last executing test programs: 2m55.420944694s ago: executing program 2 (id=799): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 2m55.32246358s ago: executing program 2 (id=800): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m53.848956302s ago: executing program 2 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x60, 0x8001, 0x0, 0x4, 0xe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r7, &(0x7f0000000040)=""/45, 0x2d, 0x102, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r8}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x40480d1) 2m51.381115041s ago: executing program 4 (id=823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000013020000072c0004802800018007000100637400001c00028005000300bd6b0000080001400000001708000240000000130900010073797a30000000000900020073797a"], 0x80}}, 0x0) 2m50.9039733s ago: executing program 4 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000110001005caf"], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40844) r4 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x800) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m50.381790767s ago: executing program 4 (id=829): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x60, 0x8001, 0x0, 0x4, 0xe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/45, 0x2d, 0x102, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2m49.094309686s ago: executing program 4 (id=833): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2m48.783107711s ago: executing program 2 (id=834): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m48.756167089s ago: executing program 0 (id=835): bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m48.685892543s ago: executing program 2 (id=836): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x400000) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8040) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYBLOB="0000000000000000000000000000000000000036c2dd686e59", @ANYRES16=r3, @ANYRES32, @ANYBLOB], 0x48) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r8, 0x1, 0x19, 0x0, &(0x7f0000003080)) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m48.676047085s ago: executing program 0 (id=837): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) 2m47.60266303s ago: executing program 2 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000110001005caf"], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40844) r4 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m47.548583972s ago: executing program 0 (id=841): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952a0", 0x94}], 0x4}}], 0x2, 0x4000000) 2m47.470157055s ago: executing program 4 (id=842): socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000740)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m46.373932053s ago: executing program 0 (id=843): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000240)={0x3c0, 0x12, 0x502, 0x70bd27, 0x25dfdbff, {0x23, 0x7, 0xe, 0x4, {0x4e24, 0x4e24, [0xdf6, 0x4, 0x3], [0x6, 0x0, 0x0, 0x4], 0x0, [0x4, 0x81]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "745679d1e01d4a874ffdde5bd95786ef85a4e5cb3294f0d3d325a770176523eae403f2a503879f7ec745da70879f28b28ca143a6fa76d23ac76552f62ebed8450cc6c1287217dee56da6bb6becf217542589f61e859427b9f9aa2fba95ee2336b16f4f0b420f2886354b045a91c7d3bb54232fe910efe702919ccbcd17f6e9f185acbd731cfea372fb8c75b62f90ee77ab8f6419ea372fecdd975aebdc779625f1a1a60815e6be9b5c940684aa941800ec06a528c36a587f3aedb26584a465172f"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "51b7eb71b836f658d10bba60241af81f60705ac8622b3db87e4428143dc24bb15a05c00cce5d67f67a00eb6308e055c8203bce05c266586cdfd3fd1796260ae828"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "57de5d26524089a69bc32a3aae1b222e3073bd048be89e2d093e6f7551d35ac481"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "27241c9b21a59b714f9da9beaab9f8d81d2b6fad47e2a63ff54073bb8acaaa5cf462c2c8586f1e26cb5d80a9d63c602547537c689264d2e811cab4a183e236d0dc25197c421346657233f87fd54ce38c7a88114882e888313a62c99e2a127b58bbc1e60c6dfef733f55938e81a3085df5f5545621faf6a547905748b057d75638994ad2fc305d179b53db61856947b9d7fe55dab38edf0ef897213bff26b611450481ded0bcaa515412ae1a1d77ca22a91ed6c47e6ea212b55cbbf6b6b71d1c531f3785ba5319f0aa61d33e0f9dd22a8658a9e42329d00909c9f2e50db3f3994e96c"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "cad3c2aecd7239ee16ec3e0a3bfbfec583718e349701ed52900c4145e286d19de58ba94f47ae109d122887ff68af1db392bf5293f49c565351a1f171bc391f11d65ebd42d9c889b7ceba48b7dd1304f1fd"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "955fb9"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "27104063c4422eceb5890c6caacaba9cb13683a847ea8d8fae495aac79a88497b937c3a7b4fe609288ee517aed5fa114dab49af4436898d01fba5fbc149c113ac879bd1a5c81ea1829"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "466b97db469dbe99ae62a671b732eef7d6cb7fd90c65b659092e2c62108eb414fd166e65036dd78cc7336bb27e06c706d8"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "e7855cf5ed39b37b3ed746eef35036475df970c720895934e9fbff6643648281ac75f428fd27bd1540f24978293cc68353862b80d38e7d1ecb9d6d6f6dcbe5f3fb6972739c1eb9afa81129fad29fd155d532e1cf62f9b4f9dcf470abb3b73fe9161960de"}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m46.253538797s ago: executing program 4 (id=845): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bind$packet(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) bind$rxrpc(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m46.181494908s ago: executing program 0 (id=846): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200008e000000000000000000000085000000270000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m45.183013348s ago: executing program 0 (id=847): socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 2m32.418050437s ago: executing program 32 (id=838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x6, 0x7f, 0x1, @tick=0x3a63, {0x3a}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf8, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$FUSE(r5, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0xff, 0x6, '9P2000'}, 0x13) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 2m32.304892687s ago: executing program 33 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000110001005caf"], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40844) r4 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m30.926429893s ago: executing program 34 (id=845): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) bind$packet(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) bind$rxrpc(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m29.9298535s ago: executing program 35 (id=847): socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 1m44.841397404s ago: executing program 7 (id=930): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000680)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1m41.830599061s ago: executing program 7 (id=938): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, 0x0, 0x0, 0x0) pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r5, {0x7}}, './file1\x00'}) 1m41.593379702s ago: executing program 7 (id=940): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 1m41.433077052s ago: executing program 7 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x18, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socket$kcm(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x8410, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r8, &(0x7f0000000440)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) 1m40.25227097s ago: executing program 7 (id=943): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x84) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) setgid(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91", 0x3) 1m34.897000426s ago: executing program 7 (id=956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x1000, 0x4, 0x58, 0x10}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x10c}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.66779432s ago: executing program 36 (id=956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x1000, 0x4, 0x58, 0x10}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x10c}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.826463371s ago: executing program 3 (id=1020): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x100, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x0) 1m6.660729778s ago: executing program 3 (id=1023): unshare(0x8000400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 1m6.501940034s ago: executing program 3 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fc8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000008"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="980000000001010400000000000000080a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000040006"], 0x98}}, 0x8884) 1m6.339481574s ago: executing program 3 (id=1025): syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = memfd_create(0x0, 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r0, 0x0, 0x0, 0x0, 0x1000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1m5.693920505s ago: executing program 3 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r7, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r9, 0x0, 0x8, &(0x7f0000001480)="5db075ef710de698919611c55f31a86516645245665f1aa4d5091e26c8b25e36ac40535f605f5d8e07f52af03cd08f43bc556a6319dcfc2b2577e44ceda8ee952ed4584c310b38a46bd47c68d2d800d8f5a2027a6a890d90994d8f0ab03fde951a84c6af04d57c070fe3bc44f161981178077b7e7dbf96112821b1058aac3986f67841ae254b5d9b326b3ef2af59fd6a1c19db2013e72ec2f84da6681fa0cdb7e073513511f60a37e55e8e43b8de8768441c730d3561b0499e212e9e5f182ad384360772f72070180d738af3492c8cb61537dd6708a6e49224b7c593268cd3133aa9e0395e15b0807d1e250777c7fc9bce6c7253cef0a31393b4dd61394fc47fcfeea134b5c8b12560cebde8d53c0b210febf7111fbda13fb5c9ab472066f91a3e1d2ac5de24dcd0e68e7a02097ceede71f48e3588041e7fa462d4eb29cf87ac4f951956002d629d83e7ac5a3b509f0e009de83cb654691f053291d70f589883a933d937af102d98ed0636b341e2693e4e0deb8e670b4d843726b2fdca6a4b79e787efcac8070937ea016c6e80438a6fed36768a43eeab265515015f8b41b575d3ae00731160d9df43ba50a703e8eb144cb35b35dab87ada732054bf9b7b674e2fcb81b2738d6d4f9e1053a1a87bb5ab08126d6aefd277dcbb498629ab8562b0b47705b6da1bd9544f2cd492564e7fb52daf31cf64402a0e50eb60a633b098dc8c538d51eb945082b7cc34179c48a1c9602a010c917c13f595d159ba986dca75e2fabc2d060984cdf7f8e6491993b5c549bd8fcee52cc579166ca7d6d24b94f02291f6a3cafcd9467e02eab2490222f12d8240329444a1491279d2c01b7edefcbe768d5a499cedfab617f7f108b8beafe8fc784097cab402a10c2cfe66a018167fa26c4ceec59954796116eecd5aae07ce52ea09a7c5322eafcf4e5a176ed8b8434582a8967c9217fbd27dd3388b19aa18d5286bfc1ff0722dd3c500e6e17e059913625f0a57bf8abe30644621338ddf56ab4aff720a9e96714f15dd4de102ac2449c093b64c6daa48fa3b3583a9f07ec98f98189d08ded2a2f694f332240660297fe442c56f77106dde2e1884bb19ddf90060c2b39cddeea3e56a942fc71c25ff689cf82d0295216920c5a3e72523e0adbf62c4d4eb9ca985bd8b0cd6eda6ef6f2af6ede495ac43983c741e9ecfe6635d94e5c4936d106dfa5b6423020e81f1dfcfb7f5fa456a0218cf62a7fd279feee8b587ac17eadba2c3615f185802d2fccc12c15764749b9b911c0f357a557e8a0a0dd8f5500d453eb74e4d3fbe5406fd9ce8a8ea360963b5165b2a8aaab77dd9562c8138fcff9c98498ca98d2cd00fc2ddf20cd77c29b7de78648706e35020cd1385a1ca6a58dbf6b0702d2fb16dad7567457513067c428998ddbe9521d850efe29ad303816273c3bf495ac776381fc32cca03a97877e8228cf29d97dc1e39521484b4bffb4049eb31c29eca94ec0948a87bb2d45020eb7cfef787130fe57224386dd28ccba5de516bef4a712849d6d857b2753ce0ae3fecd5594fe25a55a2d39fa0f95a2e0fa4fd2ef8e2a7cf37ac73b7ebe6d159e4f0c8392f72016ca4d8e21ce0db49720e3bffd4718afb15c79c81e8a5e38eb69cb7d39baaab78ab0dc71cb95ce0a6842aedb10738f2e1800f45a01c00b1a2f22a53c340a1019742e046347fdd1a3d2ed753752fe81c460889b43b4fe386cad5e9f952b0417eb245ea80f7be5632a3a2312c59eba562eea6fc67a06f80d1908f04ad5558c75efb895f747bc7514e1cd838abf159e638d604fa9194346542698013796e953d1c925290e237995436ffc969e915f652f384795a23d36577e3bf17bbca071b9509c0fe22cc5ff3f37a25dfefb75dcc14d5d5f41292966ef80089d8384f264ca725cd1b18c79f68f0ca1344be80e2e2694d820661b6cc5283e3bfc9a62011db5d116762e814a57317ad996d37d393ada4c3a2c889c9d74ab9d9094b072fa41f9914712139a749404b69b87952453c9027b6816551fd3746b04ac53b316d86ed7b5791b06773a23501c5450f02974e1fa5c503a6c4d1250337d2148398d96b45918f196da8779cf1d6909db4b08bbdb40f59d6b417e74d0980ad97173dccbd76fadadd43248671ad4875229dd44264a4a6071c4f8f5d1163703c84263ceec14d8470e28e81d3e8c0b59e3e691cacc3fb3fcb48636252bf2aa52cb228804762797d58d6d59927375807414e17f2b27b7849c4ba2dab9733a5690780a221794f3a8baaf6ad4501753142fc82eb4cfc0f6fa66e9c053adbf36a6b99438a2ce00dd5800029a040b3ca500742dfff139151d47a27a5536c30bd2026ecfeba59b3d18b34b8d3873bad02451d45a4ae29599b946a0b3cbaf711fffcb6874966b93f1a96df0911d708259cd8400b78d4e02e9c7fd02326c85dda2a8d1bd21e29ffcad17d92a631a77ea7ed06df804423be98adddd08da5e109296041d46447396c8427675f8804e47c34a0a9ea2732c105eed4f668db5bed88c5a2725fea674cf0988305a53e4afc96c4ddee7dad6b5c7ab11da969ca786b42bd22cb467f7328636f5c0479f11033e35911165c49cee455da3207dc6bffd23c3997b72a98d152c5480b43d6444d1aa2265f85f386e0b94d13d3367262aef03fd936da73ac7d9565ba914c8c38c12ce7727447a06a62ac7441d65fc8057a83c413194133c6599aca1bade6dd3b26c71fcc24b09b4ccbed72b680e66009ace51ad21cfb46a71eddfd4fa542ba372755819679efc7c9cb08e79b2184e36210728dd47820bbffd51ef5f10af99037850edc024e423bb54055fc93787640346fbb7156f2a6e0e9cb4c5363b847f141aedf89536aabab8dde997fa9144e1ee0ed56e1b37a51f3b063632f8cdc504dfa8cc2612bfaa437a4fa6ae33eb828caa9e40fcebcc814c192300436e6f7ae39833720e2deaef95ce33424b420236b5d50a5281a306392c3f3610bb112502de2baaf2459aee7df2c4c35a69529edb14bf394dd77b48acfc278ad1ca70e6057a655f030c32799eb79b215994128b5d117d49b237fa79c1a735393e3f4d7bb54b89fdb13aafb6b218382de4c4c4593f6ab9869d15f53718eb81beeec66c2f10b9056b7f1e78f035ef8c8926ad90cbf4cb0573c61307501e5890a54f8e8f470a1850c02502658257f629affe8b046c68421368af23f9923742e3a709a09ce1ead2e14bcaa69739b10ec8598f4a6eef722532efca5f088502032f5f397d99940f45730b8f67c7e8bbb5c6b854391cc0cac7374c2e99d8bb9167655cef935b5bc4bcffc5062b6bbc2a89405b5ef9ce4c3c73bdf64414a4320825ea31da1a9db8882f36234215cbbd94eb9f5b567fa8508b9093da738e9fc2146c99498263f182f92f095ef2aa254a2077d2dd428cec4b8c9211fc032ede6f2df6bedda78089e2c2fc228087f7c91bdf9644237e8bd27de97c0b872184d41b296b955d4a3955789693bf9b30bf8bed8641598d53b0039f8646e3f46f6cb1d69760b755ef8246b594b84718424d4a5bca14fecb7c93abf5439a7ff8fc664409a5945bc34c9035d2da3c047feaabe644abec0fa27e25189b47eb7daf9d67c856ee1b70a6295444b30b2597a837e3c6a7817eafefddb33fa1e235668a245cbf49e47ba318a7a359bc69de3f9829eececcef5ccb7abcb8dae2bfd803eb7c1b8a862a2915f520952552cb509eabeed95b5eecc103c3d9c4bbe29a663e1b916d4d60ccdfe1d59e5f4d7d556b395000863e4a058ebc3fe7c65f841fa3bd4a4bee66a69649aae320a0fc573f14c5940a3119bdf4fc39f128f992c098a7f685022afe02381ecc54de8fb0e54c1516fdccbc63420dee2eefb6acc8309d45dcfd72abf828d9addc2b47c4a60909eb95e6f0a1e6408e329200e9f20da3c7120209403cc71c030f5e2cfaca0f5140cd982123ac1d0611ddb2309810f9753d83c29195dfd30f202daaee68da5429545d56fcce06580e466a94a743ca20498e00996dcb4f33d4f01223ef6e5cfa49ca32f59b8c99ef07401e1ba1a3ac0fb20e7d36eebc2380f61fc2f3c51b499ac5c5a113ce9203554b94e272954f8f74a777fe3068fae76e5d521c103d416368bb281d61bd73694609269388360eab2008349ca757f9d941dfb16aeb9bd3432214311f68c375b7aa913fd69509dcfefd28dafd0b19a8ae7321e3df2e141bb6a21aefdedb389acde892edd77a22d486e03c75dfef9a7c6c7e77bea727b143b83fc15f9694dfa797f628a0bc8b1ea8241022ab2bd7a915df1114473d00499173d4d09ff9a289f11958a6a24722dca8dd37f8dd4c54b9a607b74661a73b0c69fd898018fd1ef34111bd694079aafeae6c79da703851c6698fdcff7efdc074299a7fc4f1c518dbbb159b0df9feed90731a524dd43a2bf1f1c093849b9be16831e97ed9ee02fd218aa2682cd21f6571fa23e4e2b13350a1366a6a43570598abf994427fcd1fa6784cb19eefcc01fbedf071054ae09e97961a22a32a74d9ac2fd9585789d67424d146c8a6213c7ce59844be25d1ec34fae4ef004dc4ca45dbc59f0241b8896998e9e2f3fd5fe2e7a2f7d8c7994c812dea7c95e83ea562cfad088211f445a7af3fe020baa684067ae71f77933c5f651cd0e0be1e4e8c624b9fbbcf947b5f4760bfd1ea2f8d1600813e393334347d88867eb4b4ff1b80c57eac016c59b2740de44a11761949c5248096f1a9322e26c5e5ea81af494a97172ca4f2c3447573b6162f42684fc06b32010eba76273e46e6f3de69187221ae1d581bd85a826b931b6c5b5f9e1ec6b5624ddc79892b5ebc5db09492f16da1985a8d0dde4c4e5d494008301eb79e68a0bdfbacdc6629ddc070567d61b780969f01eff16a4afabadf7de63a243ff929f348907b4fdbd90a66071d62e0f4c7beb5f43041f0e1ef73eb8300039ce8344bd2b73ceb1b4503b9b9a", 