7m23.172917003s ago: executing program 33 (id=2483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0xa2ec9000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010024bd70000000000300000000000000070002000008000300", @ANYRES32=r9, @ANYBLOB="08000100e0000001080002007f000001"], 0x34}}, 0xea5bc50b6199d7fe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 7m4.74089238s ago: executing program 2 (id=2596): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) 7m4.594385345s ago: executing program 2 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 7m4.536366136s ago: executing program 4 (id=2601): syz_open_dev$vim2m(0x0, 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) capget(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) futex(&(0x7f0000000140)=0x1, 0x100, 0x0, 0x0, &(0x7f0000000000), 0x0) 7m4.332781457s ago: executing program 2 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000003800)={0x2c, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 7m4.188884386s ago: executing program 2 (id=2605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="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", 0x3e8}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 7m3.438548356s ago: executing program 4 (id=2607): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m3.311913191s ago: executing program 2 (id=2608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="d79470"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m3.310182679s ago: executing program 3 (id=2609): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) 7m1.871311596s ago: executing program 2 (id=2610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x4401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 7m1.667601669s ago: executing program 3 (id=2611): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m1.415031453s ago: executing program 4 (id=2612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 7m1.220933986s ago: executing program 4 (id=2613): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 7m1.043016157s ago: executing program 4 (id=2615): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x4, 0x100}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffd75, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x3, 0x9, 0xffff, 0x400, 0x5, 0x20000}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @local}]}) 7m0.653358957s ago: executing program 4 (id=2617): unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) bind(r1, &(0x7f00000000c0)=@x25, 0x80) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newtclass={0x40, 0x28, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0x5}, {0x10, 0x9}, {0xf, 0x1}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 6m59.625304173s ago: executing program 6 (id=2621): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) 6m59.448542757s ago: executing program 6 (id=2622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000030400"/18, @ANYRES32=r2, @ANYBLOB="00000000000000004c0019"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m59.387612906s ago: executing program 3 (id=2623): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="38007fd65c9029e981027b3a6c050fb3121743957001c2e59d46de25df78b5390bf3d6a6dc5d5b79bf8366de18ae307a8545e0e0d5d858fbd686d7fc8008e552b5bf913d0d0f23f778c03bbce9359f86bebb38ba426d3db6fbd1b2cd67ce985a87df6602c6baf3a2e41e762d77d4d9d1cb3f686dbd6f42357b9e689def3c95d869403ec988b10a0ed433b8307c4071bffc080683bf9f0e63932b5a37aebe7f7756d76c8ffc15f0084d62403b8fed94bc60f31011ec3bd020a638dc120330a0ca69d3efeac3e4db090878bb6af113067d401ceb05aec117d9816bf0591dbf6e83d89674243cada483dd2be1c5cf379bc2366313072bc7b1f4f1654214f843beef8b26c8e3b7900e284222f8f8c5efad6ae4aba142284e023f5eed92256f581b9a7f6bb02898676d197a5c9b2864100c50ab758c80964abb4889e4b4310a7735335fe0a7d369f7861928548c7c67da945dac4adeaf19993a1a745fbb92c39252a4b9a99b9a20f8ebdbb1aa62248812fcaa85740b4f415fbc08c43b8c95bd94ffa0af2b39dd06a916bbae1f374d1e4754ca0cbf771b260dea9e1175d3114d8652febc9aa53a941ffeff4538ad7b047b4ea3dd9a7199ab6c9c69467e5ffcaa0edff957d64f851579e42576653c60020f1437fd6f27d752caf6c3da089a0afe1ad1fb08228c3e0eb8bf2d74b6b62886553029c1ddfcabdd538b5bcdf5fa52433d759d3e62bf64c6691d64895eee49b2389f5ec4eac01b26447c9ab28a1830d89330379da4fef834415cd5393005b7bcb8a3b65cb607f4d4f661eec42952f26e11892fa8a594cdda1bee6b0671c785dfc1b425a267a8d5d6a4745918bcb2ed5c3abbcd5e2b213b404283bc1df09a2898d34665bbfc3f0b9be2de892290d0429c3e4b089d5c1be7ad9dd87b8b2b1aa543ed0f84e58f0c0eb65ea5ec41851bb756049909899dfd852b4a05635e4c32bd46ec0c11b9f555e7a7d1d6f9d0f80515499dd5d583449d38539f0f8087bdabd7d184dfaa38bf430df557ae60c3de022b9d98e87d773c38b0885dd9cbf79239174b70d9cd040fa64bde1c1c5359cfee65e605cc87002e6df9c0ce5cd8be0e31893fd7fad6904f73aca09689c39c6670f17a52020831b4d484ff014e84136ef50943de11705488a9adb94c1bdd412a8922772b3c7b4cd1da44a279793e1aa6ef212a0ad3bf93bcadc0958c10dfd04886c0c99db0404c6a4a5f65e5ccb67c11b478dc0aa49f78006e4a8a4382e1a9b0150a80b46dc5d06b25d87308fc58e5bdb83452a88ef67e2addb13269e56260405d241c79206e658d6275063c78cd40ce028392eb624653684d171f666579c219def64f9991c6bb559075e092ad87a4331c8d2745475b4a8e94de9710a7d3bb1352696bd0248ed6729d4ab70b135c", 0x3e8}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 6m59.328265261s ago: executing program 3 (id=2624): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 6m59.186957623s ago: executing program 6 (id=2625): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x400}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6m59.1451988s ago: executing program 3 (id=2627): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x4, 0x100}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffd75, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x3, 0x9, 0xffff, 0x400, 0x5, 0x20000}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @local}]}) 6m58.884666081s ago: executing program 3 (id=2629): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004600"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m57.617226134s ago: executing program 6 (id=2631): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m57.073042744s ago: executing program 6 (id=2634): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="c1cc", 0x2}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 6m57.058593963s ago: executing program 6 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000030400"/19, @ANYRES32=r2, @ANYBLOB="00000000000000004c0019"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m46.362502531s ago: executing program 34 (id=2610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x4401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 6m45.374524442s ago: executing program 35 (id=2617): unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) bind(r1, &(0x7f00000000c0)=@x25, 0x80) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newtclass={0x40, 0x28, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0x5}, {0x10, 0x9}, {0xf, 0x1}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 6m43.385970664s ago: executing program 36 (id=2629): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004600"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m41.393313364s ago: executing program 37 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000001000030400"/19, @ANYRES32=r2, @ANYBLOB="00000000000000004c0019"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.058151144s ago: executing program 9 (id=4766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 7.740804865s ago: executing program 9 (id=4770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6.257199134s ago: executing program 1 (id=4775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000400}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3010000}}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x6}, @generic={0x45, 0x0, 0x0, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 5.449182147s ago: executing program 1 (id=4778): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) 5.19791913s ago: executing program 9 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "85798b6d74d65538a6f879e98b0ce960"}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 5.091294032s ago: executing program 9 (id=4782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e26, 0xffffff71, @loopback, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) 5.051952788s ago: executing program 8 (id=4783): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 4.940788329s ago: executing program 5 (id=4784): setregid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) 4.890307439s ago: executing program 7 (id=4785): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="240000000100", 0x6) 3.59090437s ago: executing program 7 (id=4786): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000060000000800000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f00000003c0)="f18aae65f8a3a5f8d762e8e7e5c70edc22a1b709a2d25de85939b7f8ba7e6fdcc509fe62e9612a75dc312f11839cc1fd458204eacb4280edaa52f93375eb", 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00"/26], 0x0, 0x1a, 0x0, 0x0, 0x2}, 0x28) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x832}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x54}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r3, 0x10, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}}, 0x4004010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) socket$netlink(0x10, 0x3, 0x0) 3.585774986s ago: executing program 8 (id=4787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.534273594s ago: executing program 1 (id=4788): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x80, 0x0, 0x0, 0x0, 0x11}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) 3.441042801s ago: executing program 5 (id=4789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.375294357s ago: executing program 9 (id=4790): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3, 0x1000) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 3.366829531s ago: executing program 7 (id=4791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 3.36654332s ago: executing program 8 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "85798b6d74d65538a6f879e98b0ce960"}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.284714433s ago: executing program 5 (id=4793): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x13, 0x1c, 0x0, 0x0, 0x4a, 0x2, 0x0, @rand_addr=0x64010102, @multicast1}, {0x12, 0x9, 0x0, @broadcast}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) 2.345763163s ago: executing program 1 (id=4794): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) 2.167321809s ago: executing program 8 (id=4795): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x2fc}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.037483766s ago: executing program 1 (id=4796): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fd, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x38000000}, {0xa, 0x4e24, 0xec, @mcast1, 0x4}, r2, 0xe2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) 1.356852888s ago: executing program 5 (id=4797): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 1.215242813s ago: executing program 7 (id=4798): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) 1.197776861s ago: executing program 9 (id=4799): syz_usb_connect(0x0, 0x2d, &(0x7f0000001fc0)={{0x12, 0x1, 0x40, 0x3b, 0xa2, 0xcd, 0x8, 0x413c, 0x81a3, 0x1dfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0xfa, 0x90, 0x8, [{{0x9, 0x4, 0x8, 0x77, 0x0, 0x49, 0xfd, 0xb, 0x9}}, {{0x9, 0x4, 0x15, 0x7, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e", 0x2c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = syz_io_uring_complete(0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x80) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.196668689s ago: executing program 8 (id=4800): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e26, 0xffffff71, @loopback, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) 1.14478292s ago: executing program 1 (id=4801): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fd, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r2, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x38000000}, {0xa, 0x4e24, 0xec, @mcast1, 0x4}, r2, 0xe2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) socket$inet6_sctp(0xa, 0x1, 0x84) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={[&(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000080)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 812.029944ms ago: executing program 7 (id=4802): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000060000000800000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f00000003c0)="f18aae65f8a3a5f8d762e8e7e5c70edc22a1b709a2d25de85939b7f8ba7e6fdcc509fe62e9612a75dc312f11839cc1fd458204eacb4280edaa52f93375eb", 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00"/26], 0x0, 0x1a, 0x0, 0x0, 0x2}, 0x28) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x832}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x54}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r3, 0x10, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}}, 0x4004010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) socket$netlink(0x10, 0x3, 0x0) 744.128901ms ago: executing program 7 (id=4803): listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 215.97056ms ago: executing program 5 (id=4804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, 0x0, 0x0, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) 120.449433ms ago: executing program 8 (id=4805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 5 (id=4806): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.6.2635'. [ 920.026929][T14418] binder: 14417:14418 ioctl c0306201 0 returned -14 [ 920.601546][T14419] binder: 14417:14419 ioctl c0306201 0 returned -14 [ 929.991345][T14439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.030887][T14439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.031260][T14439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.040067][T14439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.041819][T14439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.971258][T14439] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 930.983553][T14439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 930.983940][T14439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 930.985188][T14439] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 930.985835][T14439] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 931.585942][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.586007][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.146442][ T5813] Bluetooth: hci3: command tx timeout [ 932.959839][T14439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.009396][T14439] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.009754][T14439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.010848][T14439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.011452][T14439] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.092466][T14439] Bluetooth: hci6: command tx timeout [ 934.212519][T14439] Bluetooth: hci3: command tx timeout [ 934.940861][ T5813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 934.951845][ T5813] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 