last executing test programs: 13m56.172683196s ago: executing program 5 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 13m53.210027318s ago: executing program 5 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x2000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2ef, 0xff, 0x8002, 0x1, 0x6, 0x7f, 0x8, 0x9}, &(0x7f0000000140)=0x20) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4811}, 0x40884) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 13m50.11930136s ago: executing program 5 (id=29): epoll_create1(0x80000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 13m49.407511583s ago: executing program 5 (id=35): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884) 13m48.730817662s ago: executing program 5 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 13m47.50769472s ago: executing program 5 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800004, &(0x7f0000000180), 0x3, 0x7c1, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x3d) 13m31.546693632s ago: executing program 32 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800004, &(0x7f0000000180), 0x3, 0x7c1, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x3d) 11m18.251780997s ago: executing program 1 (id=567): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) 11m18.02091839s ago: executing program 1 (id=570): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000512800b000100672365746170000024000280fa00040000120000060011004e20000006000f00e80000000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000e8ffffffffff0b0000004800058008000100"], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400010026bd7040fcdbdf250401"], 0x14}, 0x1, 0x300, 0x0, 0x4000d}, 0x20000000) 11m16.821060717s ago: executing program 1 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe9b}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}, 0x1, 0x0, 0x0, 0x8a885}, 0x0) 11m16.555173952s ago: executing program 1 (id=579): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 11m14.534814605s ago: executing program 1 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f00000004c0), 0x2248, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 11m13.840064885s ago: executing program 1 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 11m9.057812266s ago: executing program 4 (id=607): unshare(0x2c020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000080)=0x28) 11m8.781665859s ago: executing program 4 (id=609): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r2, 0x3) sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5efffe0000000000", 0x40b}], 0x1) 11m7.720092049s ago: executing program 4 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0x1, 0x28c9, 0x0, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xffffff23, &(0x7f0000000200)}, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12123, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4800) 11m4.202913244s ago: executing program 4 (id=622): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 11m3.824712315s ago: executing program 4 (id=625): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) 11m3.551596164s ago: executing program 4 (id=628): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0xc, r2, 0x0, 0x0, 0x9, 0xfffffffffdffffff}) 10m58.667930136s ago: executing program 33 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 10m48.068496978s ago: executing program 34 (id=628): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x50a, &(0x7f00000018c0)="$eJzs3c1vVF0ZAPDnTju0lEKLslATAyqKhjD9ABrCxrLRGEJiJK5cQG2HpukM03RKpJVFWbonkcSV/gnuXJiwcuHOne7c4MIElfiGvsm7mDf3zqUd+jnQj0k7v19ye+85d7jPOTOcc+YeuD0BdK1LEbEaEaci4mFEDOX5Sb7FZHNLX/fu7bPptbfPppNoNO7/N8nOp3nR8mdSZ/Jr9kfEz34c8ctka9z68sr8VKVSXszTI0vVhZH68sq1uUKeMz4xNjF66/rN8QOr68XqH9/8aO7uz//8p2++/tvqD36dFmvwN2ezc631OEjNqhdjsCWvNyLuHkawDunN//5w/KSt7SsR8e2s/Q9FT/ZpAgAnWaMxFI2h1jQAcNKl9/+DkRRK+VzAYBQKpVJzDu9CDBQqtfrS1aHak8czkc1hDUex8GiuUh7N5wqHo5ik6bHseCM9/kH6Rfl6RJyPiBd9p7PzpelaZaaTX3wAoIud2TT+f9bXHP8BgBOuv9MFAACOnPEfALqP8R8Aus9HjP+eDgSAE8L9PwB0H+M/AHSfPcf/50dTDgDgSPz03r10a6w1f//1+9/UfW2mXJ8vVZ9Ml6Zriwul2VpttlIuTTcae12vUqstjN1YT9aXVx5Ua08eLz2Yq07Nlh+Ui4dZGQCgLecvvvpHOuiv3j6dbdGyloOxGk62QqcLAHRMT6cLAHSM53mge7Vxj28aAE64bZbo/cCO/0XopcVf4bi68nXz/9Ct9jP/b+4AjrdPm///4YGXAzh6xnDoXo1GYs1/AOgy5viBj/73/zv5/uXhlAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOg8FsSwqlbC3w1fRnoVSKOBsRw1FMHs1VyqMRcS4i/t5X7EvTY50uNACwT4V/J/n6X1eGLg9uPnsq+bwv20fEr353/7dPp5aWFsfS/P/1Teb5Sy/z/PFTHakBANBicmtWc5zO9y038u/ePpt+vx1lEd/caS4umsZdy7fmmd7ozfb9UYyIgf8nebop/b7ScwDxV59HxNc26v+0JcJgNgfSXPl0c/w09tlDiL/x/m+OX/ggfiE7l+6L2Xvx1QMoC3SbV3ea/WTe9tImlre/QlzK9tu3//6sh9q/tP9L+5K1Lf1fYb3/69kSP8na/KX19O4leXPjLz/ZktkYap57HvGN3u3iJ+vxk+373+LlNuv4z1066sbvI65sW//3K1JXs252ZKm6MFJfXrk2V52aLc+WH4+PT4xNjN66fnN8JJujbv7863Yx/nP76rmd4qf1H9ghfv/u9Y/vtln/P3zx8Bff2iX+97+z/ed/YZf46Zj4vTbjTw1Mblm+uzX+zA713+Pzj6ttxn/9r5WZNl8KAByB+vLK/FSlUl7c4yD9rrnXaxwc3cHpiDioC8ZqxEEVLJuUiIj9XCeJjr+9Diqd7pmAw7bR6DtdEgAAAAAAAAAAAAAAYCf15ZX5vk9+WiuG23kKrdN1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT6MgAA//9Mj8T8") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0xc, r2, 0x0, 0x0, 0x9, 0xfffffffffdffffff}) 9.606364885s ago: executing program 2 (id=3966): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000000000)=""/161, 0xa1}, {&(0x7f0000001b00)=""/227, 0xe3}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001f40)=""/260, 0x104}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001a80)=""/85, 0x55}, {&(0x7f00000000c0)=""/82, 0x52}], 0xa}, 0x7f}], 0x4, 0x0, 0x0) 9.208324301s ago: executing program 2 (id=3972): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x90) 8.816784522s ago: executing program 7 (id=3974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) 7.960627985s ago: executing program 7 (id=3978): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0x6, 0x3, 0x7, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x6}, 0x11, 0x0, 0x4}]}, 0x38}}, 0x200000d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000512800b000100672365746170000024000280fa00040000120000060011004e20000006000f00e80000000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400010026bd7040fcdbdf250401"], 0x14}, 0x1, 0x300, 0x0, 0x4000d}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000280), 0x0}, 0x20) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r10 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf12}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8b, &(0x7f0000000340)=""/139, 0x0, 0x4}, 0x94) 7.949500574s ago: executing program 3 (id=3979): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x12, 0x0}}], 0x1, 0x0, 0x0) 7.769234011s ago: executing program 3 (id=3980): socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f00000001c0)={0x3, 0xf3, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xa172, 0x1f280, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) 7.148340333s ago: executing program 0 (id=3981): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='source', 0x0, r1) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{0x0}], 0x1, 0x42, 0x116d) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$BLKCLOSEZONE(r3, 0x40101287, &(0x7f0000000100)={0x4fc, 0x2}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',gr', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x3, 0x2, 0x7, 0x8, 0x0, 0xc, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, r8, 0x0, 0x501, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000002c0)=0x1) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) 7.083590188s ago: executing program 6 (id=3982): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294", 0x31}, {&(0x7f0000000900)}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.64959183s ago: executing program 3 (id=3984): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) setitimer(0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x10, 0x4, 0x7e, 0xbdc0, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff8, 0x0, 0x85, 0x1000000004, 0x0, 0x0, 0x7fff, 0xfffffffffffffffd}) 6.599563237s ago: executing program 8 (id=3985): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYBLOB="0000000002000000b7050000080000008500000046000000"], &(0x7f0000000300)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001000038062f811caed441d87500c0000800800034000000002140000001100010000000020e715e13958162d83fd629bd184e4930045e29f3bffa279d41c61394589d9f97f655af633db29fcc26507bc4bae55584c6fb8ca31ea255f9fef0300000000000000d6d08d969841a0c2be4a34ac86b578183ab85508c6944282be169e74b850996b4319976628a81ed0a0da754d8694b758fbf386a0b437219e4b6a8bb9e63b3aba194bc0f74e86b38515f28b6076a73608884523877e518fbb0c2a5d6cd00997b567253ea1ec0f18b01e232a2cc6e5f4199d8247eb29"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket(0x1d, 0x7ec818d15ab2a37, 0x5) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="cd3c000000000200000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebed8d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e430812ccc8c7f46462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d400000800"], 0xec}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x6, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000102b00fc020000000000000000000000000000fe8000000000000000000000000000aa67000000000000002110000000089078bd6ace3b28b826c74ee3ffc5894142f238879323c2d16bf83749a4bc25f67a05ec4e2ec9b7ef89af3d0100cab42dc6441d24bb5f1933ce03192900a5074f748fec8bbc01678f56cdcadb041b000b156a619e12a85a4e9b71d296c0727fe092edc34a9d1e05849b25b670497e518b77b79a373518f8e501000617b90cc041b505ca59cd3f091f63269d6dc8a92ca667747bdd1042d26d2eec00acc09fba87af20b311141ed918d8e06eb2a44456d720"], 0x0) write(r5, &(0x7f0000000000)="05000000010001", 0x7) 6.551552601s ago: executing program 0 (id=3986): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 6.419888949s ago: executing program 2 (id=3987): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x2d, 0x40, &(0x7f0000000900)={0x11, 0x18, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffff6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) socket(0x2, 0x805, 0x0) 6.393899137s ago: executing program 7 (id=3988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0x8}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6.379968264s ago: executing program 6 (id=3989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf20}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 6.29202773s ago: executing program 8 (id=3990): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x2000c884}], 0x1, 0x48001) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0x8d, &(0x7f0000000000)={&(0x7f0000000280)={'sha256\x00'}}) 6.22908697s ago: executing program 0 (id=3991): syz_clone3(0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) read$midi(0xffffffffffffffff, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, 0x0, 0x84000, 0x0) 5.170936455s ago: executing program 6 (id=3992): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c0000000000105050000000000000000020000002400028014"], 0xc0}, 0x1, 0x0, 0x0, 0x240c8011}, 0x40) 5.052050485s ago: executing program 7 (id=3993): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.740280145s ago: executing program 2 (id=3994): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) 4.738096648s ago: executing program 3 (id=3995): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x101001, 0x391) write$tun(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.110668889s ago: executing program 6 (id=3996): socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f00000001c0)={0x3, 0xf3, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) 3.060874533s ago: executing program 8 (id=3997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x3447504d, 0x4, 0x7, 0x9, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}) 3.060495282s ago: executing program 0 (id=3998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x8000) 2.494341366s ago: executing program 2 (id=3999): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x90) 2.222281324s ago: executing program 7 (id=4000): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3e}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xa, 0x6, 0x3, 0x7, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x6}, 0x11, 0x0, 0x4}]}, 0x38}}, 0x200000d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000512800b000100672365746170000024000280fa00040000120000060011004e20000006000f00e80000000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r1, 0x0, 0x0, 0x80800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400010026bd7040fcdbdf250401"], 0x14}, 0x1, 0x300, 0x0, 0x4000d}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r9, &(0x7f0000000280), 0x0}, 0x20) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r10 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf12}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8b, &(0x7f0000000340)=""/139, 0x0, 0x4}, 0x94) 2.070619223s ago: executing program 3 (id=4001): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) socket$l2tp6(0xa, 0x2, 0x73) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.884050707s ago: executing program 6 (id=4002): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000002000000b705000008000000850000004600000095"], &(0x7f0000000300)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket(0x1d, 0x7ec818d15ab2a37, 0x5) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="cd3c000000000200000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebed8d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e430812ccc8c7f46462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d400000800"], 0xec}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_MODE={0x6, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000102b00fc020000000000000000000000000000fe8000000000000000000000000000aa67000000000000002110000000089078bd6ace3b28b826c74ee3ffc5894142f238879323c2d16bf83749a4bc25f67a05ec4e2ec9b7ef89af3d0100cab42dc6441d24bb5f1933ce03192900a5074f748fec8bbc01678f56cdcadb041b000b156a619e12a85a4e9b71d296c0727fe092edc34a9d1e05849b25b670497e518b77b79a373518f8e501000617b90cc041b505ca59cd3f091f63269d6dc8a92ca667747bdd1042d26d2eec00acc09fba87af20b311141ed918d8e06eb2a44456d720"], 0x0) write(r5, &(0x7f0000000000)="05000000010001", 0x7) 1.847424804s ago: executing program 8 (id=4003): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294", 0x31}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$kcm(0x10, 0x2, 0x10) 1.738507387s ago: executing program 0 (id=4004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) 1.504222112s ago: executing program 8 (id=4005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf20}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.470944814s ago: executing program 3 (id=4006): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004366b408c70b0800"], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 1.310172896s ago: executing program 6 (id=4007): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x2d, 0x40, &(0x7f0000000900)={0x11, 0x18, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffff6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) socket(0x2, 0x805, 0x0) 624.489579ms ago: executing program 0 (id=4008): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r3, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04083520b5"], 0x7) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x40, 0xd, 0xce, {0xce, 0xb, "d2b139cb55f8240631761ca7a056870d4d22d7b92ecbd2c02f5aaaee4e331ad18b9e1954e984b82f6764da62b3a056e7e878dd985ad25db61876b85cfc1e38fbbc234ed47cc6e2fb316206e53b80ccac93bcbf3e69eefa7a47f2ff3135d5ae8e8cf22adf2c0d712e8d533452b76a052b3ba12245e4d62b3064fe9b043cdcb74b5181942cc2b30d9862d9a2be5eee3c827b91360654d892d7a7db711af3815b31348aa76cfbdac93c84317c6b638b553259a603c8f8ecad7f94d9d93ff6a85b91a7683ad3438eda217376df73"}}, &(0x7f0000000100)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "d6fe679492c71993de0fa00930172c2a5ffc60268a1feb440b6343eeb782dcd5373f9a2f167bf05ba5e3e430ca1a64669df0c9679a19129e6c745c37920eaa50928968ec21000ea48d33024eceaad21cfccc8a3ad6c1aff57a19dde627ba7ba95ee28ae34af11f7b878d7edc27feed1403e7ac9082ff8aab037b1f5b71717ae675a3657043ef88f66b0fd86b0be3a56a183a6327dde0f70d86"}}, &(0x7f00000001c0)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x2, 0x2, 0x1, "bc94"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x9ae}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0x1, 0xb6, "15b52a3f02ca628c83bfbff3c0e58c03298e784ed1dcc79ee87c917fa8a3bcb033158491ee4808e53a6eb59bdf3d58f882ec430e62f8d1a35c2cea82c6c680e7abfa363ac25391d50b2c2c38a94ae1a6836b610360a2403a94620db4ec7773b44e236b2035c3883081c35198c38938af23282835fb475748493aa141076bf3b3f75107934a93b3ae7e5b2f8f1230c9223742e0494e1ece703cb61e451ed13f32d30ce1f1a4061d0b22732288d2c356745975574016d9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000480), &(0x7f0000000540)={0x20, 0x3, 0x1, 0xf}}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 366.646866ms ago: executing program 8 (id=4009): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000000000010505000000000000000002000000240002801400018008000100ac1e01010800"], 0xc0}, 0x1, 0x0, 0x0, 0x240c8011}, 0x40) 321.530291ms ago: executing program 7 (id=4010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x0) 0s ago: executing program 2 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.2.2113'. [ 562.039438][T12258] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 562.046981][T12264] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 562.211490][T12264] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 562.224554][T12264] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 562.243386][T12264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.266922][T12264] usb 1-1: config 0 has no interface number 0 [ 562.276269][T12264] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.296557][T12264] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 562.308034][T12264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.343957][T12264] usb 1-1: config 0 descriptor?? [ 562.448474][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2118'. [ 562.601841][T13364] vhci_hcd: cannot find a urb of seqnum 4043604232 max seqnum 6 [ 562.614562][ T5758] usb 1-1: USB disconnect, device number 10 [ 562.645923][ T3370] vhci_hcd vhci_hcd.0: stop threads [ 562.651253][ T3370] vhci_hcd vhci_hcd.0: release socket [ 562.681952][ T3370] vhci_hcd vhci_hcd.0: disconnect device [ 563.237425][T13401] syzkaller0: entered promiscuous mode [ 563.263532][T13401] syzkaller0: entered allmulticast mode [ 563.719042][T13422] netlink: 'syz.8.2130': attribute type 25 has an invalid length. [ 564.061045][T13430] loop7: detected capacity change from 0 to 512 [ 564.151840][T13430] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2132: bad orphan inode 13 [ 564.169442][T13430] loop7: lost filesystem error report for type 5 error -117 [ 564.178048][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 564.194134][ C0] EXT4-fs (loop7): initial error at time 2000000430: ext4_orphan_get:1423 [ 564.202822][ C0] EXT4-fs (loop7): last error at time 2000000430: ext4_orphan_get:1423 [ 564.244572][T13430] ext4_test_bit(bit=12, block=4) = 1 [ 564.276574][T13430] is_bad_inode(inode)=0 [ 564.280813][T13430] NEXT_ORPHAN(inode)=0 [ 564.317117][T13430] max_ino=32 [ 564.322444][T13430] i_nlink=1 [ 564.330178][T13430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.441545][ T8231] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.089992][T13452] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2136'. [ 565.863802][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.872316][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.786047][T13464] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 566.792644][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 566.855484][T13464] vhci_hcd vhci_hcd.0: Device attached [ 567.099749][ T5758] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 567.129099][T12258] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 567.264384][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2147'. [ 567.290885][ T5839] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 567.425278][T13478] loop2: detected capacity change from 0 to 512 [ 567.454872][T13480] syzkaller0: entered promiscuous mode [ 567.475443][T13480] syzkaller0: entered allmulticast mode [ 567.505751][ T5839] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 567.550656][T13478] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2146: bad orphan inode 13 [ 567.552645][T13484] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2149'. [ 567.571478][ T5839] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 567.647285][ T5839] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.667094][T13478] loop2: lost filesystem error report for type 5 error -117 [ 567.670475][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 567.685526][ C0] EXT4-fs (loop2): initial error at time 2000000433: ext4_orphan_get:1423 [ 567.696563][ C0] EXT4-fs (loop2): last error at time 2000000433: ext4_orphan_get:1423 [ 567.708735][T13478] ext4_test_bit(bit=12, block=4) = 1 [ 567.714067][T13478] is_bad_inode(inode)=0 [ 567.720367][ T5839] usb 7-1: config 0 has no interface number 0 [ 567.726537][ T5839] usb 7-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.744467][T13478] NEXT_ORPHAN(inode)=0 [ 567.748636][T13478] max_ino=32 [ 567.751863][T13478] i_nlink=1 [ 567.758345][ T5839] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 567.776078][T13478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.795883][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.838050][ T5839] usb 7-1: config 0 descriptor?? [ 567.937680][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.001951][T13489] syzkaller0: entered promiscuous mode [ 568.010374][T13489] syzkaller0: entered allmulticast mode [ 568.119442][T12264] usb 7-1: USB disconnect, device number 4 [ 568.121117][T13465] vhci_hcd: cannot find a urb of seqnum 4043604232 max seqnum 2 [ 568.138779][ T1093] vhci_hcd vhci_hcd.6: stop threads [ 568.157496][ T1093] vhci_hcd vhci_hcd.6: release socket [ 568.195278][ T1093] vhci_hcd vhci_hcd.6: disconnect device [ 572.249377][ T5758] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 572.603791][T13554] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2167'. [ 572.713916][T13554] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2167'. [ 573.289916][T13566] syzkaller0: entered promiscuous mode [ 573.315363][T13566] syzkaller0: entered allmulticast mode [ 573.502660][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2177'. [ 573.546529][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2177'. [ 573.584606][T13586] loop6: detected capacity change from 0 to 256 [ 573.627291][T13586] msdos: Bad value for 'uid' [ 573.649137][T13586] msdos: Bad value for 'uid' [ 573.716887][T13586] loop6: detected capacity change from 0 to 16 [ 573.759440][T13586] erofs (device loop6): mounted with root inode @ nid 36. [ 573.812735][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 575.971587][T13580] syzkaller0: entered promiscuous mode [ 575.977297][T13580] syzkaller0: entered allmulticast mode [ 577.737574][T13635] loop2: detected capacity change from 0 to 256 [ 577.784042][T13635] msdos: Bad value for 'uid' [ 577.798115][T13635] msdos: Bad value for 'uid' [ 577.935765][T13635] loop2: detected capacity change from 0 to 16 [ 577.992853][T13635] erofs (device loop2): mounted with root inode @ nid 36. [ 578.031634][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 578.764568][T13661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 578.771172][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.792515][T13661] vhci_hcd vhci_hcd.0: Device attached [ 579.078684][T12264] usb 33-1: new low-speed USB device number 9 using vhci_hcd [ 579.116566][ T5758] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 579.404177][ T5758] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 579.412526][ T5758] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 579.471213][ T5758] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.506860][ T5758] usb 1-1: config 0 has no interface number 0 [ 579.521570][ T5758] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.609902][ T5758] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 579.631898][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.689136][ T5758] usb 1-1: config 0 descriptor?? [ 579.975167][T13662] vhci_hcd: cannot find a urb of seqnum 33032 max seqnum 7 [ 579.998180][ T5758] usb 1-1: USB disconnect, device number 11 [ 580.014691][ T5920] vhci_hcd vhci_hcd.0: stop threads [ 580.034583][ T5920] vhci_hcd vhci_hcd.0: release socket [ 580.050882][ T5920] vhci_hcd vhci_hcd.0: disconnect device [ 580.071372][T13694] loop7: detected capacity change from 0 to 256 [ 580.097678][T13694] msdos: Bad value for 'uid' [ 580.124436][T13694] msdos: Bad value for 'uid' [ 580.247471][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2217'. [ 581.701847][T13733] loop7: detected capacity change from 0 to 256 [ 581.757295][T13733] msdos: Bad value for 'uid' [ 581.762119][T13733] msdos: Bad value for 'uid' [ 581.923944][T13733] loop7: detected capacity change from 0 to 16 [ 582.006194][T13733] erofs (device loop7): mounted with root inode @ nid 36. [ 582.038018][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2233'. [ 583.116673][T13764] syzkaller0: entered promiscuous mode [ 583.159002][T13764] syzkaller0: entered allmulticast mode [ 583.413821][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2249'. [ 583.759489][T13792] loop6: detected capacity change from 0 to 256 [ 583.830704][T13792] msdos: Bad value for 'uid' [ 583.896014][T13792] msdos: Bad value for 'uid' [ 584.092310][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2254'. [ 584.249241][T12264] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 585.653811][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 586.150881][T13841] loop2: detected capacity change from 0 to 256 [ 586.173110][T13836] Unknown metaid 0 dlen 28 [ 586.181293][T13841] msdos: Bad value for 'uid' [ 586.215069][T13841] msdos: Bad value for 'uid' [ 586.350046][T13841] loop2: detected capacity change from 0 to 16 [ 586.393335][T13841] erofs (device loop2): mounted with root inode @ nid 36. [ 586.418688][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 587.306201][T13866] tipc: Enabled bearer , priority 0 [ 587.362671][T13866] tipc: Resetting bearer [ 587.485684][T13864] tipc: Disabling bearer [ 587.497559][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 587.924637][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2293'. [ 587.976784][T13890] loop7: detected capacity change from 0 to 256 [ 588.009538][T13890] msdos: Bad value for 'uid' [ 588.023704][T13890] msdos: Bad value for 'uid' [ 588.080846][T13890] loop7: detected capacity change from 0 to 16 [ 588.115687][T13890] erofs (device loop7): mounted with root inode @ nid 36. [ 588.171757][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 588.893059][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2302'. [ 588.991290][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2305'. [ 589.026398][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 589.169892][T13919] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 589.176498][T13919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 589.242448][T13919] vhci_hcd vhci_hcd.0: Device attached [ 589.331840][T13922] tipc: Enabled bearer , priority 0 [ 589.388055][T13922] tipc: Resetting bearer [ 589.508638][T12258] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 589.541224][T13917] tipc: Disabling bearer [ 589.578898][ T29] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 589.618000][T13937] loop6: detected capacity change from 0 to 256 [ 589.637321][T13937] msdos: Bad value for 'uid' [ 589.648737][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 589.659107][T13937] msdos: Bad value for 'uid' [ 589.709278][T13937] loop6: detected capacity change from 0 to 16 [ 589.771914][ T29] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 589.795114][ T29] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 589.809326][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.819849][T13937] erofs (device loop6): mounted with root inode @ nid 36. [ 589.837442][ T29] usb 8-1: config 0 has no interface number 0 [ 589.856400][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2312'. [ 589.891822][ T29] usb 8-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.940382][ T29] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 589.982519][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.031075][ T29] usb 8-1: config 0 descriptor?? [ 590.277155][T13920] vhci_hcd: cannot find a urb of seqnum 33032 max seqnum 3 [ 590.300815][ T29] usb 8-1: USB disconnect, device number 4 [ 590.332821][ T48] vhci_hcd vhci_hcd.7: stop threads [ 590.341072][ T48] vhci_hcd vhci_hcd.7: release socket [ 590.350950][ T48] vhci_hcd vhci_hcd.7: disconnect device [ 590.494270][T13952] lo speed is unknown, defaulting to 1000 [ 590.587593][T13952] lo speed is unknown, defaulting to 1000 [ 590.627027][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2321'. [ 590.654771][T13952] lo speed is unknown, defaulting to 1000 [ 591.142397][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2324'. [ 592.919741][T14006] loop3: detected capacity change from 0 to 256 [ 592.962236][T14006] msdos: Bad value for 'uid' [ 592.983717][T14006] msdos: Bad value for 'uid' [ 593.123778][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 593.293993][T13952] infiniband syz0: set down [ 593.299006][T13952] infiniband syz0: added lo [ 593.356594][T13952] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 