0xdb8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(0x0, r10) openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x58, r11, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xde567ea0696331e4}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf252b00000008000200", @ANYRES32=r8, @ANYBLOB="0a0001007770616e310000000a0001007770616e300000000c0005000201aaaaaaaaaaaa0c000500000000000000000008000200", @ANYRES32=r12, @ANYBLOB="f3ff04000200aaaaaaaaaaaa08000200", @ANYBLOB="0c0005000203aaaaaaaaaaaa"], 0x74}, 0x1, 0x0, 0x0, 0x4014800}, 0x80) r13 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 1m5.500834325s ago: executing program 3 (id=1032): socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32131}, 0x48000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 50.312725723s ago: executing program 37 (id=1032): socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32131}, 0x48000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5.301659149s ago: executing program 6 (id=1344): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952", 0x93}, {&(0x7f0000001040)="476760797e45f0a946021e0f9abf9eecf488bebdc3b9519e0953c736a9e9faf07151bd5c90e9816f2f3ffc4a7fa0785a80b320a23bcf9cd7e3eecc65664f45384ff030fa1ec94bb9d3d88b000000000000ece6a99f2f0bbf67c2e4234fc73b95258c4282b0251b7536d2e5de7b214fc3030dbe0d0619b99380de471c5d93b1296625", 0x82}], 0x5}}], 0x2, 0x4000000) 4.235709435s ago: executing program 6 (id=1350): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 3.889495558s ago: executing program 6 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) 3.419793661s ago: executing program 5 (id=1359): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.418326815s ago: executing program 6 (id=1360): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952", 0x93}, {&(0x7f0000001040)="476760797e45f0a946021e0f9abf9eecf488bebdc3b9519e0953c736a9e9faf07151bd5c90e9816f2f3ffc4a7fa0785a80b320a23bcf9cd7e3eecc65664f45384ff030fa1ec94bb9d3d88b000000000000ece6a99f2f0bbf67c2e4234fc73b95258c4282b0251b7536d2e5de7b214fc3030dbe0d0619b99380de471c5d93b1296625", 0x82}], 0x5}}], 0x2, 0x4000000) 2.653676493s ago: executing program 1 (id=1362): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x880) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500"/37], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xb384dd484af87c8e, 0xffe0}, {0x7, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x200400d1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.632742237s ago: executing program 5 (id=1363): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 2.623622046s ago: executing program 8 (id=1364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f"], 0x54}}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd}]}, 0x64}, 0x1, 0x0, 0x0, 0x8021}, 0x40000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@netrom, @netrom, @default, @null, @default]}, &(0x7f00000000c0)=0x48) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x28200, 0x4) 2.348278679s ago: executing program 6 (id=1365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 2.253909763s ago: executing program 8 (id=1366): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) 2.230756568s ago: executing program 1 (id=1367): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2.144068684s ago: executing program 5 (id=1368): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 1.950137742s ago: executing program 1 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x24000034) 1.822761182s ago: executing program 5 (id=1370): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.804562452s ago: executing program 8 (id=1371): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002e0001945048e272aaf9d1250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.633647809s ago: executing program 8 (id=1372): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200008e000000000000000000000085000000270000009500"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.409579301s ago: executing program 1 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.409192211s ago: executing program 8 (id=1374): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, 0x0, 0x0) 1.39182351s ago: executing program 5 (id=1375): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a0900a32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c50de9f30c83766e8911ed5b621c7395f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xfd}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952a0", 0x94}, {&(0x7f0000001040)="476760797e45f0a946021e0f9abf9eecf488bebdc3b9519e0953c736a9e9faf07151bd5c90e9816f2f3ffc4a7fa0785a80b320a23bcf9cd7e3eecc65664f45384ff030fa1ec94bb9d3d88b000000000000ece6a99f2f0bbf67c2e4234fc73b95258c4282b0251b7536d2e5de7b214fc3030dbe0d0619b99380de471c5d93b1296625", 0x82}], 0x4}}], 0x2, 0x4000000) 1.270823969s ago: executing program 9 (id=1376): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) 1.166879277s ago: executing program 1 (id=1377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) 1.085171745s ago: executing program 9 (id=1378): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 763.429331ms ago: executing program 9 (id=1379): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 622.627162ms ago: executing program 9 (id=1380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x14, 0x0, &(0x7f0000000440)="e03742e8680d0100f510762f0800df66aad475d0", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 433.791079ms ago: executing program 8 (id=1381): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) 412.940904ms ago: executing program 9 (id=1382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private2, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x0, 0x3a, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x100009, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 361.106894ms ago: executing program 5 (id=1383): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000200)={0x8, @remote}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8805}, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 202.02059ms ago: executing program 1 (id=1384): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x89, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 51.054592ms ago: executing program 9 (id=1385): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200008e000000000000000000000085000000270000009500"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 0s ago: executing program 6 (id=1386): syz_io_uring_setup(0x105, &(0x7f0000000000)={0x0, 0x7183, 0x400, 0x1, 0x2dc}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) socket(0x22, 0x2, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x8810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x4) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): cket: 32 [ 86.101005][ T36] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 86.101031][ T36] usb 5-1: config 0 has no interface number 0 [ 86.101075][ T36] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.101100][ T36] usb 5-1: config 0 interface 85 has no altsetting 0 [ 86.105068][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 86.105086][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.105095][ T36] usb 5-1: Product: syz [ 86.105103][ T36] usb 5-1: Manufacturer: syz [ 86.105110][ T36] usb 5-1: SerialNumber: syz [ 86.198286][ T36] usb 5-1: config 0 descriptor?? [ 86.431984][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.432005][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.840353][ T36] appletouch 5-1:0.85: Geyser mode initialized. [ 86.898248][ T36] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input5 [ 87.319889][ T5951] sg_write: data in/out 14911/38 bytes for SCSI command 0x5d-- guessing data in; [ 87.319889][ T5951] program syz.3.13 not setting count and/or reply_len properly [ 87.324367][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.624206][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 87.625314][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 87.660164][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 87.751795][ T5952] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.904008][ T5952] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.906511][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 88.910567][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 88.912027][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 88.913384][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 88.914847][ T5952] wlan1 speed is unknown, defaulting to 1000 [ 89.308269][ T36] usb 5-1: USB disconnect, device number 2 [ 89.308337][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 89.709151][ T36] appletouch 5-1:0.85: input: appletouch disconnected [ 90.128587][ T5965] syzkaller0: entered promiscuous mode [ 90.128613][ T5965] syzkaller0: entered allmulticast mode [ 90.389192][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'. [ 90.389216][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19'. [ 90.943776][ T5968] Process accounting resumed [ 91.210977][ T5989] vivid-001: disconnect [ 91.212469][ T5988] vivid-001: reconnect [ 92.353879][ T6002] syzkaller0: entered promiscuous mode [ 92.353904][ T6002] syzkaller0: entered allmulticast mode [ 92.532347][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.680249][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 92.681778][ T36] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 92.681793][ T36] usb 5-1: config 0 has no interface number 0 [ 92.681817][ T36] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.681830][ T36] usb 5-1: config 0 interface 85 has no altsetting 0 [ 92.683714][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 92.683728][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.683738][ T36] usb 5-1: Product: syz [ 92.683745][ T36] usb 5-1: Manufacturer: syz [ 92.683752][ T36] usb 5-1: SerialNumber: syz [ 92.771816][ T36] usb 5-1: config 0 descriptor?? [ 93.974423][ T36] appletouch 5-1:0.85: Geyser mode initialized. [ 93.978611][ T36] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input6 [ 94.297910][ T810] usb 5-1: USB disconnect, device number 3 [ 95.043087][ T6024] Process accounting resumed [ 95.968070][ T6046] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 96.614854][ T810] appletouch 5-1:0.85: input: appletouch disconnected [ 96.638863][ T6036] vivid-002: disconnect [ 96.639508][ T6035] vivid-002: reconnect [ 96.720429][ T6050] syzkaller0: entered promiscuous mode [ 96.720454][ T6050] syzkaller0: entered allmulticast mode [ 98.447770][ T6062] warning: `syz.3.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.890362][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.049753][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 99.052007][ T5890] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 99.052033][ T5890] usb 3-1: config 0 has no interface number 0 [ 99.052076][ T5890] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.052103][ T5890] usb 3-1: config 0 interface 85 has no altsetting 0 [ 99.127263][ T5890] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 99.127283][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.127296][ T5890] usb 3-1: Product: syz [ 99.127303][ T5890] usb 3-1: Manufacturer: syz [ 99.127310][ T5890] usb 3-1: SerialNumber: syz [ 99.871749][ T5890] usb 3-1: config 0 descriptor?? [ 100.554556][ T5890] appletouch 3-1:0.85: Geyser mode initialized. [ 101.132311][ T5890] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input7 [ 101.214886][ T5890] usb 3-1: USB disconnect, device number 2 [ 102.289649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.379631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.399634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.435075][ T5890] appletouch 3-1:0.85: input: appletouch disconnected [ 102.659645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.176846][ T6115] fuse: Bad value for 'fd' [ 104.514632][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.694834][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 105.730978][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 105.740043][ T5890] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 105.740070][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 105.740088][ T5890] usb 3-1: Product: syz [ 105.740101][ T5890] usb 3-1: SerialNumber: syz [ 105.768370][ T5890] usb 3-1: config 0 descriptor?? [ 106.245732][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.389867][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 106.392220][ T5885] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 106.392243][ T5885] usb 5-1: config 0 has no interface number 0 [ 106.392283][ T5885] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.392308][ T5885] usb 5-1: config 0 interface 85 has no altsetting 0 [ 106.399257][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 106.399283][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.399302][ T5885] usb 5-1: Product: syz [ 106.399316][ T5885] usb 5-1: Manufacturer: syz [ 106.399329][ T5885] usb 5-1: SerialNumber: syz [ 106.412120][ T5885] usb 5-1: config 0 descriptor?? [ 106.669642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.689644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.699638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.709648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.719641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.729638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.091816][ T5885] appletouch 5-1:0.85: Geyser mode initialized. [ 107.133802][ T5885] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input8 [ 108.001607][ T5885] usb 5-1: USB disconnect, device number 4 [ 108.191785][ T6144] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 108.191827][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.367180][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 108.391706][ T5885] appletouch 5-1:0.85: input: appletouch disconnected [ 108.540319][ T810] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 108.606341][ T811] usb 3-1: USB disconnect, device number 3 [ 108.619659][ T810] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 108.624672][ T6148] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 108.626765][ T6147] vhci_hcd: connection closed [ 108.664297][ T1414] vhci_hcd vhci_hcd.1: stop threads [ 108.665047][ T1414] vhci_hcd vhci_hcd.1: release socket [ 108.666100][ T1414] vhci_hcd vhci_hcd.1: disconnect device [ 110.879725][ T5885] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.992642][ T6188] vivid-003: disconnect [ 111.004372][ T6186] vivid-003: reconnect [ 111.029703][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 111.031918][ T5885] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 111.031946][ T5885] usb 4-1: config 0 has no interface number 0 [ 111.031989][ T5885] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.032014][ T5885] usb 4-1: config 0 interface 85 has no altsetting 0 [ 111.035469][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 111.035502][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.035520][ T5885] usb 4-1: Product: syz [ 111.035533][ T5885] usb 4-1: Manufacturer: syz [ 111.035546][ T5885] usb 4-1: SerialNumber: syz [ 111.128871][ T5885] usb 4-1: config 0 descriptor?? [ 111.836439][ T5885] appletouch 4-1:0.85: Geyser mode initialized. [ 112.296024][ T6195] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.334974][ T5885] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input9 [ 115.049223][ T5885] usb 4-1: USB disconnect, device number 2 [ 115.090532][ T810] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 115.490117][ T5885] appletouch 4-1:0.85: input: appletouch disconnected [ 116.154688][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 116.845492][ T6220] syz.1.90 (6220) used greatest stack depth: 17600 bytes left [ 117.117324][ T6236] vivid-001: disconnect [ 117.118449][ T6234] vivid-001: reconnect [ 119.172479][ T6241] syz.3.96 (6241) used greatest stack depth: 16952 bytes left [ 123.284653][ T5885] wlan1 speed is unknown, defaulting to 1000 [ 123.284743][ T5885] óyz2: Port: 1 Link DOWN [ 126.067148][ T6319] vivid-004: disconnect [ 126.213525][ T6313] vivid-004: reconnect [ 126.394794][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 132.146441][ T6451] vivid-004: disconnect [ 132.147390][ T6450] vivid-004: reconnect [ 132.530375][ T6461] tipc: Started in network mode [ 132.530400][ T6461] tipc: Node identity 8a8dfaf83d0c, cluster identity 4711 [ 132.530563][ T6461] tipc: Enabled bearer , priority 0 [ 132.544641][ T6461] syzkaller0: entered promiscuous mode [ 132.544664][ T6461] syzkaller0: entered allmulticast mode [ 132.578557][ T6460] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 132.868867][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868920][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130914][ T6461] tipc: Resetting bearer [ 133.183639][ T6455] tipc: Resetting bearer [ 133.410989][ T6455] tipc: Disabling bearer [ 134.083320][ T36] tipc: Node number set to 3078748920 [ 136.440996][ T6506] vivid-002: disconnect [ 136.441716][ T6504] vivid-002: reconnect [ 137.697899][ T810] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.701364][ T37] audit: type=1326 audit(1774936279.