934.962990][ T5813] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 934.970311][ T5813] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 934.970964][ T5813] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 935.099259][T14439] Bluetooth: hci7: command tx timeout [ 935.173565][T14439] Bluetooth: hci6: command tx timeout [ 936.292360][T14439] Bluetooth: hci3: command tx timeout [ 936.864264][T14381] syz_tun (unregistering): left allmulticast mode [ 937.012369][T14439] Bluetooth: hci8: command tx timeout [ 937.182476][T14439] Bluetooth: hci7: command tx timeout [ 937.252397][T14439] Bluetooth: hci6: command tx timeout [ 937.906454][T14495] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.010677][ T1421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.370894][ T1421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.372635][T14439] Bluetooth: hci3: command tx timeout [ 938.748688][ T1421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.890933][T14442] chnl_net:caif_netlink_parms(): no params data found [ 938.920540][T14446] chnl_net:caif_netlink_parms(): no params data found [ 939.092398][T14439] Bluetooth: hci8: command tx timeout [ 939.117127][ T1421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.254495][T14439] Bluetooth: hci7: command tx timeout [ 939.282406][T14449] chnl_net:caif_netlink_parms(): no params data found [ 939.332290][T14439] Bluetooth: hci6: command tx timeout [ 939.510326][T14437] chnl_net:caif_netlink_parms(): no params data found [ 939.942475][T14560] netlink: 'syz.5.2671': attribute type 27 has an invalid length. [ 940.007550][T14442] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.007716][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.007950][T14442] bridge_slave_0: entered allmulticast mode [ 940.010860][T14442] bridge_slave_0: entered promiscuous mode [ 940.062093][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.062351][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.062561][T14446] bridge_slave_0: entered allmulticast mode [ 940.065155][T14446] bridge_slave_0: entered promiscuous mode [ 940.159886][T14442] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.160012][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.160238][T14442] bridge_slave_1: entered allmulticast mode [ 940.193105][T14442] bridge_slave_1: entered promiscuous mode [ 940.198815][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.198946][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.199393][T14446] bridge_slave_1: entered allmulticast mode [ 940.213473][T14446] bridge_slave_1: entered promiscuous mode [ 940.398434][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.398623][T14449] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.398914][T14449] bridge_slave_0: entered allmulticast mode [ 940.425060][T14449] bridge_slave_0: entered promiscuous mode [ 940.499505][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.499616][T14449] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.499826][T14449] bridge_slave_1: entered allmulticast mode [ 940.504566][T14449] bridge_slave_1: entered promiscuous mode [ 940.626010][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.630336][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.685005][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.685145][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.685334][T14437] bridge_slave_0: entered allmulticast mode [ 940.688175][T14437] bridge_slave_0: entered promiscuous mode [ 940.809123][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.822946][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.852015][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.852121][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.868739][T14437] bridge_slave_1: entered allmulticast mode [ 940.882123][T14437] bridge_slave_1: entered promiscuous mode [ 940.925239][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.925514][ T1421] bridge_slave_1: left allmulticast mode [ 940.925530][ T1421] bridge_slave_1: left promiscuous mode [ 940.925669][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.014602][ T1421] bridge_slave_0: left allmulticast mode [ 941.014632][ T1421] bridge_slave_0: left promiscuous mode [ 941.014868][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.173282][T14439] Bluetooth: hci8: command tx timeout [ 941.332351][T14439] Bluetooth: hci7: command tx timeout [ 941.763519][ T1421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.859626][ T1421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.898546][ T1421] bond0 (unregistering): Released all slaves [ 942.054038][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.054215][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2680'. [ 942.104438][T14442] team0: Port device team_slave_0 added [ 942.107829][T14446] team0: Port device team_slave_0 added [ 942.150631][T14442] team0: Port device team_slave_1 added [ 942.155549][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.158851][T14446] team0: Port device team_slave_1 added [ 942.250434][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.275375][T14449] team0: Port device team_slave_0 added [ 942.624123][T14449] team0: Port device team_slave_1 added [ 942.662768][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.662786][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.662813][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.830665][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.830681][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.830705][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.847555][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.847573][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.847600][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.945469][T14437] team0: Port device team_slave_0 added [ 942.970988][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.971005][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.971034][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.972986][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.973001][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.973026][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.977296][T14437] team0: Port device team_slave_1 added [ 942.981429][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.981446][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.981477][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.111996][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2687'. [ 943.252405][T14439] Bluetooth: hci8: command tx timeout [ 943.606480][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.606497][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.606523][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.768053][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.768072][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.768098][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.831908][T14442] hsr_slave_0: entered promiscuous mode [ 943.836480][T14442] hsr_slave_1: entered promiscuous mode [ 943.842749][T14442] debugfs: 'hsr0' already exists in 'hsr' [ 943.842776][T14442] Cannot create hsr debugfs directory [ 944.072603][ T1421] hsr_slave_0: left promiscuous mode [ 944.112445][ T1421] hsr_slave_1: left promiscuous mode [ 944.113155][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.113171][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.153146][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.153166][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.237016][ T1421] veth1_macvtap: left promiscuous mode [ 944.237073][ T1421] veth0_macvtap: left promiscuous mode [ 944.237199][ T1421] veth1_vlan: left promiscuous mode [ 944.237288][ T1421] veth0_vlan: left promiscuous mode [ 944.513483][ T1421] pimreg (unregistering): left allmulticast mode [ 944.943097][ T1421] team0 (unregistering): Port device team_slave_1 removed [ 944.983862][ T1421] team0 (unregistering): Port device team_slave_0 removed [ 945.194825][T14446] hsr_slave_0: entered promiscuous mode [ 945.198537][T14446] hsr_slave_1: entered promiscuous mode [ 945.201250][T14446] debugfs: 'hsr0' already exists in 'hsr' [ 945.201275][T14446] Cannot create hsr debugfs directory [ 945.276156][T14449] hsr_slave_0: entered promiscuous mode [ 945.277459][T14449] hsr_slave_1: entered promiscuous mode [ 945.278323][T14449] debugfs: 'hsr0' already exists in 'hsr' [ 945.278345][T14449] Cannot create hsr debugfs directory [ 945.381819][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2694'. [ 945.419835][T14437] hsr_slave_0: entered promiscuous mode [ 945.421207][T14437] hsr_slave_1: entered promiscuous mode [ 945.422129][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 945.422153][T14437] Cannot create hsr debugfs directory [ 945.755215][T14672] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.091561][T14672] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.418000][T14672] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.765096][T14672] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.824394][ T1421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.854263][T14442] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 947.880114][ T40] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.886019][T14442] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 948.166658][T14442] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 948.197007][ T40] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.325233][ T1421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.365126][T14442] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 948.594129][ T159] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.744257][ T1421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.780105][ T191] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.176604][ T1421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.468564][T14708] netlink: 41 bytes leftover after parsing attributes in process `syz.5.2700'. [ 949.468588][T14708] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2700'. [ 949.606647][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2701'. [ 949.887631][T14442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.178852][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.484949][ T1421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.530928][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.531002][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.583437][T12858] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.583511][T12858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.834431][ T1421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.883757][T14446] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 951.000119][T14446] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 951.246780][ T1421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.283163][T14446] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 951.358453][T14446] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 951.530414][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2708'. [ 951.603730][ T1421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.664931][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 951.814194][T14449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 951.862394][T14449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 951.924683][T14449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.147189][T14449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 952.553324][T14437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 952.592561][ T1421] bridge_slave_1: left allmulticast mode [ 952.592590][ T1421] bridge_slave_1: left promiscuous mode [ 952.602641][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.674122][ T1421] bridge_slave_0: left allmulticast mode [ 952.674155][ T1421] bridge_slave_0: left promiscuous mode [ 952.674552][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.766411][ T1421] bridge_slave_1: left allmulticast mode [ 952.766442][ T1421] bridge_slave_1: left promiscuous mode [ 952.766663][ T1421] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.839556][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2711'. [ 952.874432][ T1421] bridge_slave_0: left allmulticast mode [ 952.874462][ T1421] bridge_slave_0: left promiscuous mode [ 952.874706][ T1421] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.778063][ T1421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.834093][ T1421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.856076][ T1421] bond0 (unregistering): Released all slaves [ 954.862146][ T1421] bond1 (unregistering): Released all slaves [ 955.302867][ T1421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.384161][ T1421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.444964][ T1421] bond0 (unregistering): (slave team0): Releasing backup interface [ 955.463271][ T1421] bond0 (unregistering): Released all slaves [ 955.468449][ T1421] bond1 (unregistering): Released all slaves [ 955.481398][ T1421] bond2 (unregistering): Released all slaves [ 955.498899][ T1421] bond3 (unregistering): Released all slaves [ 955.510681][ T1421] bond4 (unregistering): Released all slaves [ 955.526022][ T1421] bond5 (unregistering): Released all slaves [ 955.571822][T14437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 955.599311][T14437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 955.717383][ T1421] !