593.379452][T13952] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 593.399971][T13952] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 593.504593][T13952] RDS/IB: syz0: added [ 593.508848][T13952] smc: adding ib device syz0 with port count 1 [ 593.515370][T13952] smc: ib device syz0 port 1 has no pnetid [ 594.673991][T12258] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 595.127360][T13985] tipc: Enabling of bearer rejected, failed to enable media [ 595.148769][T12264] lo speed is unknown, defaulting to 1000 [ 595.164116][ T29] lo speed is unknown, defaulting to 1000 [ 595.181812][T13952] lo speed is unknown, defaulting to 1000 [ 595.911358][T14033] xt_hashlimit: size too large, truncated to 1048576 [ 596.447097][T13952] lo speed is unknown, defaulting to 1000 [ 596.656105][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 596.924475][T13952] lo speed is unknown, defaulting to 1000 [ 597.393135][T13952] lo speed is unknown, defaulting to 1000 [ 597.708958][T13952] lo speed is unknown, defaulting to 1000 [ 597.775400][T14059] loop7: detected capacity change from 0 to 256 [ 597.791945][T14059] msdos: Bad value for 'uid' [ 597.798348][T14059] msdos: Bad value for 'uid' [ 597.831353][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 598.051196][T13952] lo speed is unknown, defaulting to 1000 [ 598.516772][T14018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.972237][T14072] tipc: Enabled bearer , priority 0 [ 599.097509][T14070] tipc: Resetting bearer [ 599.241010][T14069] tipc: Disabling bearer [ 599.447412][T14088] lo: entered promiscuous mode [ 599.459761][T14088] tunl0: entered promiscuous mode [ 599.472687][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2355'. [ 599.475303][T14088] gre0: entered promiscuous mode [ 599.536071][T14088] gretap0: entered promiscuous mode [ 599.578305][T14088] erspan0: entered promiscuous mode [ 599.617652][T14088] ip_vti0: entered promiscuous mode [ 599.653419][T14088] ip6_vti0: entered promiscuous mode [ 599.685691][T14088] sit0: entered promiscuous mode [ 599.720001][T14088] ip6tnl0: entered promiscuous mode [ 599.725267][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2360'. [ 599.756995][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 599.770621][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 599.784292][T14088] ip6gre0: entered promiscuous mode [ 599.817503][T14088] syz_tun: entered promiscuous mode [ 599.823208][T14088] ip6gretap0: entered promiscuous mode [ 599.839199][T14088] bridge0: entered promiscuous mode [ 599.850358][T14088] vcan0: entered promiscuous mode [ 599.855671][T14088] bond0: entered promiscuous mode [ 599.879180][T14105] loop7: detected capacity change from 0 to 256 [ 599.900577][T14088] bond_slave_0: entered promiscuous mode [ 599.919009][T14088] bond_slave_1: entered promiscuous mode [ 599.920478][T14105] msdos: Bad value for 'uid' [ 599.935808][T14088] team0: entered promiscuous mode [ 599.946081][T14088] team_slave_0: entered promiscuous mode [ 599.956702][T14088] team_slave_1: entered promiscuous mode [ 599.958234][T14105] msdos: Bad value for 'uid' [ 599.962825][T14088] dummy0: entered promiscuous mode [ 599.963090][T14088] nlmon0: entered promiscuous mode [ 599.963297][T14088] batadv0: entered promiscuous mode [ 599.998916][T14088] veth0: entered promiscuous mode [ 600.007926][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'. [ 600.017478][T14088] veth1: entered promiscuous mode [ 600.030054][T14088] wg0: entered promiscuous mode [ 600.037066][T14088] wg1: entered promiscuous mode [ 600.043422][T14088] wg2: entered promiscuous mode [ 600.048568][T14088] veth0_to_bridge: entered promiscuous mode [ 600.059972][T14088] veth1_to_bridge: entered promiscuous mode [ 600.069793][T14088] veth0_to_bond: entered promiscuous mode [ 600.075986][T14088] veth1_to_bond: entered promiscuous mode [ 600.085682][T14088] veth0_to_team: entered promiscuous mode [ 600.091839][T14088] veth1_to_team: entered promiscuous mode [ 600.102375][T14088] veth0_to_batadv: entered promiscuous mode [ 600.109075][T14088] batadv_slave_0: entered promiscuous mode [ 600.119058][T14088] veth1_to_batadv: entered promiscuous mode [ 600.125326][T14088] batadv_slave_1: entered promiscuous mode [ 600.135919][T14088] xfrm0: entered promiscuous mode [ 600.156446][T14088] veth0_to_hsr: entered promiscuous mode [ 600.164181][T14088] veth1_to_hsr: entered promiscuous mode [ 600.170226][T14088] hsr0: entered promiscuous mode [ 600.178284][T14088] veth1_virt_wifi: entered promiscuous mode [ 600.185097][T14088] veth0_virt_wifi: entered promiscuous mode [ 600.213627][T14088] virt_wifi0: entered promiscuous mode [ 600.221334][T14088] vlan0: entered promiscuous mode [ 600.226834][T14088] vlan1: entered promiscuous mode [ 600.234779][T14088] macvlan0: entered promiscuous mode [ 600.245688][T14088] macvlan1: entered promiscuous mode [ 600.251270][T14088] ipvlan0: entered promiscuous mode [ 600.304824][T14088] ipvlan1: entered promiscuous mode [ 600.312755][T14088] macvtap0: entered promiscuous mode [ 600.318291][T14088] macsec0: entered promiscuous mode [ 600.350016][T14088] geneve0: entered promiscuous mode [ 600.355522][T14088] geneve1: entered promiscuous mode [ 600.385985][T14088] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 600.393609][T14088] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 600.419541][T14088] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 600.430459][T14088] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 600.438149][T14088] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 600.448788][T14088] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 600.456528][T14088] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 600.472509][T14088] mac80211_hwsim hwsim19 wlan3: entered promiscuous mode [ 600.482709][T14088] mac80211_hwsim hwsim20 wlan4: entered promiscuous mode [ 600.495209][T14088] bond1: entered promiscuous mode [ 600.500734][T14088] mac80211_hwsim hwsim31 wlan5: entered promiscuous mode [ 600.511159][T14088] mac80211_hwsim hwsim33 wlan6: entered promiscuous mode [ 600.518453][T14088] bond2: entered promiscuous mode [ 600.527626][T14088] bond3: entered promiscuous mode [ 600.532862][T14088] bond4: entered promiscuous mode [ 600.541130][T14088] veth2: entered promiscuous mode [ 600.547135][T14088] veth3: entered promiscuous mode [ 600.565596][T14088] mac80211_hwsim hwsim38 wlan7: entered promiscuous mode [ 600.573074][T14088] ip6tnl1: entered promiscuous mode [ 600.582880][T14088] bond5: entered promiscuous mode [ 600.588229][T14088] mac80211_hwsim hwsim43 wlan8: entered promiscuous mode [ 600.600268][T14088] mac80211_hwsim hwsim45 wlan9: entered promiscuous mode [ 600.610838][T14088] mac80211_hwsim hwsim49 wlan10: entered promiscuous mode [ 600.618291][T14088] ip6erspan0: entered promiscuous mode [ 600.650334][T14104] netlink: 'syz.8.2360': attribute type 1 has an invalid length. [ 600.661060][T14106] netlink: 'syz.8.2360': attribute type 1 has an invalid length. [ 600.945401][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'. [ 604.076169][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 604.166067][T14153] syzkaller0: entered promiscuous mode [ 604.184160][T14153] syzkaller0: entered allmulticast mode [ 604.513750][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 605.389729][T14187] Unknown metaid 0 dlen 28 [ 605.483551][T14173] syzkaller0: entered promiscuous mode [ 605.496245][T14173] syzkaller0: entered allmulticast mode [ 605.509742][T14191] loop3: detected capacity change from 0 to 256 [ 605.523993][T14191] msdos: Bad value for 'uid' [ 605.556727][T14191] msdos: Bad value for 'uid' [ 605.573291][T14191] loop3: detected capacity change from 0 to 16 [ 605.610795][T14191] erofs (device loop3): mounted with root inode @ nid 36. [ 605.625315][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 605.982914][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2387'. [ 608.622649][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 608.788001][T14215] syzkaller0: entered promiscuous mode [ 608.831801][T14215] syzkaller0: entered allmulticast mode [ 609.087763][ T5935] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 609.367041][T14240] netlink: 'syz.6.2399': attribute type 12 has an invalid length. [ 609.392854][T14240] netlink: 'syz.6.2399': attribute type 29 has an invalid length. [ 609.435690][T14240] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2399'. [ 609.473270][T14240] netlink: 'syz.6.2399': attribute type 3 has an invalid length. [ 609.506418][T14240] netlink: 'syz.6.2399': attribute type 2 has an invalid length. [ 609.563641][T14240] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2399'. [ 610.363349][T14264] syzkaller0: entered promiscuous mode [ 610.369314][T14264] syzkaller0: entered allmulticast mode [ 611.886104][T14225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.270249][T14316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2419'. [ 615.367083][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2424'. [ 616.394695][T14359] syzkaller0: entered promiscuous mode [ 616.401079][T14359] syzkaller0: entered allmulticast mode [ 616.583507][T14366] syzkaller0: entered promiscuous mode [ 616.590287][T14366] syzkaller0: entered allmulticast mode [ 618.274510][T14328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.498059][T14419] syzkaller0: entered promiscuous mode [ 621.548271][T14419] syzkaller0: entered allmulticast mode [ 621.640975][T14423] syzkaller0: entered promiscuous mode [ 621.646555][T14423] syzkaller0: entered allmulticast mode [ 622.247708][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2454'. [ 623.778104][T14459] syzkaller0: entered promiscuous mode [ 623.787879][T14459] syzkaller0: entered allmulticast mode [ 624.308982][T14490] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2469'. [ 624.387462][T14492] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2469'. [ 627.256658][T14487] syzkaller0: entered promiscuous mode [ 627.262769][T14487] syzkaller0: entered allmulticast mode [ 627.301999][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.312106][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.874431][T14536] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2483'. [ 628.070836][T14536] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2483'. [ 628.334366][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'. [ 629.425278][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 629.430204][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2492'. [ 629.485504][T14560] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 629.515242][T14560] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 630.361915][T14572] syzkaller0: entered promiscuous mode [ 630.370885][T14572] syzkaller0: entered allmulticast mode [ 630.379120][T14586] syzkaller0: entered promiscuous mode [ 630.384761][T14586] syzkaller0: entered allmulticast mode [ 630.623985][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2502'. [ 630.668991][T14602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2503'. [ 630.754022][T14604] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2503'. [ 633.701674][T14629] loop0: detected capacity change from 0 to 256 [ 633.738884][T14629] msdos: Bad value for 'uid' [ 633.745615][T14629] msdos: Bad value for 'uid' [ 633.787951][T14629] loop0: detected capacity change from 0 to 16 [ 633.842937][T14629] erofs (device loop0): mounted with root inode @ nid 36. [ 633.868744][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2507'. [ 634.393009][T14641] syzkaller0: entered promiscuous mode [ 634.433868][T14641] syzkaller0: entered allmulticast mode [ 634.976379][T14662] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2519'. [ 635.015663][T14658] syzkaller0: entered promiscuous mode [ 635.015870][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 635.055280][T14658] syzkaller0: entered allmulticast mode [ 635.170367][T14662] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2519'. [ 635.654992][T14672] syzkaller0: entered promiscuous mode [ 635.681353][T14672] syzkaller0: entered allmulticast mode [ 637.040325][T14727] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2537'. [ 637.125097][T14730] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2537'. [ 640.070669][T14737] syzkaller0: entered promiscuous mode [ 640.089108][T14737] syzkaller0: entered allmulticast mode [ 640.772084][T14759] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2544'. [ 640.832306][T14759] dummy0 (unregistering): left promiscuous mode [ 640.902361][T14759] team0: Port device dummy0 removed [ 641.512791][T14784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2554'. [ 641.617987][T14784] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2554'. [ 641.823763][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2556'. [ 641.908741][T14783] syzkaller0: entered promiscuous mode [ 641.935019][T14783] syzkaller0: entered allmulticast mode [ 644.763459][T14804] syzkaller0: entered promiscuous mode [ 644.769185][T14804] syzkaller0: entered allmulticast mode [ 645.593629][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2565'. [ 645.692238][ T5917] bond0: (slave bond_slave_0): interface is now down [ 645.699439][ T5917] bond0: (slave bond_slave_1): interface is now down [ 645.713727][T14834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.955858][ T1093] bond0: (slave bond_slave_0): interface is now down [ 645.966634][ T1093] bond0: (slave bond_slave_1): interface is now down [ 645.984583][ T1093] bond0: now running without any active interface! [ 646.126024][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2572'. [ 646.575311][T14856] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 646.584655][T14856] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 646.765202][T14862] syzkaller0: entered promiscuous mode [ 646.772781][T14862] syzkaller0: entered allmulticast mode [ 646.973150][T14870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2580'. [ 649.023028][T14870] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 649.393556][T14892] syzkaller0: entered promiscuous mode [ 649.426691][T14892] syzkaller0: entered allmulticast mode [ 650.055542][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 650.547419][T14919] syzkaller0: entered promiscuous mode [ 650.584183][T14919] syzkaller0: entered allmulticast mode [ 651.586918][T14953] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2609'. [ 651.728679][T14954] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2609'. [ 652.580859][T14970] syzkaller0: entered promiscuous mode [ 652.595694][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 652.614908][T14970] syzkaller0: entered allmulticast mode [ 653.930354][T15019] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2627'. [ 653.993515][T15021] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2628'. [ 