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.701629][ T37] audit: type=1326 audit(1774936279.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.701897][ T37] audit: type=1326 audit(1774936279.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.701940][ T37] audit: type=1326 audit(1774936279.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.702034][ T37] audit: type=1326 audit(1774936279.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.702075][ T37] audit: type=1326 audit(1774936279.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.702116][ T37] audit: type=1326 audit(1774936279.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.702209][ T37] audit: type=1326 audit(1774936279.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 137.702249][ T37] audit: type=1326 audit(1774936279.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d6fb7c582 code=0x7ffc0000 [ 137.810221][ T37] audit: type=1326 audit(1774936279.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.3.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d6fb7c582 code=0x7ffc0000 [ 137.989731][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 138.009380][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 138.067387][ T810] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 138.067404][ T810] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 138.067415][ T810] usb 5-1: Product: syz [ 138.067422][ T810] usb 5-1: SerialNumber: syz [ 138.153181][ T810] usb 5-1: config 0 descriptor?? [ 142.638488][ T5885] usb 5-1: USB disconnect, device number 5 [ 144.371184][ T6605] netlink: 'syz.3.157': attribute type 21 has an invalid length. [ 144.371205][ T6605] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.516967][ T6617] netlink: 'syz.4.168': attribute type 21 has an invalid length. [ 145.517049][ T6617] netlink: 'syz.4.168': attribute type 6 has an invalid length. [ 145.517063][ T6617] netlink: 132 bytes leftover after parsing attributes in process `syz.4.168'. [ 145.906019][ T6621] netlink: 'syz.4.170': attribute type 2 has an invalid length. [ 146.117376][ T6635] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 146.117402][ T6635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.119746][ T6635] vhci_hcd vhci_hcd.0: Device attached [ 146.267140][ T6636] vhci_hcd: connection closed [ 146.290317][ T12] vhci_hcd vhci_hcd.1: stop threads [ 146.290350][ T12] vhci_hcd vhci_hcd.1: release socket [ 146.290420][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 146.309815][ T36] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.340988][ T1240] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 146.569723][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 146.571112][ T36] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 146.571126][ T36] usb 5-1: config 0 has no interface number 0 [ 146.571150][ T36] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.571164][ T36] usb 5-1: config 0 interface 85 has no altsetting 0 [ 146.572981][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 146.572996][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.573005][ T36] usb 5-1: Product: syz [ 146.573013][ T36] usb 5-1: Manufacturer: syz [ 146.573020][ T36] usb 5-1: SerialNumber: syz [ 146.575932][ T36] usb 5-1: config 0 descriptor?? [ 147.194315][ T36] appletouch 5-1:0.85: Geyser mode initialized. [ 147.196197][ T36] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input10 [ 147.406166][ T36] usb 5-1: USB disconnect, device number 6 [ 147.406263][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 147.515897][ T36] appletouch 5-1:0.85: input: appletouch disconnected [ 148.023877][ T6650] netlink: 'syz.3.179': attribute type 21 has an invalid length. [ 148.023921][ T6650] netlink: 'syz.3.179': attribute type 6 has an invalid length. [ 148.023929][ T6650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.179'. [ 148.316709][ T37] kauditd_printk_skb: 243 callbacks suppressed [ 148.316721][ T37] audit: type=1326 audit(1774936288.833:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316753][ T37] audit: type=1326 audit(1774936288.833:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316775][ T37] audit: type=1326 audit(1774936288.833:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316796][ T37] audit: type=1326 audit(1774936288.833:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316818][ T37] audit: type=1326 audit(1774936288.843:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316840][ T37] audit: type=1326 audit(1774936288.843:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316861][ T37] audit: type=1326 audit(1774936288.843:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316882][ T37] audit: type=1326 audit(1774936288.853:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316902][ T37] audit: type=1326 audit(1774936288.853:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 148.316923][ T37] audit: type=1326 audit(1774936288.863:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6654 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f283fd2c582 code=0x7ffc0000 [ 149.228361][ T6666] tipc: Enabled bearer , priority 0 [ 149.294604][ T6664] tipc: Resetting bearer [ 149.372708][ T6667] syzkaller0: entered promiscuous mode [ 149.372725][ T6667] syzkaller0: entered allmulticast mode [ 149.500936][ T6663] tipc: Resetting bearer [ 150.191166][ T6663] tipc: Disabling bearer [ 150.903881][ T6679] syz.0.187 (6679) used greatest stack depth: 16224 bytes left [ 152.269720][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.363832][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.450856][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 152.453842][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 152.456955][ T36] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 152.456980][ T36] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 152.456998][ T36] usb 4-1: Product: syz [ 152.457011][ T36] usb 4-1: SerialNumber: syz [ 152.618296][ T36] usb 4-1: config 0 descriptor?? [ 152.621324][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.733355][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 152.733385][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 152.733404][ T5890] usb 3-1: Product: syz [ 152.733418][ T5890] usb 3-1: Manufacturer: syz [ 152.733432][ T5890] usb 3-1: SerialNumber: syz [ 153.087644][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.146191][ T5885] usb 4-1: USB disconnect, device number 3 [ 153.385564][ T36] usb 3-1: USB disconnect, device number 4 [ 153.405377][ T36] usblp0: removed [ 153.908953][ T6716] tipc: Enabling of bearer rejected, failed to enable media [ 155.475451][ T6746] tipc: Started in network mode [ 155.475480][ T6746] tipc: Node identity 42b3efa4947a, cluster identity 4711 [ 155.475659][ T6746] tipc: Enabled bearer , priority 0 [ 155.476570][ T6746] syzkaller0: entered promiscuous mode [ 155.476590][ T6746] syzkaller0: entered allmulticast mode [ 155.518298][ T6746] tipc: Resetting bearer [ 155.879941][ T6744] tipc: Resetting bearer [ 156.025110][ T6744] tipc: Disabling bearer [ 156.181902][ T6749] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 156.185115][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 156.185130][ T37] audit: type=1326 audit(1774936295.741:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.187928][ T37] audit: type=1326 audit(1774936295.741:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.188192][ T37] audit: type=1326 audit(1774936295.741:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.188611][ T37] audit: type=1326 audit(1774936295.741:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.188860][ T37] audit: type=1326 audit(1774936295.741:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.189351][ T37] audit: type=1326 audit(1774936295.741:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.190874][ T37] audit: type=1326 audit(1774936295.751:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d6fb7c582 code=0x7ffc0000 [ 156.192855][ T37] audit: type=1326 audit(1774936295.751:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d6fb7c582 code=0x7ffc0000 [ 156.196535][ T37] audit: type=1326 audit(1774936295.751:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 156.197846][ T37] audit: type=1326 audit(1774936295.751:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6758 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 157.474072][ T6775] siw: device registration error -23 [ 158.193879][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 159.305641][ T6770] syz.1.221 (6770) used greatest stack depth: 15072 bytes left [ 165.312597][ T6852] fuse: Unknown parameter '0x0000000000000004' [ 166.658184][ T6865] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 168.885181][ T6884] fuse: Unknown parameter '0x0000000000000004' [ 169.650666][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 169.650683][ T37] audit: type=1326 audit(1774936309.211:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.664198][ T37] audit: type=1326 audit(1774936309.221:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.664663][ T37] audit: type=1326 audit(1774936309.221:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.671145][ T37] audit: type=1326 audit(1774936309.231:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.671186][ T37] audit: type=1326 audit(1774936309.231:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.671224][ T37] audit: type=1326 audit(1774936309.231:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.671262][ T37] audit: type=1326 audit(1774936309.231:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.671299][ T37] audit: type=1326 audit(1774936309.231:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.685208][ T37] audit: type=1326 audit(1774936309.231:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 169.729765][ T37] audit: type=1326 audit(1774936309.281:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 170.883988][ T6897] Process accounting resumed [ 171.559694][ T1240] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.588872][ T1240] usb 5-1: Using ep0 maxpacket: 32 [ 172.600360][ T1240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 172.624519][ T1240] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 172.624536][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 172.624545][ T1240] usb 5-1: Product: syz [ 172.624552][ T1240] usb 5-1: SerialNumber: syz [ 172.660537][ T1240] usb 5-1: config 0 descriptor?? [ 174.064990][ T6957] tipc: Started in network mode [ 174.065007][ T6957] tipc: Node identity 929c0ad24191, cluster identity 4711 [ 174.065111][ T6957] tipc: Enabled bearer , priority 0 [ 174.066282][ T6957] syzkaller0: entered promiscuous mode [ 174.066295][ T6957] syzkaller0: entered allmulticast mode [ 174.307036][ T6956] tipc: Resetting bearer [ 174.422759][ T810] usb 5-1: USB disconnect, device number 7 [ 174.526156][ T6956] tipc: Disabling bearer [ 174.895450][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 174.895467][ T37] audit: type=1326 audit(1774936313.450:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 174.902289][ T37] audit: type=1326 audit(1774936313.460:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 174.911670][ T37] audit: type=1326 audit(1774936313.460:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 174.932612][ T37] audit: type=1326 audit(1774936313.490:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 174.932931][ T37] audit: type=1326 audit(1774936313.490:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 174.933176][ T37] audit: type=1326 audit(1774936313.490:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 175.084800][ T37] audit: type=1326 audit(1774936313.640:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 175.098224][ T37] audit: type=1326 audit(1774936313.640:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 175.146679][ T37] audit: type=1326 audit(1774936313.700:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 175.152821][ T37] audit: type=1326 audit(1774936313.710:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6964 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 176.082499][ T6997] fuse: Unknown parameter 'fd0x0000000000000004' [ 176.316262][ T7003] tipc: Enabled bearer , priority 0 [ 176.317577][ T7003] syzkaller0: entered promiscuous mode [ 176.317600][ T7003] syzkaller0: entered allmulticast mode [ 176.929922][ T7002] tipc: Resetting bearer [ 177.316694][ T7002] tipc: Disabling bearer [ 177.977674][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.979364][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.011314][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.385150][ T7028] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.746245][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.748909][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.750665][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.752070][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.753438][ T7028] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.961244][ T7033] fuse: Unknown parameter 'fd0x0000000000000004' [ 179.380166][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.422090][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 180.312853][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.315876][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.315902][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.315920][ T5890] usb 3-1: Product: syz [ 180.315933][ T5890] usb 3-1: Manufacturer: syz [ 180.315945][ T5890] usb 3-1: SerialNumber: syz [ 180.787208][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.128497][ T7069] siw: device registration error -23 [ 181.549967][ T7063] tipc: Enabled bearer , priority 0 [ 181.622941][ T5885] usb 3-1: USB disconnect, device number 5 [ 181.628704][ T5885] usblp0: removed [ 181.769891][ T7076] fuse: Unknown parameter 'fd0x0000000000000004' [ 181.984778][ T7053] tipc: Disabling bearer [ 182.783163][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 182.787096][ T37] audit: type=1326 audit(1774936321.340:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.795001][ T37] audit: type=1326 audit(1774936321.340:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.805050][ T37] audit: type=1326 audit(1774936321.340:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.814982][ T37] audit: type=1326 audit(1774936321.340:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.815034][ T37] audit: type=1326 audit(1774936321.340:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.815193][ T37] audit: type=1326 audit(1774936321.340:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.815234][ T37] audit: type=1326 audit(1774936321.340:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.815270][ T37] audit: type=1326 audit(1774936321.340:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 182.815304][ T37] audit: type=1326 audit(1774936321.350:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f551226c582 code=0x7ffc0000 [ 182.815393][ T37] audit: type=1326 audit(1774936321.350:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f551226c582 code=0x7ffc0000 [ 185.409722][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.467594][ T7117] tipc: Enabling of bearer rejected, failed to enable media [ 185.562858][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.564748][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 185.564764][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 185.564775][ T5885] usb 3-1: Product: syz [ 185.564782][ T5885] usb 3-1: Manufacturer: syz [ 185.564788][ T5885] usb 3-1: SerialNumber: syz [ 185.910114][ T5885] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 186.353543][ T5801] usb 3-1: USB disconnect, device number 6 [ 186.360313][ T5801] usblp0: removed [ 187.528771][ T7158] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 192.121918][ T7207] vivid-003: disconnect [ 192.722250][ T37] kauditd_printk_skb: 214 callbacks suppressed [ 192.722268][ T37] audit: type=1326 audit(1774936331.280:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 192.724445][ T37] audit: type=1326 audit(1774936331.280:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 192.998486][ T7202] vivid-003: reconnect [ 193.025714][ T37] audit: type=1326 audit(1774936331.570:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.025763][ T37] audit: type=1326 audit(1774936331.570:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.025803][ T37] audit: type=1326 audit(1774936331.570:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.029099][ T37] audit: type=1326 audit(1774936331.580:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.029146][ T37] audit: type=1326 audit(1774936331.580:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.035174][ T37] audit: type=1326 audit(1774936331.590:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 193.035221][ T37] audit: type=1326 audit(1774936331.590:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz.4.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283fd2c819 code=0x7ffc0000 [ 194.739201][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.757075][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.292309][ T7328] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 198.395928][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 198.395958][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 198.399716][ T1240] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.670918][ T1240] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.683972][ T1240] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 198.684002][ T1240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 198.684022][ T1240] usb 3-1: Product: syz [ 198.684036][ T1240] usb 3-1: Manufacturer: syz [ 198.684049][ T1240] usb 3-1: SerialNumber: syz [ 198.998231][ T1240] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.328606][ T810] usb 3-1: USB disconnect, device number 7 [ 199.336436][ T810] usblp0: removed [ 199.600654][ T7343] netlink: 'syz.1.402': attribute type 4 has an invalid length. [ 200.760664][ T1240] IPVS: starting estimator thread 0... [ 200.909902][ T7361] IPVS: using max 8 ests per chain, 19200 per kthread [ 201.496063][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 201.496099][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 201.496118][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 201.496755][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 202.083274][ T7375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 202.083354][ T7375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.086117][ T7375] vhci_hcd vhci_hcd.0: Device attached [ 202.590227][ T811] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 202.667912][ T811] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 202.720481][ T7387] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 202.862103][ T7378] vhci_hcd: connection reset by peer [ 202.879162][ T6435] vhci_hcd vhci_hcd.0: stop threads [ 202.879186][ T6435] vhci_hcd vhci_hcd.0: release socket [ 202.879250][ T6435] vhci_hcd vhci_hcd.0: disconnect device [ 204.228901][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 205.393416][ T7454] netlink: 'syz.3.429': attribute type 4 has an invalid length. [ 206.248326][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 207.799848][ T811] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 208.157836][ T7504] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 209.855882][ T5801] IPVS: starting estimator thread 0... [ 209.960374][ T7553] IPVS: using max 15 ests per chain, 36000 per kthread [ 214.136898][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 214.815578][ T7621] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 214.848780][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 214.848801][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 214.979794][ T37] audit: type=1326 audit(1774936353.520:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.979845][ T37] audit: type=1326 audit(1774936353.520:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.979883][ T37] audit: type=1326 audit(1774936353.520:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.979922][ T37] audit: type=1326 audit(1774936353.520:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.979962][ T37] audit: type=1326 audit(1774936353.520:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.979998][ T37] audit: type=1326 audit(1774936353.520:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.980037][ T37] audit: type=1326 audit(1774936353.520:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.980075][ T37] audit: type=1326 audit(1774936353.520:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 214.980112][ T37] audit: type=1326 audit(1774936353.520:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe0fdad04e code=0x7ffc0000 [ 214.980150][ T37] audit: type=1326 audit(1774936353.530:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7627 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0fdec819 code=0x7ffc0000 [ 217.715548][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 217.846510][ T7663] vivid-003: disconnect [ 218.575989][ T7658] vivid-003: reconnect [ 218.903603][ T7667] syzkaller0: entered promiscuous mode [ 218.903618][ T7667] syzkaller0: entered allmulticast mode [ 218.931082][ T7671] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 218.977038][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 219.003176][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 219.003207][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 220.196122][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 220.475249][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 224.019011][ T7723] syzkaller0: entered promiscuous mode [ 224.019035][ T7723] syzkaller0: entered allmulticast mode [ 224.826450][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.014014][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 225.016357][ T5887] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 225.016381][ T5887] usb 2-1: config 0 has no interface number 0 [ 225.016423][ T5887] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.016448][ T5887] usb 2-1: config 0 interface 85 has no altsetting 0 [ 225.050625][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 225.050652][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.050670][ T5887] usb 2-1: Product: syz [ 225.050682][ T5887] usb 2-1: Manufacturer: syz [ 225.050695][ T5887] usb 2-1: SerialNumber: syz [ 225.068693][ T5887] usb 2-1: config 0 descriptor?? [ 225.764521][ T5887] appletouch 2-1:0.85: Geyser mode initialized. [ 225.767380][ T5887] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11 [ 226.017741][ T5886] usb 2-1: USB disconnect, device number 2 [ 226.017848][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 226.077187][ T5955] udevd[5955]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 226.112087][ T5886] appletouch 2-1:0.85: input: appletouch disconnected [ 229.544477][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.700091][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 229.702253][ T5887] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 229.702269][ T5887] usb 2-1: config 0 has no interface number 0 [ 229.702293][ T5887] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.702307][ T5887] usb 2-1: config 0 interface 85 has no altsetting 0 [ 229.704043][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 229.704058][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.704067][ T5887] usb 2-1: Product: syz [ 229.704075][ T5887] usb 2-1: Manufacturer: syz [ 229.704082][ T5887] usb 2-1: SerialNumber: syz [ 229.707091][ T5887] usb 2-1: config 0 descriptor?? [ 230.220100][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 230.322691][ T5887] appletouch 2-1:0.85: Geyser mode initialized. [ 230.326265][ T5887] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input12 [ 230.527904][ T5886] usb 2-1: USB disconnect, device number 3 [ 230.527993][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 231.406900][ T5886] appletouch 2-1:0.85: input: appletouch disconnected [ 231.558644][ T7864] netlink: 312 bytes leftover after parsing attributes in process `syz.4.560'. [ 231.558677][ T7864] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 231.635491][ T7864] netlink: 324 bytes leftover after parsing attributes in process `syz.4.560'. [ 231.709249][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 231.822240][ T7864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.036259][ T7869] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 232.594898][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 236.041062][ T7940] syzkaller0: entered promiscuous mode [ 236.041086][ T7940] syzkaller0: entered allmulticast mode [ 238.404563][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 238.557156][ T7952] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 245.511575][ T8002] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 249.385769][ T8046] netlink: 'syz.4.620': attribute type 2 has an invalid length. [ 255.557105][ T8091] netlink: 'syz.1.635': attribute type 2 has an invalid length. [ 255.735529][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735595][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.925753][ T8117] Process accounting resumed [ 261.562023][ T8139] syzkaller0: entered promiscuous mode [ 261.562042][ T8139] syzkaller0: entered allmulticast mode [ 261.643356][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 262.504122][ T8166] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 264.158641][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 273.321258][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 273.325675][ T8232] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 276.719568][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 280.930957][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.957706][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 281.919676][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 281.924083][ T5886] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 281.924108][ T5886] usb 3-1: config 0 has no interface number 0 [ 281.924151][ T5886] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.924178][ T5886] usb 3-1: config 0 interface 85 has no altsetting 0 [ 281.927013][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 281.927040][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.927058][ T5886] usb 3-1: Product: syz [ 281.927071][ T5886] usb 3-1: Manufacturer: syz [ 281.927084][ T5886] usb 3-1: SerialNumber: syz [ 282.013898][ T5886] usb 3-1: config 0 descriptor?? [ 283.049722][ T5886] appletouch 3-1:0.85: Geyser mode initialized. [ 283.064229][ T5886] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13 [ 283.257466][ T5801] usb 3-1: USB disconnect, device number 8 [ 283.257596][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 283.372613][ T5801] appletouch 3-1:0.85: input: appletouch disconnected [ 283.415539][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 283.617623][ T8345] siw: device registration error -23 [ 284.108144][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 286.574326][ T8385] siw: device registration error -23 [ 286.934444][ T8391] tipc: Enabling of bearer rejected, failed to enable media [ 287.883669][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 290.177544][ T37] kauditd_printk_skb: 160 callbacks suppressed [ 290.177562][ T37] audit: type=1326 audit(1774936427.740:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.209688][ T37] audit: type=1326 audit(1774936427.740:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233520][ T37] audit: type=1326 audit(1774936427.780:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233566][ T37] audit: type=1326 audit(1774936427.790:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233605][ T37] audit: type=1326 audit(1774936427.790:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233642][ T37] audit: type=1326 audit(1774936427.790:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233681][ T37] audit: type=1326 audit(1774936427.790:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233718][ T37] audit: type=1326 audit(1774936427.790:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.233754][ T37] audit: type=1326 audit(1774936427.790:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f551222d04e code=0x7ffc0000 [ 290.233791][ T37] audit: type=1326 audit(1774936427.800:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8438 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551226c819 code=0x7ffc0000 [ 290.521818][ T8443] netlink: 'syz.3.751': attribute type 21 has an invalid length. [ 291.643195][ T8463] netlink: 'syz.1.755': attribute type 4 has an invalid length. [ 292.394565][ T8481] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 292.414164][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 