©9: left promiscuous mode [ 955.836897][T14437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 955.927420][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.168440][T14446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.104294][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.145356][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.148317][ T9393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.251292][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.251484][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.316015][T14449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.474096][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.609147][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.791856][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.796776][T12137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.897000][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2725'. [ 958.972932][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.973062][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.218752][T14442] veth0_vlan: entered promiscuous mode [ 959.282752][T14848] syzkaller0: entered promiscuous mode [ 959.282776][T14848] syzkaller0: entered allmulticast mode [ 959.386706][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.436678][T14849] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2726'. [ 960.087067][T14442] veth1_vlan: entered promiscuous mode [ 960.159523][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.191560][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.377720][ T1421] hsr_slave_0: left promiscuous mode [ 960.412517][ T1421] hsr_slave_1: left promiscuous mode [ 960.413646][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.413673][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.474659][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.474687][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.653019][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.653047][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.703750][ T1421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.703775][ T1421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.798190][ T1421] veth1_macvtap: left promiscuous mode [ 960.798250][ T1421] veth0_macvtap: left promiscuous mode [ 960.798418][ T1421] veth1_vlan: left promiscuous mode [ 960.798526][ T1421] veth0_vlan: left promiscuous mode [ 960.932807][ T1421] veth1_macvtap: left promiscuous mode [ 960.935907][ T1421] veth0_macvtap: left promiscuous mode [ 960.936066][ T1421] veth1_vlan: left promiscuous mode [ 960.936109][ T1421] veth0_vlan: left promiscuous mode [ 961.723568][ T1421] team0 (unregistering): Port device team_slave_1 removed [ 961.762969][ T1421] team0 (unregistering): Port device team_slave_0 removed [ 962.302826][ T1421] team0 (unregistering): Port device team_slave_1 removed [ 962.342874][ T1421] team0 (unregistering): Port device team_slave_0 removed [ 962.506637][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.506728][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.687264][T14446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.705898][T14442] veth0_macvtap: entered promiscuous mode [ 962.773761][T14442] veth1_macvtap: entered promiscuous mode [ 963.116956][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.972713][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.058314][ T1370] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.069939][ T1370] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.091192][T14929] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.092666][ T1370] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.110461][ T1385] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.299611][T14449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.781957][ T1370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.781978][ T1370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.895938][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.956664][T14446] veth0_vlan: entered promiscuous mode [ 965.108577][T14449] veth0_vlan: entered promiscuous mode [ 965.120989][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.121014][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.121712][T14446] veth1_vlan: entered promiscuous mode [ 965.207289][T14449] veth1_vlan: entered promiscuous mode [ 965.472960][T14446] veth0_macvtap: entered promiscuous mode [ 965.491348][T14449] veth0_macvtap: entered promiscuous mode [ 965.524347][T14446] veth1_macvtap: entered promiscuous mode [ 965.535029][T14449] veth1_macvtap: entered promiscuous mode [ 965.669832][T14449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.783336][T14446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.795503][T14449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.836856][T14446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.854187][T12137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.875290][T12137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.878337][T12137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.879452][T12137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.897168][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.900788][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.901165][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.901353][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.026000][T14981] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.383163][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.383184][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.561015][ T1370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.561036][ T1370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.634509][T14437] veth0_vlan: entered promiscuous mode [ 968.701368][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.701390][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.780976][T14437] veth1_vlan: entered promiscuous mode [ 968.799353][ T1370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.799374][ T1370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.960145][T14437] veth0_macvtap: entered promiscuous mode [ 969.099266][T14437] veth1_macvtap: entered promiscuous mode [ 969.668861][T14437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.763395][T14437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.764255][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 969.854334][ T1385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.987768][ T1385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.002071][ T1385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.020931][ T1385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.819142][T12137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.819161][T12137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.621443][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.621465][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.707681][T15089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 972.831615][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2769'. [ 978.194018][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2806'. [ 978.254920][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 979.556699][T15328] netlink: 'syz.7.2815': attribute type 1 has an invalid length. [ 979.556725][T15328] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2815'. [ 979.556756][T15328] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2815'. [ 979.556769][T15328] netlink: 658 bytes leftover after parsing attributes in process `syz.7.2815'. [ 980.642473][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2822'. [ 980.732418][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2822'. [ 981.425178][T15376] netlink: 41 bytes leftover after parsing attributes in process `syz.9.2831'. [ 981.425201][T15376] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2831'. [ 981.425221][T15376] netlink: 41 bytes leftover after parsing attributes in process `syz.9.2831'. [ 983.229101][T15431] __nla_validate_parse: 7 callbacks suppressed [ 983.229120][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2847'. [ 983.330865][T15435] netlink: 120 bytes leftover after parsing attributes in process `syz.8.2849'. [ 983.562558][T15443] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2852'. [ 983.562611][T15443] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2852'. [ 984.274519][ T1370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.401955][T15458] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2859'. [ 984.401979][T15458] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2859'. [ 984.474900][T15458] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2859'. [ 985.066765][ T1370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.849611][ T1370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.012995][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2872'. [ 986.243177][T15524] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2880'. [ 986.243230][T15524] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2880'. [ 987.326586][ T1370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.023082][ T1370] bridge_slave_1: left allmulticast mode [ 989.023110][ T1370] bridge_slave_1: left promiscuous mode [ 989.023361][ T1370] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.171805][ T1370] bridge_slave_0: left allmulticast mode [ 989.171834][ T1370] bridge_slave_0: left promiscuous mode [ 989.172083][ T1370] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.130665][T15605] binder: BINDER_SET_CONTEXT_MGR already set [ 990.130701][T15605] binder: 15600:15605 ioctl 4018620d 200000004a80 returned -16 [ 992.374607][ T1370] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 992.773064][ T1370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.864217][ T1370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.884798][ T1370] bond0 (unregistering): Released all slaves [ 992.890379][ T1370] bond1 (unregistering): Released all slaves [ 992.914212][ T1370] bond2 (unregistering): Released all slaves [ 992.929672][ T1370] bond3 (unregistering): Released all slaves [ 992.975611][T15587] __nla_validate_parse: 3 callbacks suppressed [ 992.975631][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2904'. [ 993.018628][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.018699][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.654668][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 995.192466][ T1370] hsr_slave_0: left promiscuous mode [ 995.310875][ T1370] hsr_slave_1: left promiscuous mode [ 995.311821][ T1370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.311845][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.363247][ T1370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.363274][ T1370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.513627][ T1370] veth1_macvtap: left promiscuous mode [ 995.513722][ T1370] veth0_macvtap: left promiscuous mode [ 995.513949][ T1370] veth1_vlan: left promiscuous mode [ 995.514019][ T1370] veth0_vlan: left promiscuous mode [ 995.617731][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'. [ 996.896273][T15733] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2953'. [ 996.923300][ T1370] team0 (unregistering): Port device team_slave_1 removed [ 996.982849][ T1370] team0 (unregistering): Port device team_slave_0 removed [ 997.417717][ T1370] team0 (unregistering): Port device dummy0 removed [ 997.532466][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2944'. [ 997.666717][ T36] infiniband syz2: ib_query_port failed (-19) [ 999.812784][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 1001.668399][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1001.884062][T15828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.232756][T15828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.801444][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1004.040393][T15874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1006.246205][ T37] audit: type=1326 audit(1772179304.074:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.246255][ T37] audit: type=1326 audit(1772179304.074:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.247383][ T37] audit: type=1326 audit(1772179304.074:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.247425][ T37] audit: type=1326 audit(1772179304.074:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.247464][ T37] audit: type=1326 audit(1772179304.074:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.248244][ T37] audit: type=1326 audit(1772179304.074:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.248285][ T37] audit: type=1326 audit(1772179304.074:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.248325][ T37] audit: type=1326 audit(1772179304.074:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.248920][ T37] audit: type=1326 audit(1772179304.074:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.248960][ T37] audit: type=1326 audit(1772179304.074:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15908 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1006.832633][T15864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1007.115020][T15916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2995'. [ 1009.603565][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3008'. [ 1010.930306][T16041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1011.168744][T16053] netlink: 'syz.1.3025': attribute type 2 has an invalid length. [ 1011.168767][T16053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3025'. [ 1011.341235][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1011.341253][ T37] audit: type=1326 audit(1772179309.164:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.341298][ T37] audit: type=1326 audit(1772179309.164:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.342021][ T37] audit: type=1326 audit(1772179309.164:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.342066][ T37] audit: type=1326 audit(1772179309.164:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.342106][ T37] audit: type=1326 audit(1772179309.164:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.373268][ T37] audit: type=1326 audit(1772179309.204:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.373319][ T37] audit: type=1326 audit(1772179309.204:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.373359][ T37] audit: type=1326 audit(1772179309.204:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.374571][ T37] audit: type=1326 audit(1772179309.204:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.374612][ T37] audit: type=1326 audit(1772179309.204:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16042 comm="syz.8.