654.038318][T15021] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2628'. [ 654.964791][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 655.354497][T15047] syzkaller0: entered promiscuous mode [ 655.385211][T15047] syzkaller0: entered allmulticast mode [ 656.180292][T15079] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2646'. [ 656.374634][T15072] syzkaller0: entered promiscuous mode [ 656.385060][T15072] syzkaller0: entered allmulticast mode [ 657.150755][T15096] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2651'. [ 657.247614][T15096] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2651'. [ 657.314644][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 657.338152][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2654'. [ 657.436888][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 658.097900][T15123] syzkaller0: entered promiscuous mode [ 658.122911][T15123] syzkaller0: entered allmulticast mode [ 659.296077][T15161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2668'. [ 660.325931][T15183] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2673'. [ 660.377629][T15182] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2671'. [ 660.427819][T15184] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2673'. [ 660.602752][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 663.291777][T15207] syzkaller0: entered promiscuous mode [ 663.315566][T15207] syzkaller0: entered allmulticast mode [ 663.356400][T15211] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2684'. [ 664.301967][T15231] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2691'. [ 664.332399][T15231] netlink: 'syz.8.2691': attribute type 1 has an invalid length. [ 664.358861][T15235] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2692'. [ 664.403845][T15236] netlink: 'syz.3.2695': attribute type 25 has an invalid length. [ 664.413415][T15235] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2692'. [ 664.748388][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 665.054160][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 665.573237][T15272] syzkaller0: entered promiscuous mode [ 665.583057][T15272] syzkaller0: entered allmulticast mode [ 666.324359][T15282] netlink: 'syz.6.2709': attribute type 25 has an invalid length. [ 666.517727][T15279] syzkaller0: entered promiscuous mode [ 666.536697][T15279] syzkaller0: entered allmulticast mode [ 666.607596][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2714'. [ 667.129326][T15296] : entered promiscuous mode [ 667.156188][T15288] lo speed is unknown, defaulting to 1000 [ 667.547693][T15320] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2718'. [ 667.671660][T15324] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2718'. [ 667.781847][T15288] lo speed is unknown, defaulting to 1000 [ 669.317355][T15287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.329117][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2717'. [ 669.917238][T15348] netlink: 'syz.6.2727': attribute type 25 has an invalid length. [ 670.212835][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 670.437046][T15354] : entered promiscuous mode [ 671.265105][T15383] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2739'. [ 671.287418][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'. [ 671.481395][T15389] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2739'. [ 674.287658][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2764'. [ 676.460956][T15448] openvswitch: : Dropping previously announced user features [ 676.995198][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 679.695709][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2784'. [ 680.927119][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 682.368335][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2803'. [ 685.732358][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2823'. [ 686.673513][T15664] process 'syz.2.2831' launched '/dev/fd/6' with NULL argv: empty string added [ 686.682880][T15665] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2832'. [ 687.071406][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2837'. [ 688.253919][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2842'. [ 688.339945][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2842'. [ 688.372217][T15686] syzkaller0: entered promiscuous mode [ 688.400767][T15686] syzkaller0: entered allmulticast mode [ 688.411135][T15690] netlink: 'syz.6.2842': attribute type 15 has an invalid length. [ 688.565122][T15695] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2843'. [ 688.710188][T15696] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2843'. [ 688.830749][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.840065][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.770117][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 690.731103][T15714] syzkaller0: entered promiscuous mode [ 690.801236][T15714] syzkaller0: entered allmulticast mode [ 690.836540][T15718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2849'. [ 691.605044][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2853'. [ 691.621301][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 691.647220][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2853'. [ 691.712185][T15732] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2857'. [ 692.771901][T15761] syzkaller0: entered promiscuous mode [ 692.793728][T15761] syzkaller0: entered allmulticast mode [ 699.865659][T15784] hub 8-0:1.0: USB hub found [ 699.874990][T15784] hub 8-0:1.0: 1 port detected [ 699.966415][T15777] __nla_validate_parse: 5 callbacks suppressed [ 699.966850][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2872'. [ 701.114117][T15802] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2880'. [ 701.166726][T15802] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2880'. [ 703.472354][T15811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2882'. [ 704.248443][T15814] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2882'. [ 704.698516][T15826] syzkaller0: entered promiscuous mode [ 704.779549][T15826] syzkaller0: entered allmulticast mode [ 705.025616][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 705.339272][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2893'. [ 705.348335][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2893'. [ 705.838930][T12258] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 706.069395][T12258] usb 8-1: Using ep0 maxpacket: 8 [ 706.077171][T12258] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 706.086267][T12258] usb 8-1: config 2 has no interface number 0 [ 706.094518][T12258] usb 8-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.106768][T12258] usb 8-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 706.118103][T12258] usb 8-1: config 2 interface 31 has no altsetting 0 [ 706.128832][ T5846] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 706.135072][T12258] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 706.160418][T12258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.161149][T15866] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2900'. [ 706.169420][T12258] usb 8-1: Product: syz [ 706.178983][T15866] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2900'. [ 706.182141][T12258] usb 8-1: Manufacturer: syz [ 706.195283][T12258] usb 8-1: SerialNumber: syz [ 706.217296][T15866] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2900'. [ 706.217411][T12258] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 706.612065][T15874] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2902'. [ 706.698885][T15874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2902'. [ 706.784502][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 706.828170][ T5846] usb 7-1: Using ep0 maxpacket: 16 [ 706.864212][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2909'. [ 707.081321][T15883] syzkaller0: entered promiscuous mode [ 707.086859][T15883] syzkaller0: entered allmulticast mode [ 707.518908][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.529622][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 707.541149][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.430003][ T5846] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 708.439131][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.447257][ T5846] usb 7-1: Product: syz [ 708.451461][ T5846] usb 7-1: Manufacturer: syz [ 708.456263][ T5846] usb 7-1: SerialNumber: syz [ 708.490295][ T5846] usb 7-1: config 0 descriptor?? [ 708.521691][ T5758] usb 8-1: USB disconnect, device number 5 [ 708.783463][ T5846] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 708.910144][ T5846] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 709.140150][ T5846] usb 7-1: USB disconnect, device number 5 [ 710.240481][T15942] __nla_validate_parse: 1 callbacks suppressed [ 710.240511][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2922'. [ 710.306244][T15944] netlink: 41 bytes leftover after parsing attributes in process `syz.8.2920'. [ 710.322937][T15944] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2920'. [ 710.864954][T15957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2925'. [ 712.179143][T12258] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 712.372057][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 712.494346][T15986] syzkaller0: entered promiscuous mode [ 712.499993][T15986] syzkaller0: entered allmulticast mode [ 712.552777][T15984] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2938'. [ 712.561789][T15984] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2938'. [ 712.570952][T12258] usb 4-1: Using ep0 maxpacket: 8 [ 712.573187][T12258] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 712.573234][T12258] usb 4-1: config 2 has no interface number 0 [ 712.573292][T12258] usb 4-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 712.573350][T12258] usb 4-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 712.573395][T12258] usb 4-1: config 2 interface 31 has no altsetting 0 [ 712.576659][T12258] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 712.576707][T12258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.576744][T12258] usb 4-1: Product: syz [ 712.576772][T12258] usb 4-1: Manufacturer: syz [ 712.576800][T12258] usb 4-1: SerialNumber: syz [ 712.607435][T12258] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 716.083075][T12258] usb 4-1: USB disconnect, device number 5 [ 717.691487][T16036] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2947'. [ 718.446192][T15984] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2938'. [ 718.876381][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2953'. [ 721.649114][T16077] syzkaller0: entered promiscuous mode [ 721.654659][T16077] syzkaller0: entered allmulticast mode [ 722.156144][T16089] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2962'. [ 722.662107][T16091] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2963'. [ 722.684535][T16091] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2963'. [ 722.819926][T16091] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2963'. [ 722.841827][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 723.303288][T16105] syzkaller0: entered promiscuous mode [ 723.324946][T16105] syzkaller0: entered allmulticast mode [ 726.583999][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2981'. [ 727.612574][T16174] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2984'. [ 727.621587][T16174] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2984'. [ 727.647152][T16174] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2984'. [ 728.179605][T16196] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2992'. [ 731.260452][T16217] syzkaller0: entered promiscuous mode [ 731.265988][T16217] syzkaller0: entered allmulticast mode [ 731.832004][T16226] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3002'. [ 731.841325][T16226] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3002'. [ 734.404478][T16226] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3002'. [ 734.567800][T16272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3007'. [ 734.640739][T16274] comedi comedi0: pcl730: I/O base address not correctly aligned [ 734.904920][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 735.037016][T16283] netlink: 'syz.8.3013': attribute type 10 has an invalid length. [ 735.068901][T16283] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 735.087629][T16283] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 735.098222][T16283] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 735.114364][T16289] random: crng reseeded on system resumption [ 735.344444][T16291] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 735.466600][T16293] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3028'. [ 736.797843][T16305] syzkaller0: entered promiscuous mode [ 736.827886][T16305] syzkaller0: entered allmulticast mode [ 736.905151][T16314] syzkaller0: entered promiscuous mode [ 736.931253][T16314] syzkaller0: entered allmulticast mode [ 737.159779][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3027'. [ 738.508679][T16354] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3036'. [ 740.167913][T16352] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 740.529695][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 741.815103][T16393] netlink: 'syz.6.3047': attribute type 13 has an invalid length. [ 741.822999][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3047'. [ 741.831952][T16393] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 742.232318][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 742.566120][T16409] syzkaller0: entered promiscuous mode [ 742.588973][T16409] syzkaller0: entered allmulticast mode [ 742.714319][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'. [ 742.959813][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 742.983940][T16422] syzkaller0: entered promiscuous mode [ 743.000175][T16422] syzkaller0: entered allmulticast mode [ 743.206329][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 743.262631][ T29] usb 3-1: config 0 has no interface number 0 [ 743.290272][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3061'. [ 743.413025][ T29] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 743.443676][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.501398][ T29] usb 3-1: Product: syz [ 743.509936][ T29] usb 3-1: Manufacturer: syz [ 743.516655][ T29] usb 3-1: SerialNumber: syz [ 743.535234][ T29] usb 3-1: config 0 descriptor?? [ 743.787220][T16404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3048'. [ 744.679145][ T29] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 745.648709][ T29] usb 3-1: USB disconnect, device number 14 [ 747.710881][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3072'. [ 