292.471324][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 294.260001][ T8502] siw: device registration error -23 [ 297.249124][ T8519] syzkaller0: entered promiscuous mode [ 297.249147][ T8519] syzkaller0: entered allmulticast mode [ 297.734290][ T8532] siw: device registration error -23 [ 299.344283][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 299.344316][ T8550] netlink: 'syz.1.790': attribute type 12 has an invalid length. [ 299.425137][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 299.425171][ T8550] netlink: 'syz.1.790': attribute type 12 has an invalid length. [ 299.425219][ T1262] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.430677][ T1262] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.434051][ T1262] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.434089][ T1262] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.200344][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 304.248066][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 308.652686][ T8685] syzkaller0: entered promiscuous mode [ 308.652714][ T8685] syzkaller0: entered allmulticast mode [ 308.671876][ T8687] sg_write: data in/out 14911/38 bytes for SCSI command 0x5d-- guessing data in; [ 308.671876][ T8687] program syz.1.838 not setting count and/or reply_len properly [ 308.743070][ T8697] siw: device registration error -23 [ 308.938084][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 317.176406][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176501][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.036706][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.038767][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.051100][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.057206][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.061101][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.110220][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.118393][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.119533][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.152384][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.153534][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.335533][ T8721] syzkaller0: entered promiscuous mode [ 323.335561][ T8721] syzkaller0: entered allmulticast mode [ 325.249750][ T5808] Bluetooth: hci6: command tx timeout [ 325.259893][ T5808] Bluetooth: hci5: command tx timeout [ 327.332099][ T5808] Bluetooth: hci5: command tx timeout [ 327.332133][ T5808] Bluetooth: hci6: command tx timeout [ 329.409702][ T5802] Bluetooth: hci6: command tx timeout [ 329.409734][ T5802] Bluetooth: hci5: command tx timeout [ 331.489641][ T5802] Bluetooth: hci6: command tx timeout [ 331.489655][ T5808] Bluetooth: hci5: command tx timeout [ 334.544599][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.555447][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.561343][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.562540][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.563210][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.585555][ T5805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.592358][ T5805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.593529][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.601039][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.603335][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.421981][ T8783] sctp: [Deprecated]: syz.3.864 (pid 8783) Use of int in maxseg socket option. [ 335.421981][ T8783] Use struct sctp_assoc_value instead [ 335.905552][ T6436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.905575][ T6436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.142601][ T6436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.142623][ T6436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.190834][ T8782] wlan1 speed is unknown, defaulting to 1000 [ 336.211806][ T8782] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.211829][ T8758] wlan1 speed is unknown, defaulting to 1000 [ 336.236365][ T8755] wlan1 speed is unknown, defaulting to 1000 [ 336.236408][ T8758] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.267931][ T8755] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.267951][ T8767] wlan1 speed is unknown, defaulting to 1000 [ 336.421108][ T6436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.421130][ T6436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.478398][ T8769] wlan1 speed is unknown, defaulting to 1000 [ 336.478440][ T8767] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.516290][ T8769] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.609621][ T5115] Bluetooth: hci4: command tx timeout [ 336.689640][ T5115] Bluetooth: hci7: command tx timeout [ 336.694159][ T6436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.694180][ T6436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.406794][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 337.465397][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 337.483884][ T6436] bridge_slave_1: left allmulticast mode [ 337.484071][ T6436] bridge_slave_1: left promiscuous mode [ 337.488526][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.691175][ T6436] bridge_slave_0: left allmulticast mode [ 337.691194][ T6436] bridge_slave_0: left promiscuous mode [ 337.691336][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.689580][ T5115] Bluetooth: hci4: command tx timeout [ 338.781054][ T5115] Bluetooth: hci7: command tx timeout [ 339.511648][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.590678][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.631418][ T6436] bond0 (unregistering): Released all slaves [ 339.639006][ T6436] bond1 (unregistering): Released all slaves [ 339.812000][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 339.894538][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 340.266661][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.266844][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.267020][ T8758] bridge_slave_0: entered allmulticast mode [ 340.268980][ T8758] bridge_slave_0: entered promiscuous mode [ 340.363641][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.363764][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.363996][ T8758] bridge_slave_1: entered allmulticast mode [ 340.403850][ T8758] bridge_slave_1: entered promiscuous mode [ 340.405252][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.405375][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.405560][ T8755] bridge_slave_0: entered allmulticast mode [ 340.409141][ T8755] bridge_slave_0: entered promiscuous mode [ 340.457787][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.457897][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.458459][ T8755] bridge_slave_1: entered allmulticast mode [ 340.461668][ T8755] bridge_slave_1: entered promiscuous mode [ 340.518922][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.519017][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.519289][ T8767] bridge_slave_0: entered allmulticast mode [ 340.521658][ T8767] bridge_slave_0: entered promiscuous mode [ 340.674818][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.713467][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.713602][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.713807][ T8767] bridge_slave_1: entered allmulticast mode [ 340.715393][ T8767] bridge_slave_1: entered promiscuous mode [ 340.757097][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.771383][ T5115] Bluetooth: hci4: command tx timeout [ 340.809034][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.844931][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.845058][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.845177][ T8769] bridge_slave_0: entered allmulticast mode [ 340.846506][ T8769] bridge_slave_0: entered promiscuous mode [ 340.850122][ T5115] Bluetooth: hci7: command tx timeout [ 340.959348][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 340.982193][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.003124][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.003189][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.003478][ T8769] bridge_slave_1: entered allmulticast mode [ 341.004837][ T8769] bridge_slave_1: entered promiscuous mode [ 341.035941][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.122064][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.239758][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.243585][ T8758] team0: Port device team_slave_0 added [ 341.499701][ T6436] hsr_slave_0: left promiscuous mode [ 342.299851][ T6436] hsr_slave_1: left promiscuous mode [ 342.303065][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.303150][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.341261][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.341286][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.453760][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 343.097494][ T5115] Bluetooth: hci4: command tx timeout [ 343.097529][ T5115] Bluetooth: hci7: command tx timeout [ 343.121192][ T6436] veth1_macvtap: left promiscuous mode [ 343.121359][ T6436] veth0_macvtap: left promiscuous mode [ 343.121537][ T6436] veth1_vlan: left promiscuous mode [ 343.121710][ T6436] veth0_vlan: left promiscuous mode [ 343.710603][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 343.750967][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 343.978816][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.993540][ T8758] team0: Port device team_slave_1 added [ 344.072020][ T8755] team0: Port device team_slave_0 added [ 344.074434][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.121477][ T8755] team0: Port device team_slave_1 added [ 344.124487][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.235859][ T8767] team0: Port device team_slave_0 added [ 344.237676][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.237690][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.237710][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.311501][ T8767] team0: Port device team_slave_1 added [ 344.316792][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.316807][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.316830][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.318241][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.318254][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.318277][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.326822][ T8769] team0: Port device team_slave_0 added [ 344.466094][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.466104][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.466118][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.467925][ T8769] team0: Port device team_slave_1 added [ 344.573201][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.573211][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.573223][ T8767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.656524][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.656539][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.656563][ T8767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.952215][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.952226][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.952241][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.150711][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.150726][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.150751][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.162465][ T8758] hsr_slave_0: entered promiscuous mode [ 345.232898][ T8758] hsr_slave_1: entered promiscuous mode [ 345.233899][ T8758] debugfs: 'hsr0' already exists in 'hsr' [ 345.233924][ T8758] Cannot create hsr debugfs directory [ 345.578428][ T8755] hsr_slave_0: entered promiscuous mode [ 345.591719][ T8755] hsr_slave_1: entered promiscuous mode [ 345.595916][ T8755] debugfs: 'hsr0' already exists in 'hsr' [ 345.595932][ T8755] Cannot create hsr debugfs directory [ 345.743602][ T8767] hsr_slave_0: entered promiscuous mode [ 345.745026][ T8767] hsr_slave_1: entered promiscuous mode [ 345.750304][ T8767] debugfs: 'hsr0' already exists in 'hsr' [ 345.750327][ T8767] Cannot create hsr debugfs directory [ 345.943105][ T8769] hsr_slave_0: entered promiscuous mode [ 345.951643][ T8769] hsr_slave_1: entered promiscuous mode [ 345.952553][ T8769] debugfs: 'hsr0' already exists in 'hsr' [ 345.952575][ T8769] Cannot create hsr debugfs directory [ 346.058264][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 346.093667][ T6436] IPVS: stop unused estimator thread 0... [ 346.264526][ T8859] netlink: 44 bytes leftover after parsing attributes in process `syz.3.876'. [ 347.375956][ T8870] netlink: 312 bytes leftover after parsing attributes in process `syz.3.880'. [ 347.467061][ T8872] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 347.524797][ T8872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.639081][ T8874] bond4: (slave veth3): Enslaving as an active interface with a down link [ 347.964131][ T8874] vlan2: entered allmulticast mode [ 347.964144][ T8874] veth0_to_bond: entered allmulticast mode [ 347.964747][ T8874] veth0_to_bond: entered promiscuous mode [ 347.965320][ T8874] veth0_to_bond: left promiscuous mode [ 347.967155][ T8874] bond4: (slave vlan2): making interface the new active one [ 347.967988][ T8874] veth0_to_bond: entered promiscuous mode [ 347.968696][ T8874] vlan2: entered promiscuous mode [ 347.969136][ T8874] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 348.412108][ T37] kauditd_printk_skb: 211 callbacks suppressed [ 348.412125][ T37] audit: type=1326 audit(1774936485.980:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414273][ T37] audit: type=1326 audit(1774936485.980:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414324][ T37] audit: type=1326 audit(1774936485.980:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414363][ T37] audit: type=1326 audit(1774936485.980:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414400][ T37] audit: type=1326 audit(1774936485.980:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414437][ T37] audit: type=1326 audit(1774936485.980:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414475][ T37] audit: type=1326 audit(1774936485.980:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.414767][ T37] audit: type=1326 audit(1774936485.980:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.415028][ T37] audit: type=1326 audit(1774936485.980:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6fb7c819 code=0x7ffc0000 [ 348.415068][ T37] audit: type=1326 audit(1774936485.980:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d6fb3d04e code=0x7ffc0000 [ 349.966574][ T6436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.988422][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 350.282577][ T6436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.393726][ T8758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.592558][ T6436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.615049][ T8758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.657869][ T8758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.900707][ T6436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.939977][ T8758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.100271][ T8755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.152669][ T8755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.218036][ T8755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.258473][ T8755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.438521][ T8767] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.484353][ T8767] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.646521][ T6436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.699364][ T8767] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.769184][ T8767] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 351.991934][ T6436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.224510][ T6436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.298212][ T8769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 352.338456][ T8769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 352.366038][ T8769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.441413][ T8964] sctp: [Deprecated]: syz.3.902 (pid 8964) Use of int in maxseg socket option. [ 352.441413][ T8964] Use struct sctp_assoc_value instead [ 352.543951][ T6436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.591623][ T8769] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 352.663902][ T8963] wlan1 speed is unknown, defaulting to 1000 [ 352.677707][ T8963] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.797406][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.142448][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.418301][ T6436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.550040][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.564234][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.564413][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.614849][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.615472][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.789500][ T6436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.888038][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.004637][ T6436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.051163][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.069198][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.069356][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.125201][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.125295][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.282379][ T6436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.354908][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.359018][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.445762][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.448262][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.544487][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.553161][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.553284][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.638598][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.652641][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.843260][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.843444][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.125636][ T9019] netlink: 'syz.3.909': attribute type 4 has an invalid length. [ 355.160408][ T6436] bridge_slave_1: left allmulticast mode [ 355.160434][ T6436] bridge_slave_1: left promiscuous mode [ 355.160640][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.231165][ T6436] bridge_slave_0: left allmulticast mode [ 355.231192][ T6436] bridge_slave_0: left promiscuous mode [ 355.231431][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.333740][ T6436] bridge_slave_1: left allmulticast mode [ 355.333768][ T6436] bridge_slave_1: left promiscuous mode [ 355.333991][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.421589][ T6436] bridge_slave_0: left allmulticast mode [ 355.421615][ T6436] bridge_slave_0: left promiscuous mode [ 355.421769][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.511989][ T6436] bridge_slave_1: left allmulticast mode [ 355.512009][ T6436] bridge_slave_1: left promiscuous mode [ 355.512214][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.570450][ T6436] bridge_slave_0: left allmulticast mode [ 355.570469][ T6436] bridge_slave_0: left promiscuous mode [ 355.570624][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.755442][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.830400][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.853165][ T6436] bond0 (unregistering): Released all slaves [ 357.281481][ T6436] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 357.430546][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.510229][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.531553][ T6436] bond0 (unregistering): Released all slaves [ 357.536621][ T6436] bond1 (unregistering): Released all slaves [ 357.559836][ T6436] bond2 (unregistering): Released all slaves [ 357.576468][ T6436] bond3 (unregistering): Released all slaves [ 357.940155][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.030276][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.051633][ T6436] bond0 (unregistering): Released all slaves [ 358.056652][ T6436] bond1 (unregistering): Released all slaves [ 358.077468][ T6436] bond2 (unregistering): Released all slaves [ 358.095058][ T6436] bond3 (unregistering): Released all slaves [ 358.393005][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.440575][ T6436] tipc: Left network mode [ 358.557039][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.577878][ T6436] tipc: Left network mode [ 358.775807][ T6436] tipc: Left network mode [ 359.283179][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.465738][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.280020][ T8755] veth0_vlan: entered promiscuous mode [ 360.295692][ T8758] veth0_vlan: entered promiscuous mode [ 360.542395][ T8758] veth1_vlan: entered promiscuous mode [ 360.548785][ T8755] veth1_vlan: entered promiscuous mode [ 360.838939][ T9098] netlink: 312 bytes leftover after parsing attributes in process `syz.3.917'. [ 361.138638][ T8758] veth0_macvtap: entered promiscuous mode [ 361.150141][ T8767] veth0_vlan: entered promiscuous mode [ 361.155211][ T8755] veth0_macvtap: entered promiscuous mode [ 361.232498][ T8769] veth0_vlan: entered promiscuous mode [ 361.276626][ T8758] veth1_macvtap: entered promiscuous mode [ 361.294764][ T8755] veth1_macvtap: entered promiscuous mode [ 361.308488][ T8767] veth1_vlan: entered promiscuous mode [ 361.539323][ T8769] veth1_vlan: entered promiscuous mode [ 361.731238][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.733958][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.957523][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.965235][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.113787][ T6017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.135956][ T6017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.155686][ T6017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.178779][ T6017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.198724][ T8767] veth0_macvtap: entered promiscuous mode [ 362.209189][ T6017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.221666][ T6017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.326942][ T6017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.344809][ T8767] veth1_macvtap: entered promiscuous mode [ 362.348104][ T6017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.619968][ T6436] hsr_slave_0: left promiscuous mode [ 362.659809][ T6436] hsr_slave_1: left promiscuous mode [ 362.660798][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.660821][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.712869][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.712904][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.869632][ T6436] hsr_slave_0: left promiscuous mode [ 362.889677][ T6436] hsr_slave_1: left promiscuous mode [ 362.890371][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.890386][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.932995][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.933013][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.100664][ T6436] hsr_slave_0: left promiscuous mode [ 363.140056][ T6436] hsr_slave_1: left promiscuous mode [ 363.143348][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.143366][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.172531][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.172555][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.273904][ T6436] veth1_macvtap: left promiscuous mode [ 363.273967][ T6436] veth0_macvtap: left promiscuous mode [ 363.274099][ T6436] veth1_vlan: left promiscuous mode [ 363.274201][ T6436] veth0_vlan: left promiscuous mode [ 363.399773][ T6436] veth1_macvtap: left promiscuous mode [ 363.399833][ T6436] veth0_macvtap: left promiscuous mode [ 363.400010][ T6436] veth1_vlan: left promiscuous mode [ 363.400106][ T6436] veth0_vlan: left promiscuous mode [ 363.549799][ T6436] veth1_macvtap: left promiscuous mode [ 363.549872][ T6436] veth0_macvtap: left promiscuous mode [ 363.550007][ T6436] veth1_vlan: left promiscuous mode [ 363.550115][ T6436] veth0_vlan: left promiscuous mode [ 365.734305][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 365.800983][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 366.451538][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 366.495243][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 367.240946][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 367.290157][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 367.545070][ T8769] veth0_macvtap: entered promiscuous mode [ 367.696494][ T8769] veth1_macvtap: entered promiscuous mode [ 367.770518][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.832794][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.849892][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.849910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.881263][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.915197][ T6433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.953749][ T6433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.959212][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.979443][ T6433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.996739][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.996760][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.015940][ T6433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.116108][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.116121][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.116307][ T6433] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.215555][ T6433] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.228976][ T6433] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.317229][ T6433] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.339637][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.339650][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.915471][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.915485][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.068542][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.068562][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.076351][ T6427] vlan2: left promiscuous mode [ 369.214686][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 369.217434][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.217451][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.365637][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.373007][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 369.373034][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 369.373054][ T31] usb 6-1: Product: syz [ 369.373067][ T31] usb 6-1: Manufacturer: syz [ 369.373079][ T31] usb 6-1: SerialNumber: syz [ 369.414820][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.414841][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.619190][ T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 369.853736][ T5807] usb 6-1: USB disconnect, device number 2 [ 369.885624][ T5807] usblp0: removed [ 371.719596][ T1232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 371.879647][ T1232] usb 8-1: Using ep0 maxpacket: 32 [ 371.881214][ T1232] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 371.881238][ T1232] usb 8-1: config 0 has no interface number 0 [ 371.881355][ T1232] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.881380][ T1232] usb 8-1: config 0 interface 85 has no altsetting 0 [ 371.883718][ T1232] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 371.883744][ T1232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.883762][ T1232] usb 8-1: Product: syz [ 371.883775][ T1232] usb 8-1: Manufacturer: syz [ 371.883788][ T1232] usb 8-1: SerialNumber: syz [ 371.893409][ T1232] usb 8-1: config 0 descriptor?? [ 372.242177][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 372.498762][ T1232] appletouch 8-1:0.85: Geyser mode initialized. [ 372.503947][ T1232] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input14 [ 372.709097][ T5890] usb 8-1: USB disconnect, device number 2 [ 372.709208][ C1] appletouch 8-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 372.947572][ T5890] appletouch 8-1:0.85: input: appletouch disconnected [ 376.277024][ T9257] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 376.314486][ T9257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.072665][ T9257] vlan3: entered allmulticast mode [ 377.072680][ T9257] bond5: entered allmulticast mode [ 377.433433][ T6436] IPVS: stop unused estimator thread 0... [ 377.747186][ T811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 377.876192][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.952'. [ 377.876239][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.952'. [ 377.876253][ T9282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.952'. [ 377.965713][ T811] usb 6-1: Using ep0 maxpacket: 32 [ 377.968752][ T811] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 377.968767][ T811] usb 6-1: config 0 has no interface number 0 [ 377.968791][ T811] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.968805][ T811] usb 6-1: config 0 interface 85 has no altsetting 0 [ 378.036585][ T811] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 378.036613][ T811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.036636][ T811] usb 6-1: Product: syz [ 378.036644][ T811] usb 6-1: Manufacturer: syz [ 378.036651][ T811] usb 6-1: SerialNumber: syz [ 378.083250][ T811] usb 6-1: config 0 descriptor?? [ 378.637912][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.640870][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.713833][ T811] appletouch 6-1:0.85: Geyser mode initialized. [ 378.715655][ T811] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input15 [ 378.921161][ T5890] usb 6-1: USB disconnect, device number 3 [ 379.073364][ T5890] appletouch 6-1:0.85: input: appletouch disconnected [ 380.457595][ T9311] sctp: [Deprecated]: syz.7.956 (pid 9311) Use of int in maxseg socket option. [ 380.457595][ T9311] Use struct sctp_assoc_value instead [ 380.748548][ T9320] netlink: 'syz.8.961': attribute type 1 has an invalid length. [ 380.927455][ T9309] syzkaller0: entered promiscuous mode [ 380.927483][ T9309] syzkaller0: entered allmulticast mode [ 380.947281][ T9322] vlan2: entered allmulticast mode [ 380.947294][ T9322] veth0_to_bridge: entered allmulticast mode [ 393.271580][ T9307] wlan1 speed is unknown, defaulting to 1000 [ 393.660416][ T9370] netlink: 'syz.6.972': attribute type 4 has an invalid length. [ 394.238011][ T9394] erspan0: entered promiscuous mode [ 394.351077][ T810] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 394.509540][ T810] usb 9-1: Using ep0 maxpacket: 32 [ 394.515231][ T810] usb 9-1: config 0 has no interfaces? [ 394.517344][ T810] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 