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028258c799 code=0x7ffc0000 [ 1011.599187][T16059] netlink: 'syz.7.3027': attribute type 9 has an invalid length. [ 1011.635165][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3028'. [ 1011.889900][T16076] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3031'. [ 1012.343366][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1012.629933][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3042'. [ 1013.103414][T16129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1013.544408][T16151] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3051'. [ 1013.544460][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3051'. [ 1013.614166][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3050'. [ 1013.843757][T16158] ipvlan2: entered promiscuous mode [ 1015.463077][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1017.000499][T16259] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3085'. [ 1017.000832][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3084'. [ 1017.193707][T16266] netlink: 'syz.9.3087': attribute type 1 has an invalid length. [ 1017.337248][T16266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.426471][T16271] vlan2: entered promiscuous mode [ 1017.426494][T16271] bond1: entered promiscuous mode [ 1017.426651][T16271] vlan2: entered allmulticast mode [ 1017.426664][T16271] bond1: entered allmulticast mode [ 1017.810406][T16271] bond1: (slave bridge1): making interface the new active one [ 1017.810431][T16271] bridge1: entered promiscuous mode [ 1017.810595][T16271] bridge1: entered allmulticast mode [ 1017.852762][T16271] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1018.074717][T16288] binder: 16286:16288 ioctl c0306201 0 returned -14 [ 1019.895019][T16297] netlink: 'syz.8.3096': attribute type 9 has an invalid length. [ 1020.131329][T16301] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1022.720378][T14439] Bluetooth: hci8: link tx timeout [ 1022.720580][T14439] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 1024.788434][ T5813] Bluetooth: hci8: command 0x0406 tx timeout [ 1025.252447][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3134'. [ 1025.744975][T16429] binder: 16424:16429 ioctl c0306201 0 returned -14 [ 1027.863205][T16450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1029.345722][T16455] syzkaller0: entered promiscuous mode [ 1029.345748][T16455] syzkaller0: entered allmulticast mode [ 1029.534279][T16421] netlink: 'syz.7.3138': attribute type 5 has an invalid length. [ 1029.646095][T16463] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3148'. [ 1030.410425][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3151'. [ 1031.231017][T16484] syzkaller0: entered promiscuous mode [ 1031.231043][T16484] syzkaller0: entered allmulticast mode [ 1032.102247][T16499] netlink: 'syz.8.3158': attribute type 29 has an invalid length. [ 1032.115213][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1032.154470][T16499] netlink: 'syz.8.3158': attribute type 29 has an invalid length. [ 1035.983546][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1035.983563][ T37] audit: type=1326 audit(1772179333.814:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.983610][ T37] audit: type=1326 audit(1772179333.814:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.983993][ T37] audit: type=1326 audit(1772179333.814:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984035][ T37] audit: type=1326 audit(1772179333.814:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984077][ T37] audit: type=1326 audit(1772179333.814:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984660][ T37] audit: type=1326 audit(1772179333.814:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984702][ T37] audit: type=1326 audit(1772179333.814:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984742][ T37] audit: type=1326 audit(1772179333.814:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.984783][ T37] audit: type=1326 audit(1772179333.814:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1035.985132][ T37] audit: type=1326 audit(1772179333.814:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16563 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8abf0ec799 code=0x7ffc0000 [ 1036.457732][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1037.058537][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3192'. [ 1037.984878][T16645] netlink: 57 bytes leftover after parsing attributes in process `syz.8.3203'. [ 1037.984893][T16645] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3203'. [ 1038.328896][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 1039.538956][T16673] tipc: Started in network mode [ 1039.538986][T16673] tipc: Node identity 76e3a7d544d5, cluster identity 4711 [ 1039.539148][T16673] tipc: Enabled bearer , priority 0 [ 1039.546892][T16673] syzkaller0: entered promiscuous mode [ 1039.546914][T16673] syzkaller0: entered allmulticast mode [ 1039.580771][T16673] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3213'. [ 1039.591664][T16673] tipc: Resetting bearer [ 1039.644572][T16671] tipc: Resetting bearer [ 1039.784992][T16671] tipc: Disabling bearer [ 1040.840614][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3221'. [ 1042.479096][T16675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.305150][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3235'. [ 1045.006209][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1045.006227][ T37] audit: type=1326 audit(1772179342.824:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006271][ T37] audit: type=1326 audit(1772179342.824:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006311][ T37] audit: type=1326 audit(1772179342.824:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006351][ T37] audit: type=1326 audit(1772179342.824:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006389][ T37] audit: type=1326 audit(1772179342.824:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006428][ T37] audit: type=1326 audit(1772179342.824:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006467][ T37] audit: type=1326 audit(1772179342.824:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006506][ T37] audit: type=1326 audit(1772179342.824:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006545][ T37] audit: type=1326 audit(1772179342.834:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1045.006583][ T37] audit: type=1326 audit(1772179342.834:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16718 comm="syz.9.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1048.022024][T16846] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3259'. [ 1049.241786][T16880] netlink: 49 bytes leftover after parsing attributes in process `syz.9.3269'. [ 1049.241809][T16880] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3269'. [ 1049.241849][T16880] netlink: 49 bytes leftover after parsing attributes in process `syz.9.3269'. [ 1050.006778][T16902] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1050.275039][T16914] netlink: 49 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1050.275062][T16914] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1050.275082][T16914] netlink: 49 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1050.808007][T16931] syzkaller0: entered promiscuous mode [ 1050.808032][T16931] syzkaller0: entered allmulticast mode [ 1051.599371][T16947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1052.189341][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3300'. [ 1053.085410][T16981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1053.736015][T16971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.161237][T17013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1054.602064][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.613271][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.618404][T17100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.672361][T17027] Bluetooth: hci7: command 0x0406 tx timeout [ 1057.672394][T17027] Bluetooth: hci6: command 0x0406 tx timeout [ 1057.672415][T17027] Bluetooth: hci3: command 0x0406 tx timeout [ 1057.844370][T17104] tipc: Enabling of bearer rejected, failed to enable media [ 1057.923383][T17108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1059.271611][T17133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1059.958602][T17165] tipc: Enabled bearer , priority 0 [ 1059.980264][T17165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3343'. [ 1059.997928][T17165] tipc: Resetting bearer [ 1060.556119][T17208] bond_slave_0: entered promiscuous mode [ 1060.556730][T17208] bond_slave_1: entered promiscuous mode [ 1060.557077][T17208] vlan2: entered promiscuous mode [ 1060.557091][T17208] bond0: entered promiscuous mode [ 1061.075556][T17162] tipc: Disabling bearer [ 1061.381083][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'. [ 1061.462550][T15573] tipc: Node number set to 4139707399 [ 1063.864053][ T37] audit: type=1326 audit(1772179361.694:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.864180][ T37] audit: type=1326 audit(1772179361.694:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.864533][ T37] audit: type=1326 audit(1772179361.694:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.864684][ T37] audit: type=1326 audit(1772179361.694:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.864833][ T37] audit: type=1326 audit(1772179361.694:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.865052][ T37] audit: type=1326 audit(1772179361.694:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.865432][ T37] audit: type=1326 audit(1772179361.694:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.865569][ T37] audit: type=1326 audit(1772179361.694:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.865943][ T37] audit: type=1326 audit(1772179361.694:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1063.866078][ T37] audit: type=1326 audit(1772179361.694:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17249 comm="syz.7.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d78ec799 code=0x7ffc0000 [ 1066.292517][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3376'. [ 1068.023771][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3386'. [ 1068.391286][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1068.391312][T17366] netlink: 'syz.8.3389': attribute type 9 has an invalid length. [ 1068.391325][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1069.627919][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1069.627949][T17406] netlink: 'syz.8.3404': attribute type 9 has an invalid length. [ 1069.627961][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1069.909435][ T10] IPVS: starting estimator thread 0... [ 1070.270524][T17413] IPVS: using max 9 ests per chain, 21600 per kthread [ 1070.902160][T17435] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3413'. [ 1071.550694][T17454] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 1071.550719][T17454] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1071.550749][T17454] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 1071.702508][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1071.702536][T17462] netlink: 'syz.9.3424': attribute type 9 has an invalid length. [ 1072.722260][T17504] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 1072.722283][T17504] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1072.722296][T17504] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 1072.964974][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3438'. [ 1072.965002][T17512] netlink: 'syz.9.3438': attribute type 9 has an invalid length. [ 1073.000098][T17513] binder: 17510:17513 ioctl c0306201 0 returned -14 [ 1074.509519][T17527] netlink: 'syz.1.3441': attribute type 39 has an invalid length. [ 1075.146243][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.148319][T17544] bridge_slave_1: left allmulticast mode [ 1075.148342][T17544] bridge_slave_1: left promiscuous mode [ 1075.148574][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.328830][T17544] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1075.660007][T17561] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 1075.660031][T17561] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1075.660047][T17561] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 1075.856542][T17570] binder: 17569:17570 ioctl c0306201 0 returned -14 [ 1077.798100][T17608] netlink: 'syz.9.3463': attribute type 1 has an invalid length. [ 1077.798123][T17608] netlink: 704 bytes leftover after parsing attributes in process `syz.9.3463'. [ 1077.798139][T17608] netlink: 'syz.9.3463': attribute type 1 has an invalid length. [ 1078.265292][T17624] binder: 17623:17624 ioctl c0306201 0 returned -14 [ 1079.695662][T17638] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1079.779775][T17643] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3475'. [ 1080.059312][T17650] netlink: 'syz.5.3478': attribute type 1 has an invalid length. [ 1080.059334][T17650] netlink: 704 bytes leftover after parsing attributes in process `syz.5.3478'. [ 1080.059350][T17650] netlink: 'syz.5.3478': attribute type 1 has an invalid length. [ 1080.590999][T17669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3460'. [ 1080.786770][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3486'. [ 1080.786799][T17674] netlink: 'syz.5.3486': attribute type 9 has an invalid length. [ 1084.535112][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3508'. [ 1085.098791][T17769] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3499'. [ 1089.811687][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3545'. [ 1095.304446][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1096.550737][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1096.554176][T17972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1096.911892][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3561'. [ 1096.982126][T17980] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3563'. [ 1097.327190][T17990] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3566'. [ 1097.391380][T17995] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 1097.534277][T17995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1097.562068][T18005] bond1: (slave bridge1): making interface the new active one [ 1097.571018][T18005] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1098.431453][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3578'. [ 1099.156049][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1099.159705][T18058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1099.676336][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3590'. [ 1099.828940][T18083] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3592'. [ 1100.236647][T18102] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3600'. [ 1100.487699][T18112] __nla_validate_parse: 1 callbacks suppressed [ 1100.487748][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3604'. [ 1100.659270][T18109] Bluetooth: MGMT ver 1.23 [ 1102.448397][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3606'. [ 1104.128446][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3619'. [ 1105.023913][ T5806] Bluetooth: hci8: link tx timeout [ 1105.023931][ T5806] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1105.161803][T14439] Bluetooth: hci8: link tx timeout [ 1105.161823][T14439] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1106.138424][T18202] netlink: 'syz.5.3631': attribute type 11 has an invalid length. [ 1106.214029][T18207] netlink: 'syz.9.3634': attribute type 1 has an invalid length. [ 1106.371247][T18207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.434518][T18212] bond2: (slave bridge2): making interface the new active one [ 1106.440046][T18212] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1106.919474][T14439] Bluetooth: hci8: link tx timeout [ 1106.919495][T14439] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1107.071057][T18235] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3645'. [ 1107.172317][T14439] Bluetooth: hci8: command 0x0406 tx timeout [ 1107.333321][T18242] netlink: 'syz.8.3647': attribute type 11 has an invalid length. [ 1107.808485][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1107.808503][ T37] audit: type=1326 audit(1772179405.634:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.808552][ T37] audit: type=1326 audit(1772179405.634:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.808907][ T37] audit: type=1326 audit(1772179405.634:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.808949][ T37] audit: type=1326 audit(1772179405.634:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.809075][ T37] audit: type=1326 audit(1772179405.634:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.809112][ T37] audit: type=1326 audit(1772179405.634:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.809581][ T37] audit: type=1326 audit(1772179405.634:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.809624][ T37] audit: type=1326 audit(1772179405.634:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.809972][ T37] audit: type=1326 audit(1772179405.634:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1107.810014][ T37] audit: type=1326 audit(1772179405.634:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.9.