747.896443][T16461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.233749][ T5846] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 748.465226][T16510] syzkaller0: entered promiscuous mode [ 748.483400][T16510] syzkaller0: entered allmulticast mode [ 748.802611][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 748.881834][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3085'. [ 748.917081][ T5846] usb 9-1: Using ep0 maxpacket: 32 [ 749.497140][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 749.603695][ T5846] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.611756][ T5846] usb 9-1: config 0 has no interface number 0 [ 750.163470][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 750.220585][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.226906][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.498694][ T5846] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 750.507820][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.515835][ T5846] usb 9-1: Product: syz [ 750.520120][ T5846] usb 9-1: Manufacturer: syz [ 750.524717][ T5846] usb 9-1: SerialNumber: syz [ 750.533318][ T5846] usb 9-1: config 0 descriptor?? [ 750.725484][ T5846] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 750.735223][ T5846] usb 9-1: selecting invalid altsetting 1 [ 750.741001][ T5846] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 750.753886][ T5846] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 750.764578][ T5846] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 750.773331][ T5846] usb 9-1: media controller created [ 750.791541][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.949352][ T5846] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 750.956744][ T5846] zl10353_read_register: readreg error (reg=127, ret==-71) [ 751.063269][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 751.072350][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.082717][ T5846] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 751.098009][ T5839] usb 3-1: Product: syz [ 751.102211][ T5839] usb 3-1: Manufacturer: syz [ 751.106800][ T5839] usb 3-1: SerialNumber: syz [ 751.125859][ T5839] usb 3-1: config 0 descriptor?? [ 751.149587][ T5846] usb 9-1: USB disconnect, device number 8 [ 751.288239][ T5839] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.297586][ T5839] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 752.238140][T16521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.804678][ T5839] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 753.014342][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3098'. [ 753.456042][T16565] syzkaller0: entered promiscuous mode [ 753.472207][T16565] syzkaller0: entered allmulticast mode [ 753.538532][T16574] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3104'. [ 753.605760][T16574] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3104'. [ 753.695853][ T5839] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 753.704523][ T5839] em28xx 3-1:0.0: board has no eeprom [ 753.912134][T16574] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3104'. [ 754.022750][ T5839] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 754.030723][ T5839] em28xx 3-1:0.0: dvb set to bulk mode. [ 754.050095][ T5839] usb 3-1: USB disconnect, device number 15 [ 754.058116][ T5839] em28xx 3-1:0.0: Disconnecting em28xx [ 754.064367][ T801] em28xx 3-1:0.0: Binding DVB extension [ 754.158055][ T801] em28xx 3-1:0.0: Registering input extension [ 754.175374][ T5839] em28xx 3-1:0.0: Closing input extension [ 754.208979][ T5839] em28xx 3-1:0.0: Freeing device [ 754.699419][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 755.001382][T16616] syzkaller0: entered promiscuous mode [ 755.006927][T16616] syzkaller0: entered allmulticast mode [ 755.313762][T16627] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3120'. [ 756.211924][T16634] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3122'. [ 756.221276][T16634] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3122'. [ 756.470631][T16634] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3122'. [ 759.851781][T16689] syzkaller0: entered promiscuous mode [ 759.882753][T16689] syzkaller0: entered allmulticast mode [ 760.997009][T16660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.772621][T16731] syzkaller0: entered promiscuous mode [ 761.778248][T16731] syzkaller0: entered allmulticast mode [ 762.098233][T16733] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3155'. [ 762.108770][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3155'. [ 762.474342][T16756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3161'. [ 765.300126][T16739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.116563][T16795] Set syz1 is full, maxelem 0 reached [ 767.162641][T16803] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3178'. [ 767.306067][T16803] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3178'. [ 767.411755][T16803] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3178'. [ 769.409707][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 769.478698][T16861] tipc: Enabling of bearer rejected, failed to enable media [ 769.629022][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 769.670040][ T4935] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 769.695903][ T4935] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 769.711744][ T4935] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 769.712348][ T4935] Bluetooth: hci6: Malformed Event: 0x02 [ 769.729822][ T4935] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 769.777865][ T29] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 769.803637][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.819346][ T29] usb 4-1: Product: syz [ 769.823693][ T29] usb 4-1: Manufacturer: syz [ 769.832525][ T29] usb 4-1: SerialNumber: syz [ 769.900599][ T29] usb 4-1: config 0 descriptor?? [ 769.915059][ T29] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 770.043880][ T29] usb 4-1: Detected FT2232H [ 770.487668][ T29] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 770.627713][ T29] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 770.653651][ T29] usb 4-1: USB disconnect, device number 6 [ 770.732566][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 770.743933][ T29] ftdi_sio 4-1:0.0: device disconnected [ 771.070803][T16888] syzkaller0: entered promiscuous mode [ 771.076346][T16888] syzkaller0: entered allmulticast mode [ 771.133625][T16895] syzkaller0: entered promiscuous mode [ 771.139177][T16895] syzkaller0: entered allmulticast mode [ 771.233654][T16890] could not allocate digest TFM handle sha384-ssse3 [ 778.641534][T16981] loop0: detected capacity change from 0 to 512 [ 778.995418][T16981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.3235: missing EA_INODE flag [ 779.029641][T16981] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 779.035510][T16981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: comm syz.0.3235: error while reading EA inode 12 err=-117 [ 779.060679][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 779.060720][ C0] EXT4-fs (loop0): initial error at time 2000000646: ext4_xattr_inode_iget:441: inode 12 [ 779.060775][ C0] EXT4-fs (loop0): last error at time 2000000646: ext4_xattr_inode_iget:441: inode 12 [ 779.168945][T16981] loop0: lost filesystem error report for type 5 error -117 [ 779.177202][T16981] EXT4-fs (loop0): 1 orphan inode deleted [ 779.259711][T16981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.530549][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.153811][T17020] syzkaller0: entered promiscuous mode [ 781.172363][T17020] syzkaller0: entered allmulticast mode [ 781.323859][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 781.529642][T17041] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3247'. [ 781.538661][T17041] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3247'. [ 781.547712][T17041] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3247'. [ 782.042689][ T5846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 783.806992][T17102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3265'. [ 783.934326][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 784.183340][T17106] syzkaller0: entered promiscuous mode [ 784.188972][T17106] syzkaller0: entered allmulticast mode [ 784.229713][T17111] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3269'. [ 784.238735][T17111] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3269'. [ 784.285557][T17111] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3269'. [ 784.354852][T17118] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3272'. [ 784.448871][ T5846] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 784.456859][ T5846] usb 4-1: can't read configurations, error -22 [ 784.703120][ T5846] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 786.724282][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3281'. [ 787.051513][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 787.236531][T17172] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3285'. [ 787.684354][T17188] blktrace: Concurrent blktraces are not allowed on nullb0 [ 787.880172][T17192] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3292'. [ 787.921562][T17192] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3292'. [ 788.097335][T17192] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3292'. [ 788.589936][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'. [ 788.988780][T17230] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3303'. [ 789.892781][T17232] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3301'. [ 790.188867][T17232] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3301'. [ 791.492060][T17257] blktrace: Concurrent blktraces are not allowed on nullb0 [ 792.047236][T17269] __nla_validate_parse: 4 callbacks suppressed [ 792.047265][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3316'. [ 793.618971][T17289] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3321'. [ 793.889574][T17291] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3321'. [ 794.352890][T17306] blktrace: Concurrent blktraces are not allowed on nullb0 [ 795.532093][T17330] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3332'. [ 795.541434][T17330] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3332'. [ 797.329176][T17330] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3332'. [ 797.387170][T17336] syzkaller0: entered promiscuous mode [ 797.428574][T17336] syzkaller0: entered allmulticast mode [ 797.618034][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 797.641101][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 797.702016][ T4935] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 797.702401][ T4935] Bluetooth: hci1: Malformed Event: 0x02 [ 797.730249][ T4935] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 798.696252][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3336'. [ 799.372299][T17385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3342'. [ 799.515924][T17391] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3342'. [ 801.890996][T17383] syzkaller0: entered promiscuous mode [ 801.897227][T17383] syzkaller0: entered allmulticast mode [ 802.112734][T17414] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3347'. [ 802.125672][T17414] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3347'. [ 802.155849][T17414] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3347'. [ 802.718101][ T801] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 804.656309][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3359'. [ 804.681731][ T801] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 804.692122][ T801] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.014574][T17467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3360'. [ 805.144781][ T801] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 805.155191][ T801] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.191926][T17469] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3360'. [ 805.731131][ T801] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 805.738794][ T801] usb 3-1: can't read configurations, error -71 [ 807.124414][T17484] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3366'. [ 807.143471][T17484] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3366'. [ 807.170757][T17484] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3366'. [ 808.640715][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 808.736489][T17517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3376'. [ 808.817184][T17517] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3376'. [ 809.236062][T17526] syzkaller0: entered promiscuous mode [ 809.241686][T17526] syzkaller0: entered allmulticast mode [ 809.385654][T17535] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3385'. [ 810.035417][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.074828][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.094937][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.106241][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.125118][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 811.676539][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.698241][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.201025][ T4935] Bluetooth: hci5: command tx timeout [ 812.547589][T17535] __nla_validate_parse: 1 callbacks suppressed [ 812.547618][T17535] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3385'. [ 812.609167][ T5621] bond0: (slave syz_tun): Releasing backup interface [ 813.260418][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3394'. [ 813.482570][T17579] syzkaller0: entered promiscuous mode [ 813.496168][T17579] syzkaller0: entered allmulticast mode [ 813.522436][T17541] lo speed is unknown, defaulting to 1000 [ 814.152138][T17541] lo speed is unknown, defaulting to 1000 [ 814.374513][ T4935] Bluetooth: hci5: command tx timeout [ 814.382356][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 814.599633][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 814.615104][ T29] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 814.628081][ T29] usb 8-1: config 0 has no interface number 0 [ 814.641091][ T29] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.668537][ T29] usb 8-1: config 0 interface 85 has no altsetting 0 [ 814.686699][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 814.705952][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.735752][ T29] usb 8-1: Product: syz [ 814.751735][ T29] usb 8-1: Manufacturer: syz [ 814.773138][ T29] usb 8-1: SerialNumber: syz [ 814.804043][ T29] usb 8-1: config 0 descriptor?? [ 815.233716][ T29] appletouch 8-1:0.85: Geyser mode initialized. [ 815.294418][ T29] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input8 [ 