394.517369][ T810] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 394.517388][ T810] usb 9-1: Product: syz [ 394.517401][ T810] usb 9-1: SerialNumber: syz [ 394.572540][ T810] usb 9-1: config 0 descriptor?? [ 395.841207][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.849111][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.850322][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.851544][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.852293][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.615415][ T9425] wlan1 speed is unknown, defaulting to 1000 [ 397.969702][ T5802] Bluetooth: hci0: command tx timeout [ 399.743424][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 399.796172][ T10] usb 9-1: USB disconnect, device number 2 [ 400.049684][ T5802] Bluetooth: hci0: command tx timeout [ 400.519596][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 400.538683][ T9481] netlink: 'syz.6.998': attribute type 1 has an invalid length. [ 400.591192][ T9484] netlink: 52 bytes leftover after parsing attributes in process `syz.6.998'. [ 400.656380][ T1019] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.672291][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.674022][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 400.674036][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 400.674046][ T10] usb 6-1: Product: syz [ 400.674054][ T10] usb 6-1: Manufacturer: syz [ 400.674061][ T10] usb 6-1: SerialNumber: syz [ 400.807057][ T9486] vlan2: entered allmulticast mode [ 400.807079][ T9486] veth1_to_batadv: entered allmulticast mode [ 400.884235][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.085634][ T1019] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.144945][ T9425] chnl_net:caif_netlink_parms(): no params data found [ 401.588020][ T1019] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.130710][ T5802] Bluetooth: hci0: command tx timeout [ 402.285122][ T1019] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.655306][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.656103][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.656537][ T9425] bridge_slave_0: entered allmulticast mode [ 402.704914][ T9425] bridge_slave_0: entered promiscuous mode [ 402.722479][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.725160][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.725386][ T9425] bridge_slave_1: entered allmulticast mode [ 402.757996][ T9425] bridge_slave_1: entered promiscuous mode [ 403.386121][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.422280][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1005'. [ 403.526471][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.215767][ T5802] Bluetooth: hci0: command tx timeout [ 404.401283][ T9425] team0: Port device team_slave_0 added [ 404.477978][ T9425] team0: Port device team_slave_1 added [ 404.846644][ T1019] bridge_slave_1: left allmulticast mode [ 404.846669][ T1019] bridge_slave_1: left promiscuous mode [ 404.846881][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.959739][ T1019] bridge_slave_0: left allmulticast mode [ 404.959767][ T1019] bridge_slave_0: left promiscuous mode [ 404.962088][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.294145][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.351212][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.405867][ T1019] bond0 (unregistering): Released all slaves [ 406.456887][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.456905][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.457272][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.576232][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.576245][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.576260][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.982825][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'. [ 407.252531][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 407.995150][ T811] usb 6-1: USB disconnect, device number 4 [ 408.114801][ T9425] hsr_slave_0: entered promiscuous mode [ 408.127359][ T811] usblp0: removed [ 408.127616][ T9425] hsr_slave_1: entered promiscuous mode [ 408.655633][ T9578] netlink: 'syz.5.1019': attribute type 5 has an invalid length. [ 409.002009][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1027'. [ 409.059667][ T1019] hsr_slave_0: left promiscuous mode [ 409.099591][ T1019] hsr_slave_1: left promiscuous mode [ 409.100633][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.100657][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.150829][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.150855][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.241531][ T1019] veth1_macvtap: left promiscuous mode [ 409.245043][ T1019] veth0_macvtap: left promiscuous mode [ 409.245295][ T1019] veth1_vlan: left promiscuous mode [ 409.245459][ T1019] veth0_vlan: left promiscuous mode [ 409.642894][ T9623] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 409.695360][ T9625] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 410.252862][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 410.331618][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 410.664296][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1028'. [ 410.757539][ T9623] team0: Port device dummy0 added [ 410.915373][ T9625] team0: Port device dummy0 removed [ 410.971537][ T9625] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 411.994077][ T9425] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 412.831879][ T9425] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 413.022509][ T9425] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 413.047087][ T9660] netlink: 'syz.6.1044': attribute type 1 has an invalid length. [ 413.318751][ T9660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.462873][ T9425] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 413.571003][ T9670] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1046'. [ 413.822008][ T9684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.022702][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1048'. [ 414.074116][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.137189][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.163382][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 414.760189][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.760322][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.771604][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 414.814939][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.815785][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.452574][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1051'. [ 415.514782][ T9704] wlan1 speed is unknown, defaulting to 1000 [ 417.877935][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.219572][ T9166] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 418.454183][ T9166] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.531726][ T9166] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 418.531767][ T9166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 418.531818][ T9166] usb 7-1: Product: syz [ 418.531832][ T9166] usb 7-1: Manufacturer: syz [ 418.531900][ T9166] usb 7-1: SerialNumber: syz [ 419.733474][ T9166] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 420.942521][ T811] usb 7-1: USB disconnect, device number 2 [ 420.955017][ T811] usblp0: removed [ 421.226078][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.337367][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1063'. [ 421.337426][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1063'. [ 421.349521][ T9425] veth0_vlan: entered promiscuous mode [ 421.402349][ T9425] veth1_vlan: entered promiscuous mode [ 421.945168][ T9425] veth0_macvtap: entered promiscuous mode [ 421.958321][ T9425] veth1_macvtap: entered promiscuous mode [ 421.996699][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.006713][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.018088][ T166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.018356][ T166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.018591][ T166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.018816][ T166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.341443][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.341463][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.533845][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.533865][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.911202][ T811] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 423.061810][ T811] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.064162][ T811] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 423.064187][ T811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 423.064207][ T811] usb 7-1: Product: syz [ 423.064220][ T811] usb 7-1: Manufacturer: syz [ 423.064234][ T811] usb 7-1: SerialNumber: syz [ 423.333377][ T9824] netlink: 'syz.9.1079': attribute type 1 has an invalid length. [ 423.356369][ T811] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 424.707600][ T9853] netlink: 'syz.5.1085': attribute type 10 has an invalid length. [ 425.184568][ T9853] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 425.920597][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.956531][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.974607][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.979717][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.989764][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.505024][ T9877] netlink: 'syz.8.1092': attribute type 1 has an invalid length. [ 426.741312][ T9879] netlink: 'syz.5.1093': attribute type 27 has an invalid length. [ 427.307247][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.336702][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.130951][ T5802] Bluetooth: hci1: command tx timeout [ 428.410358][ T9879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.432128][ T9879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.647912][ T9894] netlink: 'syz.9.1097': attribute type 4 has an invalid length. [ 429.901482][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.903139][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.950999][ T9881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.035972][ T95] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.210505][ T5802] Bluetooth: hci1: command tx timeout [ 430.219607][ T5887] usb 7-1: USB disconnect, device number 3 [ 430.232062][ T5887] usblp0: removed [ 430.299704][ T9911] netlink: 'syz.6.1103': attribute type 1 has an invalid length. [ 430.379997][ T95] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.411132][ T9908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.463271][ T9912] bond1: (slave ip6gretap1): making interface the new active one [ 430.481196][ T9912] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 430.603069][ T95] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.992969][ T95] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.276862][ T6427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.453554][ T9932] netlink: 'syz.8.1110': attribute type 10 has an invalid length. [ 431.466051][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1111'. [ 431.483833][ T9934] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1111'. [ 431.728612][ T9932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 431.919591][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.964032][ T6427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.027602][ T9941] netlink: 'syz.8.1113': attribute type 4 has an invalid length. [ 432.153831][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.174951][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 432.174980][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 432.174996][ T10] usb 6-1: Product: syz [ 432.175004][ T10] usb 6-1: Manufacturer: syz [ 432.175011][ T10] usb 6-1: SerialNumber: syz [ 432.289601][ T5802] Bluetooth: hci1: command tx timeout [ 432.443264][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 432.562389][ T9956] netlink: 'syz.6.1116': attribute type 1 has an invalid length. [ 432.629762][ T6427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.711874][ T9946] syzkaller0: entered promiscuous mode [ 432.711900][ T9946] syzkaller0: entered allmulticast mode [ 433.466126][ T6427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.369676][ T5802] Bluetooth: hci1: command tx timeout [ 434.755067][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 435.219626][ T6427] bridge_slave_1: left allmulticast mode [ 435.219655][ T6427] bridge_slave_1: left promiscuous mode [ 435.219848][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.320890][ T6427] bridge_slave_0: left allmulticast mode [ 435.320909][ T6427] bridge_slave_0: left promiscuous mode [ 435.321128][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.963283][ T6427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.030301][ T6427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.100748][ T6427] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 437.147524][ T6427] bond0 (unregistering): Released all slaves [ 437.164556][T10016] netlink: 'syz.6.1130': attribute type 10 has an invalid length. [ 437.166843][ T6427] bond1 (unregistering): Released all slaves [ 437.196263][ T6427] bond2 (unregistering): Released all slaves [ 437.221357][ T6427] bond3 (unregistering): Released all slaves [ 437.271084][ T6427] bond4 (unregistering): (slave veth3): Releasing active interface [ 437.271133][ T6427] vlan2: entered promiscuous mode [ 437.380567][ T6427] bond4 (unregistering): (slave vlan2): Releasing active interface [ 437.402115][ T6427] bond4 (unregistering): Released all slaves [ 437.425869][ T6427] bond5 (unregistering): Released all slaves [ 437.848413][T10016] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 437.999753][ T6427] tipc: Left network mode [ 438.099254][T10034] netlink: 'syz.8.1136': attribute type 1 has an invalid length. [ 438.144369][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1135'. [ 438.168720][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 438.257636][T10034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.396606][T10039] vlan2: entered allmulticast mode [ 438.397201][T10039] bond2: entered allmulticast mode [ 439.278382][ T811] usb 6-1: USB disconnect, device number 5 [ 439.282915][ T811] usblp0: removed [ 439.320372][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.320507][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.320725][ T9863] bridge_slave_0: entered allmulticast mode [ 439.337873][ T9863] bridge_slave_0: entered promiscuous mode [ 439.383123][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.383239][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.383422][ T9863] bridge_slave_1: entered allmulticast mode [ 439.384906][ T9863] bridge_slave_1: entered promiscuous mode [ 440.004224][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.046560][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.063010][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063102][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.180569][ T6427] hsr_slave_0: left promiscuous mode [ 440.200788][ T6427] hsr_slave_1: left promiscuous mode [ 440.201379][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.201394][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.420898][ T6427] veth1_macvtap: left promiscuous mode [ 440.420960][ T6427] veth0_macvtap: left promiscuous mode [ 440.421107][ T6427] veth1_vlan: left promiscuous mode [ 440.421199][ T6427] veth0_vlan: left promiscuous mode [ 442.049513][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.219519][ T5887] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.230559][ T5887] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 442.230587][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 442.230605][ T5887] usb 6-1: Product: syz [ 442.230618][ T5887] usb 6-1: Manufacturer: syz [ 442.230631][ T5887] usb 6-1: SerialNumber: syz [ 442.488558][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1159'. [ 442.656622][ T5887] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 442.800819][T10110] netlink: 'syz.9.1162': attribute type 10 has an invalid length. [ 443.003439][ T6427] team0 (unregistering): Port device team_slave_1 removed [ 443.071556][ T6427] team0 (unregistering): Port device team_slave_0 removed [ 444.035703][ T1232] usb 6-1: USB disconnect, device number 6 [ 444.062445][ T1232] usblp0: removed [ 444.302511][T10110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 444.319346][T10118] bond1: option mode: unable to set because the bond device has slaves [ 444.371859][ T9863] team0: Port device team_slave_0 added [ 444.391593][ T9863] team0: Port device team_slave_1 added [ 444.687000][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.687013][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.687026][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.688478][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.688488][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.688502][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.937690][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1170'. [ 444.982370][ T9863] hsr_slave_0: entered promiscuous mode [ 444.983572][ T9863] hsr_slave_1: entered promiscuous mode [ 444.995955][ T9863] debugfs: 'hsr0' already exists in 'hsr' [ 444.995980][ T9863] Cannot create hsr debugfs directory [ 446.719520][T10163] bond1: option mode: unable to set because the bond device has slaves [ 446.839345][T10176] Bluetooth: MGMT ver 1.23 [ 447.077792][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1183'. [ 447.249690][ T5805] Bluetooth: hci6: command 0x0406 tx timeout [ 447.249812][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 447.408616][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1186'. [ 447.544474][T10188] nbd: socks must be embedded in a SOCK_ITEM attr [ 447.604386][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1186'. [ 447.604415][T10199] nbd: nbd64 already in use [ 448.183725][ T9397] udevd[9397]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 448.553088][T10229] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 449.005313][T10229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.135731][T10240] bond1: (slave veth3): Enslaving as an active interface with a down link [ 449.143355][T10248] vlan2: entered allmulticast mode [ 449.143375][T10248] veth0_to_bond: entered allmulticast mode [ 449.144531][T10248] bond1: (slave vlan2): Opening slave failed [ 449.908902][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1200'. [ 449.958556][T10272] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1201'. [ 450.033119][ T9863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 450.125930][ T9863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 450.183280][ T9863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 450.306071][ T9863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 450.773989][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.823248][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.865461][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.865638][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.916510][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.916641][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.344059][T10316] syzkaller0: entered promiscuous mode [ 451.345340][T10316] syzkaller0: entered allmulticast mode [ 452.013480][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.275992][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1221'. [ 452.473417][ T9863] veth0_vlan: entered promiscuous mode [ 452.642160][ T9863] veth1_vlan: entered promiscuous mode [ 452.839267][ T9863] veth0_macvtap: entered promiscuous mode [ 452.845496][ T9863] veth1_macvtap: entered promiscuous mode [ 453.047367][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.107956][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.140754][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.141143][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.141197][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.141230][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.474546][T10372] comedi comedi4: comedi_config --init_data is deprecated [ 454.317814][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 454.317837][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 454.317861][T10393] netlink: 'syz.5.1230': attribute type 12 has an invalid length. [ 454.399771][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 454.399794][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 454.399819][T10393] netlink: 'syz.5.1230': attribute type 12 has an invalid length. [ 454.403072][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.403090][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.602630][ T6427] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.627906][ T6427] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.639869][ T6427] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.649996][ T6427] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.844436][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.844456][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.936032][T10407] netlink: 'syz.5.1234': attribute type 10 has an invalid length. [ 456.321741][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1239'. [ 456.793842][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1244'. [ 456.793866][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1244'. [ 456.793890][T10435] netlink: 'syz.9.1244': attribute type 12 has an invalid length. [ 456.810880][ T166] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.811126][ T166] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.811163][ T166] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.811196][ T166] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.811388][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1244'. [ 456.811405][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1244'. [ 456.811428][T10435] netlink: 'syz.9.1244': attribute type 12 has an invalid length. [ 458.143041][ T5802] Bluetooth: hci7: command 0x0406 tx timeout [ 458.477586][T10469] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1254'. [ 458.965508][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1260'. [ 459.996842][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1267'. [ 460.422875][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 460.423162][T10522] netlink: 'syz.6.1271': attribute type 1 has an invalid length. [ 460.478617][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1271'. [ 460.692145][T10522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.752952][T10526] vlan2: entered allmulticast mode [ 460.752973][T10526] bond2: entered allmulticast mode [ 461.787885][T10552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.832380][T10558] __nla_validate_parse: 1 callbacks suppressed [ 461.832395][T10558] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1283'. [ 462.018887][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 463.004467][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1294'. [ 463.537353][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1298'. [ 464.667780][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1308'. [ 467.696902][T10708] netlink: 'syz.6.1331': attribute type 1 has an invalid length. [ 467.877830][T10708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.238715][T10710] bond3: (slave veth9): Enslaving as an active interface with a down link [ 469.012247][T10727] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 469.012577][T10727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 469.134444][T10727] vhci_hcd vhci_hcd.0: Device attached [ 469.225517][T10738] vhci_hcd: connection closed [ 469.226737][ T12] vhci_hcd vhci_hcd.9: stop threads [ 469.226753][ T12] vhci_hcd vhci_hcd.9: release socket [ 469.226775][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 469.414111][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'. [ 469.509135][T10749] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 469.629904][T10750] vlan2: entered allmulticast mode [ 469.629920][T10750] macvlan0: entered allmulticast mode [ 469.629928][T10750] veth1_vlan: entered allmulticast mode [ 471.300910][T10792] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 471.342792][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1354'. [ 472.386437][T10819] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 472.386454][T10819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 472.386532][T10819] vhci_hcd vhci_hcd.0: Device attached [ 472.564537][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 472.564558][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 472.564582][T10829] netlink: 'syz.1.1362': attribute type 12 has an invalid length. [ 472.599771][ T9166] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 472.639048][T10835] netlink: 'syz.8.1364': attribute type 11 has an invalid length. [ 472.639068][T10835] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1364'. [ 472.659536][ T9166] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 472.659716][T10825] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 472.666203][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 472.666221][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 472.671916][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1364'. [ 472.672885][ T1262] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.673100][ T1262] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.673149][ T1262] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.673191][ T1262] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.673271][T10824] vhci_hcd: connection closed [ 472.676634][ T36] IPVS: starting estimator thread 0... [ 472.677008][ T95] vhci_hcd vhci_hcd.9: stop threads [ 472.677027][ T95] vhci_hcd vhci_hcd.9: release socket [ 472.677100][ T95] vhci_hcd vhci_hcd.9: disconnect device [ 472.695060][T10829] netlink: 'syz.1.1362': attribute type 12 has an invalid length. [ 472.779686][T10837] IPVS: using max 9 ests per chain, 21600 per kthread [ 474.996429][T10902] netlink: 'syz.5.1383': attribute type 4 has an invalid length. [ 475.040655][T10902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 475.133555][T10909] netlink: 'syz.5.1383': attribute type 10 has an invalid length. [ 475.197958][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.197973][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.232482][T10905] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006e: 0000 [#1] SMP KASAN PTI [ 475.232507][T10905] KASAN: null-ptr-deref in range [0x0000000000000370-0x0000000000000377] [ 475.232535][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.5.1383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 475.232557][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.232569][T10905] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 475.232601][T10905] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 10 f5 fc 08 cc 66 66 66 66 66 66 2e [ 475.232620][T10905] RSP: 0018:ffffc90004b378a8 EFLAGS: 00010202 [ 475.232642][T10905] RAX: dffffc0000000000 RBX: ffffffff8b25f97a RCX: 0000000080000001 [ 475.232657][T10905] RDX: 0000000000000000 RSI: ffffffff8b25f97a RDI: 000000000000006e [ 475.232671][T10905] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 475.232683][T10905] R10: dffffc0000000000 R11: ffffed1003ff63d6 R12: 0000000000000000 [ 475.232695][T10905] R13: 0000000000000370 R14: 0000000000000370 R15: 0000000000000001 [ 475.232707][T10905] FS: 00007fce95df46c0(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 475.232727][T10905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.232740][T10905] CR2: 0000000000000000 CR3: 0000000064e30000 CR4: 00000000003526f0 [ 475.232759][T10905] Call Trace: [ 475.232770][T10905] [ 475.232778][T10905] __kasan_check_byte+0x12/0x40 [ 475.232798][T10905] lock_acquire+0x79/0x2e0 [ 475.232816][T10905] ? l2cap_unregister_user+0x36/0x170 [ 475.232839][T10905] ? l2cap_unregister_user+0x36/0x170 [ 475.232856][T10905] mutex_lock_nested+0x5a/0x1d0 [ 475.232882][T10905] ? l2cap_unregister_user+0x36/0x170 [ 475.232899][T10905] ? hidp_session_find+0xce/0x100 [ 475.232922][T10905] l2cap_unregister_user+0x36/0x170 [ 475.232940][T10905] hidp_connection_del+0xb0/0x170 [ 475.232958][T10905] hidp_sock_ioctl+0x3ab/0x650 [ 475.232977][T10905] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 475.233011][T10905] ? do_vfs_ioctl+0x117b/0x1540 [ 475.233031][T10905] sock_do_ioctl+0x101/0x320 [ 475.233053][T10905] ? __pfx_sock_do_ioctl+0x10/0x10 [ 475.233076][T10905] ? smack_file_ioctl+0x263/0x360 [ 475.233102][T10905] sock_ioctl+0x5c9/0x7f0 [ 475.233121][T10905] ? __pfx_sock_ioctl+0x10/0x10 [ 475.233140][T10905] ? __fget_files+0x2a/0x420 [ 475.233165][T10905] ? __fget_files+0x3a6/0x420 [ 475.233184][T10905] ? __fget_files+0x2a/0x420 [ 475.233204][T10905] ? bpf_lsm_file_ioctl+0x9/0x20 [ 475.233220][T10905] ? __pfx_sock_ioctl+0x10/0x10 [ 475.233240][T10905] __se_sys_ioctl+0xff/0x170 [ 475.233256][T10905] do_syscall_64+0x14d/0xf80 [ 475.233273][T10905] ? trace_irq_disable+0x3b/0x150 [ 475.233291][T10905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.233307][T10905] ? clear_bhb_loop+0x40/0x90 [ 475.233324][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.233340][T10905] RIP: 0033:0x7fce97bdc819 [ 475.233353][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.233367][T10905] RSP: 002b:00007fce95df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.233383][T10905] RAX: ffffffffffffffda RBX: 00007fce97e56180 RCX: 00007fce97bdc819 [ 475.233395][T10905] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000009 [ 475.233406][T10905] RBP: 00007fce97c72c91 R08: 0000000000000000 R09: 0000000000000000 [ 475.233416][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.233425][T10905] R13: 00007fce97e56218 R14: 00007fce97e56180 R15: 00007ffc330fe538 [ 475.233443][T10905] [ 475.233452][T10905] Modules linked in: [ 475.233483][T10905] ---[ end trace 0000000000000000 ]--- [ 475.236032][T10905] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 475.236064][T10905] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 10 f5 fc 08 cc 66 66 66 66 66 66 2e [ 475.236082][T10905] RSP: 0018:ffffc90004b378a8 EFLAGS: 00010202 [ 475.236100][T10905] RAX: dffffc0000000000 RBX: ffffffff8b25f97a RCX: 0000000080000001 [ 475.236115][T10905] RDX: 0000000000000000 RSI: ffffffff8b25f97a RDI: 000000000000006e [ 475.236128][T10905] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 475.236140][T10905] R10: dffffc0000000000 R11: ffffed1003ff63d6 R12: 0000000000000000 [ 475.236162][T10905] R13: 0000000000000370 R14: 0000000000000370 R15: 0000000000000001 [ 475.236175][T10905] FS: 00007fce95df46c0(0000) GS:ffff888126336000(0000) knlGS:0000000000000000 [ 475.236191][T10905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.236204][T10905] CR2: 00007fadbe964020 CR3: 0000000064e30000 CR4: 00000000003526f0 [ 475.236230][T10905] Kernel panic - not syncing: Fatal exception [ 475.236566][T10905] Kernel Offset: disabled