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1109.090344][T18279] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1109.505542][T18288] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3660'. [ 1109.506105][T18289] netlink: 'syz.5.3659': attribute type 11 has an invalid length. [ 1109.751060][T18298] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1110.261895][T18313] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3668'. [ 1111.046659][T18334] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3674'. [ 1111.383985][T18345] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3679'. [ 1111.916900][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3686'. [ 1113.171210][T18381] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1113.171244][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3692'. [ 1114.422533][T18412] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3699'. [ 1115.301839][T18442] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1115.799417][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3713'. [ 1115.905788][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.905854][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.097315][T18467] bond_slave_0: entered promiscuous mode [ 1116.097371][T18467] bond_slave_1: entered promiscuous mode [ 1116.097415][T18467] bridge_slave_1: entered promiscuous mode [ 1116.149532][T18467] vlan3: entered promiscuous mode [ 1116.149554][T18467] bond0: entered promiscuous mode [ 1117.168740][T18490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3723'. [ 1117.815958][T18520] team_slave_0: entered promiscuous mode [ 1117.816002][T18520] team_slave_1: entered promiscuous mode [ 1117.817078][T18520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1118.501040][T18531] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3738'. [ 1118.792814][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1122.490845][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1122.490862][ T37] audit: type=1326 audit(1772179420.314:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.490906][ T37] audit: type=1326 audit(1772179420.314:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.490946][ T37] audit: type=1326 audit(1772179420.314:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.490982][ T37] audit: type=1326 audit(1772179420.314:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491021][ T37] audit: type=1326 audit(1772179420.314:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491060][ T37] audit: type=1326 audit(1772179420.314:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491098][ T37] audit: type=1326 audit(1772179420.314:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491136][ T37] audit: type=1326 audit(1772179420.314:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491175][ T37] audit: type=1326 audit(1772179420.314:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1122.491220][ T37] audit: type=1326 audit(1772179420.314:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18568 comm="syz.1.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cd6cc799 code=0x7ffc0000 [ 1123.513468][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1127.672955][T18643] netlink: 'syz.7.3769': attribute type 1 has an invalid length. [ 1127.766147][T18643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1127.823762][T18651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3772'. [ 1131.588657][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1131.910272][T18701] 8021q: VLANs not supported on vcan0 [ 1132.313262][T18723] netlink: 'syz.7.3787': attribute type 1 has an invalid length. [ 1132.444003][T18722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1134.599985][T18723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1135.562854][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1135.849130][T18760] 8021q: VLANs not supported on vcan0 [ 1136.987959][T18809] netlink: 'syz.5.3816': attribute type 1 has an invalid length. [ 1136.987990][T18809] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3816'. [ 1139.784596][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3850'. [ 1139.784620][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3850'. [ 1139.784635][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3850'. [ 1140.270543][T18946] tipc: Started in network mode [ 1140.270571][T18946] tipc: Node identity 12318a5dbe9a, cluster identity 4711 [ 1140.270735][T18946] tipc: Enabled bearer , priority 0 [ 1140.271466][T18946] syzkaller0: entered promiscuous mode [ 1140.271489][T18946] syzkaller0: entered allmulticast mode [ 1140.285826][T18946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1140.293256][T18946] tipc: Resetting bearer [ 1140.423948][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3858'. [ 1140.448150][T18945] tipc: Resetting bearer [ 1140.522585][ T37] audit: type=1326 audit(1772179438.344:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.522851][ T37] audit: type=1326 audit(1772179438.344:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.523044][ T37] audit: type=1326 audit(1772179438.344:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.523350][ T37] audit: type=1326 audit(1772179438.344:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.523542][ T37] audit: type=1326 audit(1772179438.344:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.523727][ T37] audit: type=1326 audit(1772179438.344:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.523929][ T37] audit: type=1326 audit(1772179438.344:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.524121][ T37] audit: type=1326 audit(1772179438.344:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.524364][ T37] audit: type=1326 audit(1772179438.344:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1140.524445][ T37] audit: type=1326 audit(1772179438.344:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18940 comm="syz.9.3856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c3d4c799 code=0x7ffc0000 [ 1141.483707][T18945] tipc: Disabling bearer [ 1141.642363][ T5889] tipc: Node number set to 2896923229 [ 1141.643463][T18965] 8021q: VLANs not supported on vcan0 [ 1141.682035][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3864'. [ 1141.688968][T18971] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1142.200699][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3871'. [ 1143.340657][T19051] netlink: zone id is out of range [ 1144.554909][T19096] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1144.662085][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'. [ 1146.263552][T19124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.339184][T19129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1146.539345][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3929'. [ 1146.539858][T19129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1147.161328][T19161] netlink: 'syz.9.3941': attribute type 1 has an invalid length. [ 1147.161352][T19161] netlink: 704 bytes leftover after parsing attributes in process `syz.9.3941'. [ 1147.161367][T19161] netlink: 'syz.9.3941': attribute type 1 has an invalid length. [ 1147.370693][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3944'. [ 1147.524917][T19173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1147.525954][T19177] 8021q: VLANs not supported on vcan0 [ 1147.599839][T19182] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3949'. [ 1148.051844][T19198] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 1148.051868][T19198] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1148.051884][T19198] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 1148.341941][T19209] 8021q: VLANs not supported on vcan0 [ 1148.650553][T19230] netlink: 'syz.5.3972': attribute type 1 has an invalid length. [ 1148.650577][T19230] netlink: 704 bytes leftover after parsing attributes in process `syz.5.3972'. [ 1148.650592][T19230] netlink: 'syz.5.3972': attribute type 1 has an invalid length. [ 1149.306235][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3985'. [ 1149.349612][T19260] netlink: 'syz.9.3986': attribute type 1 has an invalid length. [ 1149.349637][T19260] netlink: 704 bytes leftover after parsing attributes in process `syz.9.3986'. [ 1149.349662][T19260] netlink: 'syz.9.3986': attribute type 1 has an invalid length. [ 1149.904115][T19281] netlink: 'syz.5.3996': attribute type 1 has an invalid length. [ 1149.904136][T19281] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1149.991554][T19287] netlink: 'syz.5.3999': attribute type 1 has an invalid length. [ 1149.991577][T19287] netlink: 704 bytes leftover after parsing attributes in process `syz.5.3999'. [ 1150.085399][T19283] 8021q: VLANs not supported on vcan0 [ 1150.274677][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4004'. [ 1150.442575][T19298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1150.514264][T19312] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4010'. [ 1150.890700][T19324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1151.199604][T16973] IPVS: starting estimator thread 0... [ 1151.200479][T19338] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1151.283659][T19346] IPVS: using max 9 ests per chain, 21600 per kthread [ 1151.422076][T19345] gretap1: entered promiscuous mode [ 1152.272808][T19361] 8021q: VLANs not supported on vcan0 [ 1152.435230][T19373] validate_nla: 4 callbacks suppressed [ 1152.435248][T19373] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 1152.561364][T19373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.222741][T19407] 8021q: VLANs not supported on vcan0 [ 1154.854770][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1154.855384][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 1155.233065][T19448] netlink: 'syz.7.4064': attribute type 1 has an invalid length. [ 1155.306387][T19448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1160.062423][T19492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.418610][T19551] __nla_validate_parse: 3 callbacks suppressed [ 1163.418773][T19551] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1164.209115][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4108'. [ 1170.091329][T19574] 8021q: VLANs not supported on vcan0 [ 1170.135820][T19576] binder: 19575:19576 ioctl c0306201 0 returned -14 [ 1170.694807][T19579] binder: 19575:19579 ioctl c0306201 0 returned -14 [ 1171.584795][T19578] syzkaller0: entered promiscuous mode [ 1171.584820][T19578] syzkaller0: entered allmulticast mode [ 1174.493545][T19594] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4119'. [ 1175.242420][T19611] binder: 19609:19611 ioctl c0306201 0 returned -14 [ 1177.019029][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1177.040658][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1177.041035][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1177.042079][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1177.063282][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1177.337160][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.447811][T19634] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4132'. [ 1179.172605][T14439] Bluetooth: hci1: command tx timeout [ 1181.252433][T14439] Bluetooth: hci1: command tx timeout [ 1183.332335][T14439] Bluetooth: hci1: command tx timeout [ 1185.413224][T14439] Bluetooth: hci1: command tx timeout [ 1185.558793][T19648] binder: 19647:19648 ioctl c0306201 0 returned -14 [ 1187.532936][ T1408] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.868413][T19681] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1197.259877][ T1408] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.277997][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1197.278018][T19732] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1197.389017][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1197.463087][T19737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1197.505274][ T1408] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.573951][T19741] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1197.591333][T19741] team0: Port device macvlan5 added [ 1197.718640][ T1408] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.622479][T19621] chnl_net:caif_netlink_parms(): no params data found [ 1198.888910][T19789] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1198.927755][T19790] tipc: Started in network mode [ 1198.927783][T19790] tipc: Node identity 669e00b620b9, cluster identity 4711 [ 1198.928221][T19790] tipc: Enabled bearer , priority 0 [ 1198.998937][ T1408] bridge_slave_1: left allmulticast mode [ 1198.999008][ T1408] bridge_slave_1: left promiscuous mode [ 1198.999183][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.083599][ T1408] bridge_slave_0: left allmulticast mode [ 1199.083842][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.932725][ T1408] bridge0 (unregistering): left allmulticast mode [ 1199.932743][ T1408] bridge0 (unregistering): left promiscuous mode [ 1200.004670][ T1408] team0: Port device macvlan2 removed [ 1200.253288][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.314338][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.364703][ T1408] bond0 (unregistering): Released all slaves [ 1200.422144][T19818] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1200.426091][T19818] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1200.451783][T19789] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4189'. [ 1200.476651][T19803] tipc: Resetting bearer [ 1200.507691][ T5889] tipc: Node number set to 1176961206 [ 1200.835503][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4203'. [ 1200.932898][T19621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.933057][T19621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.933276][T19621] bridge_slave_0: entered allmulticast mode [ 1200.934797][T19621] bridge_slave_0: entered promiscuous mode [ 1200.936828][ T1408] tipc: Left network mode [ 1200.975365][T19621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.982477][T19621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.982710][T19621] bridge_slave_1: entered allmulticast mode [ 1200.987463][T19621] bridge_slave_1: entered promiscuous mode [ 1201.110526][T19621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.134625][T19621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.389125][T19621] team0: Port device team_slave_0 added [ 1201.409655][T19621] team0: Port device team_slave_1 added [ 1202.257816][T19621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.257834][T19621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.257861][T19621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.258597][T19872] tipc: Enabled bearer , priority 0 [ 1202.259226][T19862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1202.346287][T19883] tipc: Resetting bearer [ 1202.352309][T19876] syzkaller0: entered promiscuous mode [ 1202.352331][T19876] syzkaller0: entered allmulticast mode [ 1202.371718][T19621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.371733][T19621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.371759][T19621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.473085][T19859] tipc: Resetting bearer [ 1202.655239][T19859] tipc: Disabling bearer [ 