815.507162][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3411'. [ 815.729685][ T29] usb 8-1: USB disconnect, device number 6 [ 816.223676][ T29] appletouch 8-1:0.85: input: appletouch disconnected [ 816.279235][ T5935] bridge_slave_1: left allmulticast mode [ 816.289030][ T5935] bridge_slave_1: left promiscuous mode [ 816.294983][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.407653][ T5935] bridge_slave_0: left promiscuous mode [ 816.413567][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.438675][ T4935] Bluetooth: hci5: command tx timeout [ 816.470031][ T5935] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 816.478280][ T5935] ip6gre1 (unregistering): left promiscuous mode [ 816.808489][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.819139][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.828646][ T5935] bond0 (unregistering): Released all slaves [ 816.842174][ T5935] bond1 (unregistering): Released all slaves [ 816.861272][ T5935] bond2 (unregistering): (slave lo): Releasing backup interface [ 816.869415][ T5935] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 816.880875][ T5935] bond2 (unregistering): Released all slaves [ 816.916074][ T5935] bond3 (unregistering): Released all slaves [ 816.934784][ T5935] bond4 (unregistering): Released all slaves [ 816.954370][ T5935] bond5 (unregistering): Released all slaves [ 817.039953][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.047224][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.054615][T17541] bridge_slave_0: entered allmulticast mode [ 817.062911][T17541] bridge_slave_0: entered promiscuous mode [ 817.072849][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.081203][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.089320][T17541] bridge_slave_1: entered allmulticast mode [ 817.098028][T17541] bridge_slave_1: entered promiscuous mode [ 817.180518][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.194438][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.330257][T17657] syzkaller0: entered promiscuous mode [ 817.335822][T17657] syzkaller0: entered allmulticast mode [ 817.398997][T17541] team0: Port device team_slave_0 added [ 817.408738][T17541] team0: Port device team_slave_1 added [ 817.555542][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.562538][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.611116][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.629077][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.636048][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.661966][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.788374][T17541] hsr_slave_0: entered promiscuous mode [ 817.798894][T17541] hsr_slave_1: entered promiscuous mode [ 817.819377][T17541] debugfs: 'hsr0' already exists in 'hsr' [ 817.848627][T17541] Cannot create hsr debugfs directory [ 818.025214][T17673] syzkaller0: entered promiscuous mode [ 818.031161][T17673] syzkaller0: entered allmulticast mode [ 818.518107][ T4935] Bluetooth: hci5: command tx timeout [ 818.641257][T17629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.678800][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3428'. [ 818.839976][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 818.869370][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 818.920773][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 818.920989][ T4935] Bluetooth: hci0: Malformed Event: 0x02 [ 818.934434][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 820.749080][T17725] syzkaller0: entered promiscuous mode [ 820.754640][T17725] syzkaller0: entered allmulticast mode [ 822.283134][T17541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 822.379892][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.420169][T17541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 822.567326][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.575862][T17541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 822.670562][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.690200][T17541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 822.737567][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.834707][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3449'. [ 823.099153][T17793] tipc: Enabling of bearer rejected, failed to enable media [ 823.136237][T17783] syzkaller0: entered promiscuous mode [ 823.141825][T17783] syzkaller0: entered allmulticast mode [ 823.730887][T17807] syzkaller0: entered promiscuous mode [ 823.736436][T17807] syzkaller0: entered allmulticast mode [ 823.997414][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.176189][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.193066][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.200396][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.365424][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.372963][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.026188][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3468'. [ 825.974660][T17875] syzkaller0: entered promiscuous mode [ 825.980207][T17875] syzkaller0: entered allmulticast mode [ 828.382053][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.608846][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 828.626918][T17541] veth0_vlan: entered promiscuous mode [ 828.643647][T17541] veth1_vlan: entered promiscuous mode [ 828.714486][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 828.729476][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 828.729585][ T4935] Bluetooth: hci0: Malformed Event: 0x02 [ 828.807931][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 828.925245][T17541] veth0_macvtap: entered promiscuous mode [ 828.944405][T17541] veth1_macvtap: entered promiscuous mode [ 829.258846][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.278578][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.364112][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3490'. [ 829.545958][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.554907][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.563672][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.572426][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.128014][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3498'. [ 831.232297][T17940] syzkaller0: entered promiscuous mode [ 831.242539][T17940] syzkaller0: entered allmulticast mode [ 831.488233][T16953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.497751][T16953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.889650][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 831.897574][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 831.914794][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 831.914883][ T4935] Bluetooth: hci0: Malformed Event: 0x02 [ 832.000585][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 832.079294][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.110838][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.896909][T17993] netlink: 'syz.8.3508': attribute type 5 has an invalid length. [ 833.073774][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3509'. [ 833.821243][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3514'. [ 834.362361][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 834.370944][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 834.379509][ T4935] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 834.379603][ T4935] Bluetooth: hci1: Malformed Event: 0x02 [ 834.393858][ T4935] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 834.411452][T18027] syzkaller0: entered promiscuous mode [ 834.425544][T18027] syzkaller0: entered allmulticast mode [ 834.707105][T18048] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3522'. [ 834.749873][T18048] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3522'. [ 834.830863][T12258] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 834.950614][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.960930][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.969981][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 835.059608][T12258] usb 4-1: Using ep0 maxpacket: 32 [ 835.076884][T12258] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 835.091739][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 835.097478][T12258] usb 4-1: config 0 has no interface number 0 [ 835.123559][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.180626][T12258] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.216487][T12258] usb 4-1: config 0 interface 85 has no altsetting 0 [ 835.236990][T12258] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 835.267303][T12258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.301176][T12258] usb 4-1: Product: syz [ 835.317905][T12258] usb 4-1: Manufacturer: syz [ 835.332875][T12258] usb 4-1: SerialNumber: syz [ 835.370595][T12258] usb 4-1: config 0 descriptor?? [ 835.625126][T12258] appletouch 4-1:0.85: Failed to read mode from device. [ 835.673361][T12258] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 835.765042][T18062] loop6: detected capacity change from 0 to 512 [ 835.834913][T18062] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.3526: missing EA_INODE flag [ 835.848960][T18062] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 835.849404][T18062] EXT4-fs error (device loop6): ext4_xattr_inode_iget:444: comm syz.6.3526: error while reading EA inode 12 err=-117 [ 835.858691][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 835.858761][ C1] EXT4-fs (loop6): initial error at time 2000000702: ext4_xattr_inode_iget:441: inode 12 [ 835.858818][ C1] EXT4-fs (loop6): last error at time 2000000702: ext4_xattr_inode_iget:441: inode 12 [ 835.950102][T18062] loop6: lost filesystem error report for type 5 error -117 [ 835.950582][T18062] EXT4-fs (loop6): 1 orphan inode deleted [ 835.965886][T18062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.969663][T12258] usb 4-1: USB disconnect, device number 9 [ 836.592704][T18078] overlayfs: missing 'lowerdir' [ 837.020637][T18049] lo speed is unknown, defaulting to 1000 [ 837.169710][ T4935] Bluetooth: hci3: command tx timeout [ 837.264255][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3530'. [ 837.265741][ T6204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.459006][ T4935] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 837.467150][ T4935] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 837.475213][ T4935] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 837.475311][ T4935] Bluetooth: hci4: Malformed Event: 0x02 [ 837.489039][ T4935] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 837.664963][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3532'. [ 837.916994][T18107] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3538'. [ 837.961790][T18098] syzkaller0: entered promiscuous mode [ 837.967312][T18098] syzkaller0: entered allmulticast mode [ 838.002894][T18107] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3538'. [ 838.021086][T18049] lo speed is unknown, defaulting to 1000 [ 838.806911][T18122] loop8: detected capacity change from 0 to 512 [ 839.067599][T18122] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.3543: missing EA_INODE flag [ 839.079293][T18122] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 839.079822][T18122] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.3543: error while reading EA inode 12 err=-117 [ 839.101233][T18122] loop8: lost filesystem error report for type 5 error -117 [ 839.101822][T18122] EXT4-fs (loop8): 1 orphan inode deleted [ 839.117559][T18122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.217831][T18128] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3555'. [ 839.248564][ T4935] Bluetooth: hci3: command tx timeout [ 839.602411][T18128] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3555'. [ 840.113563][T18140] overlayfs: missing 'lowerdir' [ 840.733337][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3548'. [ 840.836587][ T8335] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.102680][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 841.195849][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3551'. [ 841.231382][T18049] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.238566][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.245944][T18049] bridge_slave_0: entered allmulticast mode [ 841.254011][T18049] bridge_slave_0: entered promiscuous mode [ 841.318623][ T4935] Bluetooth: hci3: command tx timeout [ 841.339674][T18049] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.346838][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.354149][T18049] bridge_slave_1: entered allmulticast mode [ 841.361965][T18049] bridge_slave_1: entered promiscuous mode [ 841.413623][T18164] syzkaller0: entered promiscuous mode [ 841.419627][T18164] syzkaller0: entered allmulticast mode [ 841.574248][T18049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.617887][T18049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.656569][T18049] team0: Port device team_slave_0 added [ 841.687399][T18049] team0: Port device team_slave_1 added [ 841.721775][T18049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.729813][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.761383][T18049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.774577][T18049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.782747][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.810818][T18049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.888686][T18049] hsr_slave_0: entered promiscuous mode [ 841.896083][T18049] hsr_slave_1: entered promiscuous mode [ 841.903519][T18049] debugfs: 'hsr0' already exists in 'hsr' [ 841.909801][T18049] Cannot create hsr debugfs directory [ 842.729986][T18187] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3559'. [ 842.777242][T18185] netlink: 'syz.3.3558': attribute type 4 has an invalid length. [ 843.087045][T18187] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3559'. [ 843.104372][ T801] lo speed is unknown, defaulting to 1000 [ 843.110139][ T801] sqz0: Port: 1 Link ACTIVE [ 843.152881][ T801] lo speed is unknown, defaulting to 1000 [ 843.406288][T18195] loop6: detected capacity change from 0 to 512 [ 843.416025][ T4935] Bluetooth: hci3: command tx timeout [ 843.460724][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 843.491680][T18195] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.3562: missing EA_INODE flag [ 843.555553][T18195] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 843.557579][T18195] EXT4-fs error (device loop6): ext4_xattr_inode_iget:444: comm syz.6.3562: error while reading EA inode 12 err=-117 [ 843.598393][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 843.604909][ C1] EXT4-fs (loop6): initial error at time 2000000710: ext4_xattr_inode_iget:441: inode 12 [ 843.614850][ C1] EXT4-fs (loop6): last error at time 2000000710: ext4_xattr_inode_iget:441: inode 12 [ 843.658911][T18195] loop6: lost filesystem error report for type 5 error -117 [ 843.659436][T18195] EXT4-fs (loop6): 1 orphan inode deleted [ 843.674866][T18195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.123965][T18208] overlayfs: missing 'lowerdir' [ 844.259218][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3566'. [ 844.838555][ T6204] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.863710][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3565'. [ 845.115963][T18221] syzkaller0: entered promiscuous mode [ 845.122399][T18221] syzkaller0: entered allmulticast mode [ 845.787078][T12258] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 846.416189][T12258] usb 9-1: config 1 interface 0 has no altsetting 0 [ 846.445080][T12258] usb 9-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 846.474913][T12258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.492026][T12258] usb 9-1: Product: syz [ 846.501299][T12258] usb 9-1: Manufacturer: syz [ 846.527797][T12258] usb 9-1: SerialNumber: syz [ 846.975512][T18049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 847.122551][T18049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 847.131020][T18049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 847.159453][T18049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.178469][T18049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 847.303587][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 847.337723][T18245] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3576'. [ 847.363725][T18049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 847.398698][T18049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.409268][T18245] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3576'. [ 847.448634][T18049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 847.512398][T12258] usbhid 9-1:1.0: can't add hid device: -71 [ 847.536642][T12258] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 847.589552][T12258] usb 9-1: USB disconnect, device number 9 [ 847.764943][T18049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.845225][T18049] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.865892][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.873162][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.939891][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.947097][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.096543][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 848.182621][T18268] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3584'. [ 848.203391][T18268] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3584'. [ 848.204179][T18049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 848.222832][T18049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.334186][T18268] netlink: 41 bytes leftover after parsing attributes in process `syz.3.3584'. [ 848.954730][T18284] syzkaller0: entered promiscuous mode [ 848.996443][T18284] syzkaller0: entered allmulticast mode [ 849.087926][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'. [ 849.319162][T18299] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3594'. [ 849.403185][T18299] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3594'. [ 851.229913][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 851.345443][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.347127][T17947] IPVS: starting estimator thread 0... [ 852.369989][T18049] veth0_vlan: entered promiscuous mode [ 852.445461][T18049] veth1_vlan: entered promiscuous mode [ 852.516914][T18049] veth0_macvtap: entered promiscuous mode [ 852.571381][T18049] veth1_macvtap: entered promiscuous mode [ 852.629171][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.694973][T18328] IPVS: using max 27 ests per chain, 64800 per kthread [ 852.723119][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.736217][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3606'. [ 852.795888][ T5920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.805030][ T5920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.831711][ T5920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.861530][ T5920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.186695][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.209950][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.405378][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 853.438619][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.495002][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.753500][ T30] audit: type=1326 audit(2000000720.797:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 853.771954][T18357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3616'. [ 853.799489][T18357] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3616'. [ 853.916614][ T30] audit: type=1326 audit(2000000720.797:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.168576][ T30] audit: type=1326 audit(2000000720.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.289612][ T30] audit: type=1326 audit(2000000720.877:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.488931][ T30] audit: type=1326 audit(2000000720.877:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.592195][ T30] audit: type=1326 audit(2000000720.877:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.766305][ T30] audit: type=1326 audit(2000000720.877:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.817216][ T30] audit: type=1326 audit(2000000720.877:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 854.929932][ T30] audit: type=1326 audit(2000000720.877:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18353 comm="syz.8.3615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff39e99cdd9 code=0x7ffc0000 [ 855.283597][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3628'. [ 855.479164][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3631'. [ 855.501044][T18398] bond0: entered promiscuous mode [ 855.506356][T18398] bond_slave_0: entered promiscuous mode [ 855.515527][T18399] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3630'. [ 855.525267][T18398] bond_slave_1: entered promiscuous mode [ 855.585158][T18398] bond0: left promiscuous mode [ 855.592176][T18401] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3630'. [ 855.597050][T18398] bond_slave_0: left promiscuous mode [ 855.611534][T18398] bond_slave_1: left promiscuous mode [ 856.237702][T18421] IPv6: NLM_F_CREATE should be specified when creating new route [ 857.561941][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3640'. [ 857.637325][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3644'. [ 857.935206][T18450] loop2: detected capacity change from 0 to 512 [ 858.023972][T18450] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.3648: missing EA_INODE flag [ 858.108248][T18450] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 858.109224][T18450] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.3648: error while reading EA inode 12 err=-117 [ 858.130816][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 858.130855][ C1] EXT4-fs (loop2): initial error at time 2000000725: ext4_xattr_inode_iget:441: inode 12 [ 858.130912][ C1] EXT4-fs (loop2): last error at time 2000000725: ext4_xattr_inode_iget:441: inode 12 [ 858.190475][T18450] loop2: lost filesystem error report for type 5 error -117 [ 858.197445][T18450] EXT4-fs (loop2): 1 orphan inode deleted [ 858.213033][T18450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.849948][T18469] overlayfs: missing 'lowerdir' [ 859.715208][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 859.729126][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 859.739810][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 859.748124][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 859.755914][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 859.897584][T18049] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.197265][T18481] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3654'. [ 860.242251][T18484] blktrace: Concurrent blktraces are not allowed on nullb0 [ 860.300367][T18481] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3654'. [ 860.628739][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3662'. [ 860.665992][T18496] syzkaller0: entered promiscuous mode [ 860.685433][T18496] syzkaller0: entered allmulticast mode [ 860.999333][T18470] lo speed is unknown, defaulting to 1000 [ 861.105960][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3664'. [ 861.484343][T18470] lo speed is unknown, defaulting to 1000 [ 861.802796][ T5638] Bluetooth: hci2: command tx timeout [ 861.864799][T18529] blktrace: Concurrent blktraces are not allowed on nullb0 [ 862.371761][T18540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3675'. [ 862.418782][T18540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3675'. [ 862.435873][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 862.753016][T18470] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.760403][T18470] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.767824][T18470] bridge_slave_0: entered allmulticast mode [ 862.776359][T18470] bridge_slave_0: entered promiscuous mode [ 862.785829][T18470] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.793169][T18470] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.823239][T18470] bridge_slave_1: entered allmulticast mode [ 862.845844][T18470] bridge_slave_1: entered promiscuous mode [ 862.891385][T18470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.905222][T18470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.043683][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 863.070291][T18470] team0: Port device team_slave_0 added [ 863.079283][T18470] team0: Port device team_slave_1 added [ 863.143027][T18470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.174682][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.200715][T18470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.215013][T18470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.222039][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.289031][T18470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.496581][T18470] hsr_slave_0: entered promiscuous mode [ 863.610020][T18470] hsr_slave_1: entered promiscuous mode [ 863.617113][T18470] debugfs: 'hsr0' already exists in 'hsr' [ 863.736360][T18470] Cannot create hsr debugfs directory [ 864.004465][ T5638] Bluetooth: hci2: command tx timeout [ 864.512433][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3688'. [ 864.605225][T18575] syzkaller0: entered promiscuous mode [ 864.611155][T18575] syzkaller0: entered allmulticast mode [ 864.678945][T18573] syzkaller0: entered promiscuous mode [ 864.684613][T18573] syzkaller0: entered allmulticast mode [ 864.700076][T18582] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3689'. [ 866.044411][ T5638] Bluetooth: hci2: command tx timeout [ 867.766718][T18609] loop7: detected capacity change from 0 to 512 [ 867.779614][T18610] blktrace: Concurrent blktraces are not allowed on nullb0 [ 867.811822][T18609] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.3700: missing EA_INODE flag [ 867.923304][T18609] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 867.923794][T18609] EXT4-fs error (device loop7): ext4_xattr_inode_iget:444: comm syz.7.3700: error while reading EA inode 12 err=-117 [ 867.985455][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 867.991966][ C0] EXT4-fs (loop7): initial error at time 2000000734: ext4_xattr_inode_iget:441: inode 12 [ 867.994542][T18614] __nla_validate_parse: 1 callbacks suppressed [ 867.994566][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3701'. [ 868.001821][ C0] EXT4-fs (loop7): last error at time 2000000734: ext4_xattr_inode_iget:441: inode 12 [ 868.037425][T18609] loop7: lost filesystem error report for type 5 error -117 [ 868.038245][T18609] EXT4-fs (loop7): 1 orphan inode deleted [ 868.057300][T18609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.101752][ T5638] Bluetooth: hci2: command tx timeout [ 868.579196][T18625] overlayfs: missing 'lowerdir' [ 869.094998][T18631] netlink: 41 bytes leftover after parsing attributes in process `syz.8.3706'. [ 869.103999][T18631] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3706'. [ 869.300421][ T8231] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.139488][T18470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 870.156821][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.206888][T18649] syzkaller0: entered promiscuous mode [ 870.216677][T18649] syzkaller0: entered allmulticast mode [ 870.234342][T18470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 870.280055][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.292036][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3715'. [ 870.306180][T18470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 870.390731][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.498378][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 870.544239][T18470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 870.586045][T18470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.074228][T18679] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3722'. [ 871.114345][T18679] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3722'. [ 871.192623][T18679] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3722'. [ 872.078731][T18470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.210352][T18470] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.296945][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.304135][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.345522][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.352909][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.601749][T18470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.623780][T18470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.675191][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3730'. [ 873.107683][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.114121][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.566901][T18756] syzkaller0: entered promiscuous mode [ 876.586736][T18756] syzkaller0: entered allmulticast mode [ 876.669818][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 877.386203][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3746'. [ 877.430627][T18470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.704843][T18470] veth0_vlan: entered promiscuous mode [ 877.775454][T18770] blktrace: Concurrent blktraces are not allowed on nullb0 [ 877.897168][T18470] veth1_vlan: entered promiscuous mode [ 878.118275][ T5638] Bluetooth: hci3: Malformed Event: 0x02 [ 878.231836][T18470] veth0_macvtap: entered promiscuous mode [ 878.256870][T18470] veth1_macvtap: entered