1202.904050][T19897] bridge1: entered promiscuous mode [ 1202.904076][T19897] bridge1: entered allmulticast mode [ 1203.372524][T19916] syz_tun: entered allmulticast mode [ 1203.569162][T19621] hsr_slave_0: entered promiscuous mode [ 1203.570618][T19621] hsr_slave_1: entered promiscuous mode [ 1204.383418][T19937] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4229'. [ 1204.397338][T19934] tipc: Can't bind to reserved service type 1 [ 1204.421780][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1204.694538][ T1408] hsr_slave_0: left promiscuous mode [ 1204.733709][ T1408] hsr_slave_1: left promiscuous mode [ 1204.734874][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.734899][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.773600][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.773619][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.838750][ T1408] veth1_macvtap: left promiscuous mode [ 1204.838844][ T1408] veth0_macvtap: left promiscuous mode [ 1204.839009][ T1408] veth1_vlan: left promiscuous mode [ 1204.839185][ T1408] veth0_vlan: left promiscuous mode [ 1205.584742][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 1205.632714][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 1207.840998][T19996] syz_tun: entered allmulticast mode [ 1208.093893][T20007] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4252'. [ 1209.292945][ T1408] IPVS: stop unused estimator thread 0... [ 1210.045961][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4268'. [ 1210.045985][T20062] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4268'. [ 1211.518451][ T1408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.557253][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.558722][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.802347][ T1229] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1211.954077][ T1229] usb 10-1: config 4 has an invalid interface number: 42 but max is 0 [ 1211.954105][ T1229] usb 10-1: config 4 has no interface number 0 [ 1211.954298][ T1229] usb 10-1: config 4 interface 42 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1211.954350][ T1229] usb 10-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 1211.954372][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.020910][ T1229] s2255 10-1:4.42: Could not find bulk-in endpoint [ 1212.020999][ T1229] Sensoray 2255 driver load failed: 0xfffffff4 [ 1212.021028][ T1229] s2255 10-1:4.42: probe with driver s2255 failed with error -12 [ 1212.282477][ T5889] usb 10-1: USB disconnect, device number 2 [ 1212.412793][ T1408] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 1212.416350][ T1408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.162461][ T1408] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 1213.274201][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1213.274222][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1213.393517][ T1408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.524049][T19621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1213.975653][T19621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1214.494304][ T1408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.554857][T19621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1214.644348][T19621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1215.166975][T20182] binder: 20180:20182 ioctl c0306201 0 returned -14 [ 1216.858301][ T1408] bridge_slave_1: left allmulticast mode [ 1216.858329][ T1408] bridge_slave_1: left promiscuous mode [ 1216.858556][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.967095][ T1408] bridge_slave_0: left allmulticast mode [ 1216.967122][ T1408] bridge_slave_0: left promiscuous mode [ 1216.967355][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.626630][T20207] binder: 20206:20207 ioctl c0306201 0 returned -14 [ 1221.589000][ T1408] bridge0 (unregistering): left allmulticast mode [ 1221.662096][T20240] binder: 20239:20240 ioctl c0306201 0 returned -14 [ 1221.671755][ T1408] team0: Port device macvlan2 removed [ 1225.382986][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.445692][T20251] netlink: 'syz.9.4320': attribute type 3 has an invalid length. [ 1225.523899][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.568561][ T1408] bond0 (unregistering): Released all slaves [ 1225.590777][ T1408] bond1 (unregistering): Released all slaves [ 1225.860644][T19621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.888879][ T1408] tipc: Left network mode [ 1225.935934][T19621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.941130][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.941206][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.008840][ T1370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.008979][ T1370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.073071][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4322'. [ 1228.302806][T20298] binder: 20297:20298 ioctl c0306201 0 returned -14 [ 1230.062849][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4331'. [ 1230.062872][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4331'. [ 1230.062897][T20310] netlink: 'syz.7.4331': attribute type 20 has an invalid length. [ 1230.373155][T20323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1230.422852][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.422880][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.493692][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.493719][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.614005][ T1408] veth1_macvtap: left promiscuous mode [ 1230.614103][ T1408] veth0_macvtap: left promiscuous mode [ 1230.618676][ T1408] veth1_vlan: left promiscuous mode [ 1230.618848][ T1408] veth0_vlan: left promiscuous mode [ 1231.178314][T20351] binder: 20349:20351 ioctl c0306201 0 returned -14 [ 1233.002841][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 1233.044764][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 1233.772635][T20338] tipc: Enabled bearer , priority 0 [ 1233.778777][T20356] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4336'. [ 1233.779396][T20344] syzkaller0: entered promiscuous mode [ 1233.779418][T20344] syzkaller0: entered allmulticast mode [ 1234.902838][T20348] tipc: Resetting bearer [ 1235.439294][T20348] tipc: Disabling bearer [ 1237.207206][ T5962] tipc: Node number set to 842442709 [ 1237.373843][T20388] binder: 20387:20388 ioctl c0306201 0 returned -14 [ 1238.781913][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.825236][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1238.852118][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1238.864313][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1238.866788][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1238.867885][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1240.692983][T20394] chnl_net:caif_netlink_parms(): no params data found [ 1240.932705][ T5806] Bluetooth: hci0: command tx timeout [ 1241.556196][T20465] tipc: Enabled bearer , priority 0 [ 1241.576918][T20467] syzkaller0: entered promiscuous mode [ 1241.576943][T20467] syzkaller0: entered allmulticast mode [ 1242.824921][T20457] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4358'. [ 1242.827032][T20459] tipc: Resetting bearer [ 1242.864412][T20452] tipc: Resetting bearer [ 1243.012374][ T5806] Bluetooth: hci0: command tx timeout [ 1243.036003][T20452] tipc: Disabling bearer [ 1243.196049][T20394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.196169][T20394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.196346][T20394] bridge_slave_0: entered allmulticast mode [ 1243.216874][T20394] bridge_slave_0: entered promiscuous mode [ 1243.392563][T20473] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4361'. [ 1243.523214][T20394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.523381][T20394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.523600][T20394] bridge_slave_1: entered allmulticast mode [ 1243.529859][T20394] bridge_slave_1: entered promiscuous mode [ 1243.608578][T20473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1244.065338][T20394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.069083][T20394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.723835][T20485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1244.744854][T20487] vlan2: entered promiscuous mode [ 1244.744875][T20487] bond4: entered promiscuous mode [ 1244.745030][T20487] vlan2: entered allmulticast mode [ 1244.745043][T20487] bond4: entered allmulticast mode [ 1244.884938][T20489] bridge2: entered promiscuous mode [ 1244.885115][T20489] bridge2: entered allmulticast mode [ 1244.891035][T20489] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1244.893545][T20394] team0: Port device team_slave_0 added [ 1244.950733][T20394] team0: Port device team_slave_1 added [ 1245.092284][ T5806] Bluetooth: hci0: command tx timeout [ 1245.190195][T20515] binder: 20514:20515 ioctl c0306201 0 returned -14 [ 1245.201046][T20394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.201061][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.201087][T20394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.421166][T20394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.421178][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.421192][T20394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.769679][T20520] syzkaller0: entered promiscuous mode [ 1246.769706][T20520] syzkaller0: entered allmulticast mode [ 1246.776247][T20524] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4370'. [ 1246.933960][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1247.172390][ T5806] Bluetooth: hci0: command tx timeout [ 1247.238865][T20394] hsr_slave_0: entered promiscuous mode [ 1247.241376][T20394] hsr_slave_1: entered promiscuous mode [ 1247.246947][T20394] debugfs: 'hsr0' already exists in 'hsr' [ 1247.246971][T20394] Cannot create hsr debugfs directory [ 1247.399861][ T1408] bridge_slave_1: left allmulticast mode [ 1247.399888][ T1408] bridge_slave_1: left promiscuous mode [ 1247.400114][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.506535][ T1408] bridge_slave_0: left allmulticast mode [ 1247.506563][ T1408] bridge_slave_0: left promiscuous mode [ 1247.511642][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.443131][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.526474][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.549784][ T1408] bond0 (unregistering): Released all slaves [ 1248.682374][T20547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1248.696491][T20552] vlan2: entered promiscuous mode [ 1248.696510][T20552] bond5: entered promiscuous mode [ 1248.696655][T20552] vlan2: entered allmulticast mode [ 1248.696667][T20552] bond5: entered allmulticast mode [ 1248.804480][T20555] bridge1: entered promiscuous mode [ 1248.804564][T20555] bridge1: entered allmulticast mode [ 1248.805573][T20555] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 1248.974281][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4382'. [ 1248.992006][T20565] binder: 20564:20565 ioctl c0306201 0 returned -14 [ 1250.772327][ T1408] hsr_slave_0: left promiscuous mode [ 1250.882916][ T1408] hsr_slave_1: left promiscuous mode [ 1250.883906][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.020355][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.236947][T20600] binder: 20599:20600 ioctl c0306201 0 returned -14 [ 1255.052773][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4394'. [ 1255.203213][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 1255.247114][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 1255.534348][T20598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1255.554804][T20603] vlan2: entered promiscuous mode [ 1255.554825][T20603] bond4: entered promiscuous mode [ 1255.555105][T20603] vlan2: entered allmulticast mode [ 1255.555119][T20603] bond4: entered allmulticast mode [ 1255.603280][T20604] bridge2: entered promiscuous mode [ 1255.603440][T20604] bridge2: entered allmulticast mode [ 1255.608482][T20604] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1257.900836][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4406'. [ 1258.623279][T20656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1258.630448][T20659] vlan3: entered promiscuous mode [ 1258.630462][T20659] bond5: entered promiscuous mode [ 1258.630557][T20659] vlan3: entered allmulticast mode [ 1258.630564][T20659] bond5: entered allmulticast mode [ 1258.650414][T20660] bridge3: entered promiscuous mode [ 1258.650558][T20660] bridge3: entered allmulticast mode [ 1258.651578][T20660] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1259.240997][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4418'. [ 1259.751439][T20704] Bluetooth: MGMT ver 1.23 [ 1259.942588][T20394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1260.282317][T20394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1260.454653][T20394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1260.472280][ T5862] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1260.514366][T20394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1260.637470][ T5862] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 30768, setting to 1024 [ 1260.637520][ T5862] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1260.637557][ T5862] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1260.637578][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.642368][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1260.700353][T20715] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1260.733559][ T5862] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1260.735061][ T5862] usb 10-1: invalid MIDI in EP 0 [ 1260.802340][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1260.804219][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.804248][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1260.804274][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1260.804305][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.855688][ T10] usb 2-1: config 0 descriptor?? [ 1261.086230][T20738] udevd[20738]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1261.196405][T20394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.213109][ T5862] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1261.237566][ T5862] usb 10-1: USB disconnect, device number 3 [ 1261.282536][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4428'. [ 1261.290928][ T10] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1261.311698][T20394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.354994][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.355302][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.425056][T15178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.425383][T15178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.811978][T20752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.812933][T20752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.814920][T20752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.815386][T20752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.367145][T20394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.412657][ T809] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1262.576748][ T809] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1262.577901][ T809] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.577924][ T809] usb 8-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1262.580285][ T809] usb 8-1: New USB device found, idVendor=0bfd, idProduct=011a, bcdDevice=b9.2d [ 1262.580309][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.580328][ T809] usb 8-1: Product: syz [ 1262.580342][ T809] usb 8-1: Manufacturer: syz [ 1262.580354][ T809] usb 8-1: SerialNumber: syz [ 1263.104239][ T809] usb 8-1: USB disconnect, device number 2 [ 1263.370176][ T809] usb 2-1: USB disconnect, device number 15 [ 1263.378500][T20394] veth0_vlan: entered promiscuous mode [ 1263.406638][T20394] veth1_vlan: entered promiscuous mode [ 1263.492673][T20394] veth0_macvtap: entered promiscuous mode [ 1263.526377][T20394] veth1_macvtap: entered promiscuous mode [ 1263.573427][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4438'. [ 1263.584762][T20394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.596882][T20394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.621688][T15178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.654222][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.656816][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.657096][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.793763][ T809] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1263.960795][ T809] usb 10-1: Using ep0 maxpacket: 8 [ 1263.971381][ T809] usb 10-1: config 6 has an invalid interface number: 8 but max is 1 [ 1263.971406][ T809] usb 10-1: config 6 has an invalid interface number: 21 but max is 1 [ 1263.971423][ T809] usb 10-1: config 6 has no interface number 0 [ 1263.971437][ T809] usb 10-1: config 6 has no interface number 1 [ 1263.971476][ T809] usb 10-1: config 6 interface 8 has no altsetting 0 [ 1263.971493][ T809] usb 10-1: config 6 interface 21 has no altsetting 0 [ 1264.029209][ T809] usb 10-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1264.029238][ T809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.029255][ T809] usb 10-1: Product: syz [ 1264.029266][ T809] usb 10-1: Manufacturer: syz [ 1264.029278][ T809] usb 10-1: SerialNumber: syz [ 1264.248084][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.248105][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.407463][T15171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.407483][T15171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.039959][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1267.192442][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1267.194821][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1267.194848][ T9] usb 8-1: config 0 has no interface number 0 [ 1267.194893][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1267.197768][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1267.197795][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.197815][ T9] usb 8-1: Product: syz [ 1267.197828][ T9] usb 8-1: Manufacturer: syz [ 1267.197842][ T9] usb 8-1: SerialNumber: syz [ 1267.293719][ T9] usb 8-1: config 0 descriptor?? [ 1267.963557][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1267.963588][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1268.127007][ T809] usb 10-1: USB disconnect, device number 4 [ 1269.988664][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 1269.988694][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 1269.988712][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1269.988729][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1269.988996][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1270.079871][ T9] usb 8-1: USB disconnect, device number 3 [ 1271.116750][T20902] 0: reclassify loop, rule prio 0, protocol 800 [ 1273.161299][T20921] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4477'. [ 1273.182325][T20921] vlan4: entered promiscuous mode [ 1278.375839][T20974] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4492'. [ 1278.458020][T20974] vlan3: entered promiscuous mode [ 1278.871412][T21001] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 1282.784500][T21031] netlink: 'syz.5.4509': attribute type 1 has an invalid length. [ 1282.784521][T21031] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4509'. [ 1282.974013][T21034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1282.975819][T21034] tipc: Enabled bearer , priority 10 [ 1283.064535][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1283.064557][T21042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1285.352534][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1285.510154][ T9] usb 9-1: config 4 has an invalid interface number: 42 but max is 0 [ 1285.510183][ T9] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.510202][ T9] usb 9-1: config 4 has no interface number 0 [ 1285.510244][ T9] usb 9-1: config 4 interface 42 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.510284][ T9] usb 9-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 1285.510307][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.107650][ T9] s2255 9-1:4.42: Could not find bulk-in endpoint [ 1286.107737][ T9] Sensoray 2255 driver load failed: 0xfffffff4 [ 1286.107766][ T9] s2255 9-1:4.42: probe with driver s2255 failed with error -12 [ 1286.174887][ T9] usb 9-1: USB disconnect, device number 2 [ 1286.257276][T21076] CUSE: info not properly terminated [ 1287.134864][T21084] netlink: 'syz.1.4524': attribute type 1 has an invalid length. [ 1287.134884][T21084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1287.334287][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4528'. [ 1287.334308][T21095] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4528'. [ 1287.342353][T14718] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1287.895347][T14718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.895390][T14718] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1287.895413][T14718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.953949][T14718] usb 8-1: config 0 descriptor?? [ 1288.872036][T14718] razer 0003:1532:010E.000F: failed to enable macro keys: -71 [ 1288.890331][T14718] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.7-1/input0 [ 1288.927912][T14718] usb 8-1: USB disconnect, device number 4 [ 1289.052369][ T36] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1289.110266][T21124] fido_id[21124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1289.159942][T21130] netlink: 'syz.1.4537': attribute type 1 has an invalid length. [ 1289.159956][T21130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1289.208385][ T36] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1289.208928][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.217451][ T36] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1289.217479][ T36] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1289.217499][ T36] usb 6-1: Manufacturer: syz [ 1289.234665][ T36] usb 6-1: config 0 descriptor?? [ 1289.632353][ T36] rc_core: IR keymap rc-hauppauge not found [ 1289.632373][ T36] Registered IR keymap rc-empty [ 1289.643584][ T36] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1289.658122][ T36] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 1289.696440][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1289.729238][ T36] usb 6-1: USB disconnect, device number 6 [ 1289.801120][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1289.801143][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1289.801166][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1290.419364][T21156] netlink: 'syz.7.4548': attribute type 1 has an invalid length. [ 1290.419387][T21156] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4548'. [ 1290.495461][ T5806] Bluetooth: hci0: Unable to find connection for big 0x00 [ 1290.751796][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4555'. [ 1290.751818][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4555'. [ 1290.952343][ T5862] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1291.105099][ T5862] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.105125][ T5862] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.106427][ T5862] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1291.106452][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1291.106471][ T5862] usb 8-1: SerialNumber: syz [ 1291.488803][ T5862] usb 8-1: 0:2 : does not exist [ 1291.631791][ T5862] usb 8-1: USB disconnect, device number 5 [ 1291.663157][T21188] netlink: 'syz.5.4562': attribute type 1 has an invalid length. [ 1291.741015][T20525] udevd[20525]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.762398][ T1229] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1291.912411][ T1229] usb 10-1: Using ep0 maxpacket: 8 [ 1291.915148][ T1229] usb 10-1: config 6 has an invalid interface number: 8 but max is 1 [ 1291.915173][ T1229] usb 10-1: config 6 has an invalid interface number: 21 but max is 1 [ 1291.915193][ T1229] usb 10-1: config 6 has no interface number 0 [ 1291.915209][ T1229] usb 10-1: config 6 has no interface number 1 [ 1291.915251][ T1229] usb 10-1: config 6 interface 8 has no altsetting 0 [ 1291.915268][ T1229] usb 10-1: config 6 interface 21 has no altsetting 0 [ 1291.918106][ T1229] usb 10-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1291.918133][ T1229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.918153][ T1229] usb 10-1: Product: syz [ 1291.918166][ T1229] usb 10-1: Manufacturer: syz [ 1291.918180][ T1229] usb 10-1: SerialNumber: syz [ 1294.706402][ T1229] usb 10-1: USB disconnect, device number 5 [ 1294.993080][T21215] netlink: 'syz.9.4573': attribute type 1 has an invalid length. [ 1294.993102][T21215] __nla_validate_parse: 2 callbacks suppressed [ 1294.993112][T21215] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4573'. [ 1295.572071][T21229] bond6: entered promiscuous mode [ 1296.068440][T21245] netlink: 'syz.7.4584': attribute type 1 has an invalid length. [ 1296.068455][T21245] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4584'. [ 1297.359066][T21255] bond6: entered promiscuous mode [ 1297.780375][T21274] netlink: 'syz.8.4596': attribute type 1 has an invalid length. [ 1297.780397][T21274] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4596'. [ 1299.568483][T21295] bond1: entered promiscuous mode [ 1299.788814][T21306] netlink: 'syz.5.4607': attribute type 1 has an invalid length. [ 1299.788834][T21306] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4607'. [ 1299.872476][ T1229] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1300.140476][ T1229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.140889][ T1229] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1300.192573][ T1229] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1300.192785][ T1229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.228857][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.560332][ T1229] usb 8-1: config 0 descriptor?? [ 1300.862359][T14439] Bluetooth: hci0: command 0x0405 tx timeout [ 1300.967050][ T1229] usbhid 8-1:0.0: can't add hid device: -71 [ 1300.967156][ T1229] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1300.971095][ T1229] usb 8-1: USB disconnect, device number 6 [ 1301.022544][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1301.180417][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1301.180611][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.187956][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1301.188146][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1301.188180][ T9] usb 9-1: Manufacturer: syz [ 1301.337991][ T9] usb 9-1: config 0 descriptor?? [ 1301.512365][ T9] rc_core: IR keymap rc-hauppauge not found [ 1301.512386][ T9] Registered IR keymap rc-empty [ 1301.516175][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1301.523377][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 1301.531667][T21341] netlink: 'syz.5.4621': attribute type 1 has an invalid length. [ 1301.531685][T21341] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4621'. [ 1301.594778][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1301.646967][ T9] usb 9-1: USB disconnect, device number 3 [ 1302.715159][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4627'. [ 1304.564795][T21390] binder: 21389:21390 ioctl c0306201 0 returned -14 [ 1305.952684][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4643'. [ 1305.952707][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4643'. [ 1307.246257][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4657'. [ 1307.246280][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4657'. [ 1307.522394][T14718] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1307.672396][T14718] usb 2-1: Using ep0 maxpacket: 8 [ 1307.674591][T14718] usb 2-1: config 6 has an invalid interface number: 8 but max is 1 [ 1307.674615][T14718] usb 2-1: config 6 has an invalid interface number: 21 but max is 1 [ 1307.674634][T14718] usb 2-1: config 6 has no interface number 0 [ 1307.674649][T14718] usb 2-1: config 6 has no interface number 1 [ 1307.674691][T14718] usb 2-1: config 6 interface 8 has no altsetting 0 [ 1307.674708][T14718] usb 2-1: config 6 interface 21 has no altsetting 0 [ 1307.677249][T14718] usb 2-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1307.677276][T14718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.677295][T14718] usb 2-1: Product: syz [ 1307.677308][T14718] usb 2-1: Manufacturer: syz [ 1307.677321][T14718] usb 2-1: SerialNumber: syz [ 1309.512586][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1309.512609][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1309.852294][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1310.022704][T16973] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1310.714199][T14718] usb 2-1: USB disconnect, device number 16 [ 1310.749156][T16973] usb 10-1: Using ep0 maxpacket: 8 [ 1310.768016][T16973] usb 10-1: config 6 has an invalid interface number: 8 but max is 1 [ 1310.768041][T16973] usb 10-1: config 6 has an invalid interface number: 21 but max is 1 [ 1310.768060][T16973] usb 10-1: config 6 has no interface number 0 [ 1310.768075][T16973] usb 10-1: config 6 has no interface number 1 [ 1310.768115][T16973] usb 10-1: config 6 interface 8 has no altsetting 0 [ 1310.768130][T16973] usb 10-1: config 6 interface 21 has no altsetting 0 [ 1310.772026][T16973] usb 10-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1310.772052][T16973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.772071][T16973] usb 10-1: Product: syz [ 1310.772084][T16973] usb 10-1: Manufacturer: syz [ 1310.772097][T16973] usb 10-1: SerialNumber: syz [ 1310.811687][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.811716][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1310.811756][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1310.811778][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.891351][T21474] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4675'. [ 1310.915704][ T9] usb 8-1: config 0 descriptor?? [ 1311.082322][T14718] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1311.386758][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1311.386949][ T9] usbhid 8-1:0.0: can't add hid device: -32 [ 1311.387103][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1311.512829][T14718] usb 2-1: Using ep0 maxpacket: 16 [ 1312.153276][T14718] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.153355][T14718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1312.153546][T14718] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1312.153615][T14718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.335201][ T9] usb 8-1: USB disconnect, device number 7 [ 1312.356875][T14718] usb 2-1: config 0 descriptor?? [ 1312.797338][T14718] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1313.742792][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4686'. [ 1314.004831][T16973] usb 10-1: USB disconnect, device number 6 [ 1314.169009][T14718] usb 2-1: USB disconnect, device number 17 [ 1314.822309][T14718] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1314.852421][T16973] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1314.976770][T14718] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.976797][T14718] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1314.976820][T14718] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1314.976832][T14718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.982051][T14718] usb 10-1: config 0 descriptor?? [ 1315.042269][T16973] usb 9-1: Using ep0 maxpacket: 8 [ 1315.049741][T16973] usb 9-1: config 6 has an invalid interface number: 8 but max is 1 [ 1315.049767][T16973] usb 9-1: config 6 has an invalid interface number: 21 but max is 1 [ 1315.049786][T16973] usb 9-1: config 6 has no interface number 0 [ 1315.049802][T16973] usb 9-1: config 6 has no interface number 1 [ 1315.049842][T16973] usb 9-1: config 6 interface 8 has no altsetting 0 [ 1315.049857][T16973] usb 9-1: config 6 interface 21 has no altsetting 0 [ 1315.100727][T16973] usb 9-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1315.100756][T16973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.100775][T16973] usb 9-1: Product: syz [ 1315.100787][T16973] usb 9-1: Manufacturer: syz [ 1315.100801][T16973] usb 9-1: SerialNumber: syz [ 1315.599188][T14718] usbhid 10-1:0.0: can't add hid device: -71 [ 1315.599289][T14718] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1316.625591][T14718] usb 10-1: USB disconnect, device number 7 [ 1316.959158][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1316.959230][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1317.531362][T21577] tipc: Started in network mode [ 1317.531392][T21577] tipc: Node identity d21449ab5b7e, cluster identity 4711 [ 1317.541994][T21577] tipc: Enabled bearer , priority 0 [ 1317.545457][T21577] syzkaller0: entered promiscuous mode [ 1317.545481][T21577] syzkaller0: entered allmulticast mode [ 1318.061894][T16973] usb 9-1: USB disconnect, device number 4 [ 1318.130646][T21585] tipc: Resetting bearer [ 1318.151752][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4716'. [ 1318.151772][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4716'. [ 1318.184126][T21576] tipc: Resetting bearer [ 1318.405653][T21576] tipc: Disabling bearer [ 1318.522321][T14718] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1319.555821][T14718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.555850][T14718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1319.555890][T14718] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1319.555911][T14718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.610697][T14718] usb 2-1: config 0 descriptor?? [ 1319.883003][ T5952] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1320.225277][T14718] usbhid 2-1:0.0: can't add hid device: -71 [ 1320.225382][T14718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1320.229378][T14718] usb 2-1: USB disconnect, device number 18 [ 1320.352409][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 1320.360005][ T5952] usb 6-1: config 6 has an invalid interface number: 8 but max is 1 [ 1320.360030][ T5952] usb 6-1: config 6 has an invalid interface number: 21 but max is 1 [ 1320.360050][ T5952] usb 6-1: config 6 has no interface number 0 [ 1320.360066][ T5952] usb 6-1: config 6 has no interface number 1 [ 1320.360107][ T5952] usb 6-1: config 6 interface 8 has no altsetting 0 [ 1320.360125][ T5952] usb 6-1: config 6 interface 21 has no altsetting 0 [ 1320.362390][ T5952] usb 6-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1320.362416][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.362435][ T5952] usb 6-1: Product: syz [ 1320.362448][ T5952] usb 6-1: Manufacturer: syz [ 1320.362463][ T5952] usb 6-1: SerialNumber: syz [ 1322.452401][T21639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1323.640663][ T5952] usb 6-1: USB disconnect, device number 7 [ 1325.338616][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4751'. [ 1326.687382][T21705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4758'. [ 1326.687418][T21705] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4758'. [ 1328.490802][T21732] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4770'. [ 1328.782404][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1329.510829][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.510873][ T9] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1329.510897][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.526717][ T9] usb 8-1: config 0 descriptor?? [ 1329.883136][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4773'. [ 1329.974158][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1329.974267][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1330.007620][ T9] usb 8-1: USB disconnect, device number 8 [ 1330.762306][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1330.762341][T21752] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1332.725081][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4786'. [ 1335.352694][T16973] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1335.396691][T21828] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4802'. [ 1335.503956][T16973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.503982][T16973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1335.505030][T16973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1335.505056][T16973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1335.505075][T16973] usb 2-1: SerialNumber: syz [ 1335.522278][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1335.672326][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1335.674226][ T9] usb 10-1: config 6 has an invalid interface number: 8 but max is 1 [ 1335.674249][ T9] usb 10-1: config 6 has an invalid interface number: 21 but max is 1 [ 1335.674269][ T9] usb 10-1: config 6 has no interface number 0 [ 1335.674285][ T9] usb 10-1: config 6 has no interface number 1 [ 1335.674359][ T9] usb 10-1: config 6 interface 8 has no altsetting 0 [ 1335.674369][ T9] usb 10-1: config 6 interface 21 has no altsetting 0 [ 1335.676655][ T9] usb 10-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1335.676670][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.676680][ T9] usb 10-1: Product: syz [ 1335.676688][ T9] usb 10-1: Manufacturer: syz [ 1335.676694][ T9] usb 10-1: SerialNumber: syz [ 1335.811888][T16973] usb 2-1: 0:2 : does not exist [ 1336.001595][T16973] usb 2-1: USB disconnect, device number 19 [ 1336.216115][ C1] ================================================================== [ 1336.216132][ C1] BUG: KASAN: slab-use-after-free in detach_timer+0xc8/0x300 [ 1336.216294][ C1] Read of size 8 at addr ffff88805e1a04d0 by task ktimers/1/29 [ 1336.216311][ C1] [ 1336.216326][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1336.216356][ C1] Tainted: [L]=SOFTLOCKUP [ 1336.216363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1336.216376][ C1] Call Trace: [ 1336.216384][ C1] [ 1336.216393][ C1] dump_stack_lvl+0xe8/0x150 [ 1336.216449][ C1] print_report+0xba/0x230 [ 1336.216481][ C1] ? detach_timer+0xc8/0x300 [ 1336.216499][ C1] kasan_report+0x117/0x150 [ 1336.216622][ C1] ? detach_timer+0xc8/0x300 [ 1336.216644][ C1] detach_timer+0xc8/0x300 [ 1336.216665][ C1] __run_timer_base+0x624/0x9f0 [ 1336.216702][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1336.216732][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1336.216833][ C1] run_timer_softirq+0xb7/0x170 [ 1336.216865][ C1] handle_softirqs+0x1de/0x6f0 [ 1336.216917][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1336.216961][ C1] run_ktimerd+0x69/0x100 [ 1336.216992][ C1] smpboot_thread_fn+0x541/0xa50 [ 1336.217025][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1336.217060][ C1] kthread+0x388/0x470 [ 1336.217083][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1336.217114][ C1] ? __pfx_kthread+0x10/0x10 [ 1336.217135][ C1] ret_from_fork+0x51e/0xb90 [ 1336.217178][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.217206][ C1] ? __switch_to+0xc7d/0x1450 [ 1336.217243][ C1] ? __pfx_kthread+0x10/0x10 [ 1336.217265][ C1] ret_from_fork_asm+0x1a/0x30 [ 1336.217292][ C1] [ 1336.217300][ C1] [ 1336.217304][ C1] Allocated by task 19327: [ 1336.217315][ C1] kasan_save_track+0x3e/0x80 [ 1336.217340][ C1] __kasan_kmalloc+0x93/0xb0 [ 1336.217364][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 1336.217426][ C1] rose_add_node+0x26f/0xf50 [ 1336.217507][ C1] rose_rt_ioctl+0xdc1/0x1350 [ 1336.217526][ C1] rose_ioctl+0x3fb/0x8f0 [ 1336.217582][ C1] sock_do_ioctl+0x101/0x320 [ 1336.217658][ C1] sock_ioctl+0x5c9/0x7f0 [ 1336.217686][ C1] __se_sys_ioctl+0xff/0x170 [ 1336.217780][ C1] do_syscall_64+0x14d/0xf80 [ 1336.217863][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.217897][ C1] [ 1336.217902][ C1] Freed by task 29: [ 1336.217913][ C1] kasan_save_track+0x3e/0x80 [ 1336.217938][ C1] kasan_save_free_info+0x46/0x50 [ 1336.217964][ C1] __kasan_slab_free+0x5c/0x80 [ 1336.217990][ C1] kfree+0x1c1/0x6c0 [ 1336.218014][ C1] rose_timer_expiry+0x4cb/0x600 [ 1336.218039][ C1] call_timer_fn+0x192/0x640 [ 1336.218057][ C1] __run_timer_base+0x6a3/0x9f0 [ 1336.218085][ C1] run_timer_softirq+0xb7/0x170 [ 1336.218113][ C1] handle_softirqs+0x1de/0x6f0 [ 1336.218140][ C1] run_ktimerd+0x69/0x100 [ 1336.218170][ C1] smpboot_thread_fn+0x541/0xa50 [ 1336.218198][ C1] kthread+0x388/0x470 [ 1336.218216][ C1] ret_from_fork+0x51e/0xb90 [ 1336.218242][ C1] ret_from_fork_asm+0x1a/0x30 [ 1336.218258][ C1] [ 1336.218263][ C1] The buggy address belongs to the object at ffff88805e1a0400 [ 1336.218263][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1336.218282][ C1] The buggy address is located 208 bytes inside of [ 1336.218282][ C1] freed 512-byte region [ffff88805e1a0400, ffff88805e1a0600) [ 1336.218304][ C1] [ 1336.218309][ C1] The buggy address belongs to the physical page: [ 1336.218329][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e1a3c00 pfn:0x5e1a0 [ 1336.218350][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1336.218367][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1336.218390][ C1] page_type: f5(slab) [ 1336.218409][ C1] raw: 0080000000000240 ffff88813fe1cc80 ffffea0000eb6010 ffffea000189d510 [ 1336.218427][ C1] raw: ffff88805e1a3c00 0000000000100007 00000000f5000000 0000000000000000 [ 1336.218447][ C1] head: 0080000000000240 ffff88813fe1cc80 ffffea0000eb6010 ffffea000189d510 [ 1336.218464][ C1] head: ffff88805e1a3c00 0000000000100007 00000000f5000000 0000000000000000 [ 1336.218482][ C1] head: 0080000000000002 ffffea0001786801 00000000ffffffff 00000000ffffffff [ 1336.218498][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 1336.218508][ C1] page dumped because: kasan: bad access detected [ 1336.218523][ C1] page_owner tracks the page as allocated [ 1336.218531][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1421, tgid 1421 (kworker/u8:11), ts 82076958517, free_ts 0 [ 1336.218580][ C1] post_alloc_hook+0x231/0x280 [ 1336.218635][ C1] get_page_from_freelist+0x28bb/0x2950 [ 1336.218677][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1336.218694][ C1] allocate_slab+0x77/0x660 [ 1336.218739][ C1] refill_objects+0x334/0x3c0 [ 1336.218756][ C1] __pcs_replace_empty_main+0x328/0x5f0 [ 1336.218779][ C1] __kmalloc_noprof+0x530/0x7b0 [ 1336.218805][ C1] fib6_info_alloc+0x30/0xf0 [ 1336.218866][ C1] ip6_route_info_create+0x142/0x860 [ 1336.218918][ C1] ip6_route_add+0x49/0x1d0 [ 1336.218942][ C1] addrconf_add_mroute+0x2d1/0x370 [ 1336.218990][ C1] addrconf_init_auto_addrs+0x4d7/0xa50 [ 1336.219016][ C1] addrconf_notify+0xb1e/0x1050 [ 1336.219039][ C1] notifier_call_chain+0x1be/0x400 [ 1336.219055][ C1] netif_state_change+0x27d/0x3a0 [ 1336.219104][ C1] __linkwatch_run_queue+0x575/0x850 [ 1336.219186][ C1] page_owner free stack trace missing [ 1336.219194][ C1] [ 1336.219199][ C1] Memory state around the buggy address: [ 1336.219211][ C1] ffff88805e1a0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1336.219225][ C1] ffff88805e1a0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.219239][ C1] >ffff88805e1a0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.219250][ C1] ^ [ 1336.219262][ C1] ffff88805e1a0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.219275][ C1] ffff88805e1a0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1336.219286][ C1] ================================================================== [ 1336.219310][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1336.219328][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1336.219358][ C1] Tainted: [L]=SOFTLOCKUP [ 1336.219366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1336.219379][ C1] Call Trace: [ 1336.219387][ C1] [ 1336.219395][ C1] vpanic+0x56c/0xa60 [ 1336.219430][ C1] ? __pfx_vpanic+0x10/0x10 [ 1336.219465][ C1] panic+0xc5/0xd0 [ 1336.219495][ C1] ? __pfx_panic+0x10/0x10 [ 1336.219527][ C1] ? detach_timer+0xc8/0x300 [ 1336.219552][ C1] ? rcu_is_watching+0x15/0xb0 [ 1336.219588][ C1] ? detach_timer+0xc8/0x300 [ 1336.219608][ C1] ? detach_timer+0xc8/0x300 [ 1336.219625][ C1] check_panic_on_warn+0x89/0xb0 [ 1336.219649][ C1] ? detach_timer+0xc8/0x300 [ 1336.219667][ C1] end_report+0x73/0x180 [ 1336.219698][ C1] ? detach_timer+0xc8/0x300 [ 1336.219716][ C1] kasan_report+0x128/0x150 [ 1336.219748][ C1] ? detach_timer+0xc8/0x300 [ 1336.219770][ C1] detach_timer+0xc8/0x300 [ 1336.219791][ C1] __run_timer_base+0x624/0x9f0 [ 1336.219827][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1336.219856][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1336.219885][ C1] run_timer_softirq+0xb7/0x170 [ 1336.219917][ C1] handle_softirqs+0x1de/0x6f0 [ 1336.219950][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1336.219982][ C1] run_ktimerd+0x69/0x100 [ 1336.220014][ C1] smpboot_thread_fn+0x541/0xa50 [ 1336.220047][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1336.220083][ C1] kthread+0x388/0x470 [ 1336.220103][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1336.220136][ C1] ? __pfx_kthread+0x10/0x10 [ 1336.220157][ C1] ret_from_fork+0x51e/0xb90 [ 1336.220187][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.220215][ C1] ? __switch_to+0xc7d/0x1450 [ 1336.220241][ C1] ? __pfx_kthread+0x10/0x10 [ 1336.220263][ C1] ret_from_fork_asm+0x1a/0x30 [ 1336.220289][ C1] [ 1336.220662][ C1] Kernel Offset: disabled