promiscuous mode [ 878.373770][T18470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.446267][T18470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.502191][ T1093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.534416][ T1093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.838741][ T1093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.881005][ T1093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.194776][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3761'. [ 880.344375][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.352282][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.521840][T18823] syzkaller0: entered promiscuous mode [ 880.554176][T18823] syzkaller0: entered allmulticast mode [ 880.672754][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 881.028422][T18822] syzkaller0: entered promiscuous mode [ 881.033976][T18822] syzkaller0: entered allmulticast mode [ 881.044172][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.052025][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.287213][T18851] capability: warning: `syz.2.3771' uses 32-bit capabilities (legacy support in use) [ 883.454774][T18851] program syz.2.3771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.736086][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.752400][T18885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3782'. [ 885.763474][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.776465][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.792212][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.814417][T18886] syzkaller0: entered promiscuous mode [ 885.827690][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 885.836600][T18886] syzkaller0: entered allmulticast mode [ 886.835077][T18910] syzkaller0: entered promiscuous mode [ 886.840622][T18910] syzkaller0: entered allmulticast mode [ 888.214340][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 888.226544][ T4935] Bluetooth: hci4: command tx timeout [ 890.288964][ T4935] Bluetooth: hci4: command tx timeout [ 890.320287][T18933] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3796'. [ 890.329408][T18933] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3796'. [ 890.410878][T18933] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3796'. [ 890.613310][T18881] lo speed is unknown, defaulting to 1000 [ 891.253468][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 891.266570][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 891.289576][ T4935] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 891.296170][T18949] syzkaller0: entered promiscuous mode [ 891.318498][T18949] syzkaller0: entered allmulticast mode [ 892.011519][T18881] lo speed is unknown, defaulting to 1000 [ 892.368794][ T4935] Bluetooth: hci4: command tx timeout [ 892.696268][T18972] syzkaller0: entered promiscuous mode [ 892.701810][T18972] syzkaller0: entered allmulticast mode [ 892.849476][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3809'. [ 893.402666][T18981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.515328][ T4935] Bluetooth: hci4: command tx timeout [ 895.764168][ T5839] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 896.662203][T18997] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3816'. [ 896.686946][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 896.692371][T18997] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3816'. [ 896.711966][T18997] netlink: 41 bytes leftover after parsing attributes in process `syz.7.3816'. [ 897.114956][T18881] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.122217][T18881] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.129427][T18881] bridge_slave_0: entered allmulticast mode [ 897.157693][T18881] bridge_slave_0: entered promiscuous mode [ 897.174634][T18881] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.181839][T18881] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.189353][T18881] bridge_slave_1: entered allmulticast mode [ 897.197480][T18881] bridge_slave_1: entered promiscuous mode [ 897.286897][T18881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.300092][T18881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.383582][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.393931][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 897.430274][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.442120][T18881] team0: Port device team_slave_0 added [ 897.472952][T18881] team0: Port device team_slave_1 added [ 897.612837][ T5839] usb 3-1: string descriptor 0 read error: -71 [ 897.619213][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 897.628341][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.662165][ T5839] usb 3-1: config 0 descriptor?? [ 897.692472][T19013] syzkaller0: entered promiscuous mode [ 897.698017][T19013] syzkaller0: entered allmulticast mode [ 897.731946][ T5839] usb 3-1: can't set config #0, error -71 [ 897.748466][ T5839] usb 3-1: USB disconnect, device number 18 [ 897.986474][T18881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.009106][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3825'. [ 898.018194][T18881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.066769][T18881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.117079][T18881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.148392][T18881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.252720][T18881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.490754][T17411] IPVS: starting estimator thread 0... [ 898.617093][T19031] macvtap1: entered promiscuous mode [ 898.654162][T19031] macvtap1: entered allmulticast mode [ 898.788975][T19033] IPVS: using max 23 ests per chain, 55200 per kthread [ 899.646706][T18881] hsr_slave_0: entered promiscuous mode [ 899.676167][T18881] hsr_slave_1: entered promiscuous mode [ 899.697865][T18881] debugfs: 'hsr0' already exists in 'hsr' [ 899.711297][T18881] Cannot create hsr debugfs directory [ 899.788286][T19049] netlink: 41 bytes leftover after parsing attributes in process `syz.8.3831'. [ 899.815460][T19049] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3831'. [ 900.152687][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3833'. [ 900.936311][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3838'. [ 901.125410][T19073] sg_write: data in/out 210250/3 bytes for SCSI command 0x14-- guessing data in; [ 901.125410][T19073] program syz.0.3837 not setting count and/or reply_len properly [ 901.574563][T19068] syzkaller0: entered promiscuous mode [ 901.621445][T19068] syzkaller0: entered allmulticast mode [ 902.626574][T12258] IPVS: starting estimator thread 0... [ 902.626678][ T4935] Bluetooth: hci3: Malformed Event: 0x02 [ 902.749487][T19094] IPVS: using max 23 ests per chain, 55200 per kthread [ 905.636994][T19118] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3849'. [ 905.646145][T19118] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3849'. [ 906.728929][T19118] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3849'. [ 907.211649][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 910.760091][T19140] macvtap1: entered promiscuous mode [ 910.791497][T19140] macvtap1: entered allmulticast mode [ 912.183414][T19170] syzkaller0: entered promiscuous mode [ 912.216695][T19170] syzkaller0: entered allmulticast mode [ 915.220195][T18881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 915.228728][T18435] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 915.257308][T18881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.265626][T18881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 915.361862][T18881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.379695][T18881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 915.418037][T18881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.426490][T18881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 915.460886][T18881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.489782][T19214] macvtap1: entered promiscuous mode [ 915.495173][T19214] macvtap1: entered allmulticast mode [ 915.500954][T19214] veth1_vlan: entered allmulticast mode [ 915.509431][T18435] usb 1-1: Using ep0 maxpacket: 16 [ 915.511695][T18435] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 915.511737][T18435] usb 1-1: config 252 has no interface number 0 [ 915.511795][T18435] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 915.514423][T18435] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 915.514469][T18435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.514507][T18435] usb 1-1: Product: syz [ 915.514534][T18435] usb 1-1: Manufacturer: syz [ 915.514563][T18435] usb 1-1: SerialNumber: syz [ 915.641004][T19214] team0: Device macvtap1 failed to register rx_handler [ 915.662162][T18435] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 915.701447][T19214] veth1_vlan: left allmulticast mode [ 915.749116][ T1093] usb 1-1: Failed to submit usb control message: -71 [ 915.762342][ T1093] usb 1-1: unable to send the bmi data to the device: -71 [ 915.769999][ T1093] usb 1-1: unable to get target info from device [ 915.777279][ T1093] usb 1-1: could not get target info (-71) [ 915.783951][ T1093] usb 1-1: could not probe fw (-71) [ 915.809936][T18901] usb 1-1: USB disconnect, device number 12 [ 916.304013][T18881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.346024][T18881] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.378211][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.385439][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.451250][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.458491][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.693678][T18881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 917.217621][T19257] syzkaller0: entered promiscuous mode [ 917.223158][T19257] syzkaller0: entered allmulticast mode [ 917.282718][T19259] syzkaller0: entered promiscuous mode [ 917.288255][T19259] syzkaller0: entered allmulticast mode [ 919.104458][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 919.112580][ T4935] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 919.138506][ T4935] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 919.138601][ T4935] Bluetooth: hci1: Malformed Event: 0x02 [ 919.479234][T18435] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 919.749706][T18435] usb 3-1: Using ep0 maxpacket: 16 [ 919.757456][T18435] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 919.770339][T18435] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.787014][T18435] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 919.796153][T18435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.825916][T18435] usb 3-1: config 0 descriptor?? [ 919.844464][T18435] pxrc 3-1:0.0: Could not find endpoint [ 920.042245][T18435] usb 3-1: USB disconnect, device number 19 [ 920.864420][T19284] macvtap1: entered promiscuous mode [ 920.878366][T19284] macvtap1: entered allmulticast mode [ 920.888859][T19284] veth1_vlan: entered allmulticast mode [ 920.910439][T19284] team0: Device macvtap1 failed to register rx_handler [ 920.942667][T19284] veth1_vlan: left allmulticast mode [ 922.937778][T19308] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ща^!00000000000000000003000000 [ 924.163393][T18881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.210804][T19312] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!000000000000000000030000000' [ 924.254826][T19312] CPU: 0 UID: 0 PID: 19312 Comm: syz.0.3901 Not tainted syzkaller #0 PREEMPT(full) [ 924.254876][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 924.254981][T19312] Call Trace: [ 924.255011][T19312] [ 924.255030][T19312] dump_stack_lvl+0x100/0x190 [ 924.255091][T19312] sysfs_warn_dup.cold+0x1c/0x28 [ 924.255151][T19312] sysfs_do_create_link_sd+0x113/0x140 [ 924.255225][T19312] sysfs_create_link+0x61/0xc0 [ 924.255261][T19312] device_add+0x675/0x1950 [ 924.255333][T19312] ? __pfx_device_add+0x10/0x10 [ 924.255378][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.255434][T19312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.255482][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.255528][T19312] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 924.255607][T19312] wiphy_register+0x1edd/0x2d90 [ 924.255651][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.255699][T19312] ? __rtnl_unlock+0xb9/0xf0 [ 924.255761][T19312] ? __pfx_wiphy_register+0x10/0x10 [ 924.255807][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.255854][T19312] ? __asan_memset+0x23/0x50 [ 924.255900][T19312] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 924.255980][T19312] ieee80211_register_hw+0x3055/0x4570 [ 924.256063][T19312] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 924.256120][T19312] ? __pfx___debug_object_init+0x10/0x10 [ 924.256196][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256244][T19312] ? find_held_lock+0x2b/0x80 [ 924.256311][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256363][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256409][T19312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.256452][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256499][T19312] ? __hrtimer_setup+0x208/0x330 [ 924.256565][T19312] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 924.256639][T19312] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 924.256683][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256727][T19312] ? __asan_memcpy+0x3c/0x60 [ 924.256778][T19312] hwsim_new_radio_nl+0xc5f/0x1370 [ 924.256816][T19312] ? rcu_is_watching+0x12/0xc0 [ 924.256875][T19312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 924.256927][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.256975][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.257022][T19312] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 924.257100][T19312] genl_family_rcv_msg_doit+0x214/0x300 [ 924.257166][T19312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 924.257233][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.257288][T19312] ? genl_get_cmd+0x3e7/0x760 [ 924.257356][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.257403][T19312] ? security_capable+0x80/0x260 [ 924.257459][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.257505][T19312] ? ns_capable+0xd2/0xf0 [ 924.257559][T19312] genl_rcv_msg+0x560/0x800 [ 924.257626][T19312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.257687][T19312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 924.257731][T19312] ? kasan_check_range+0x180/0x1e0 [ 924.257777][T19312] netlink_rcv_skb+0x159/0x420 [ 924.257832][T19312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.257895][T19312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.257967][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.258013][T19312] ? rcu_is_watching+0x12/0xc0 [ 924.258090][T19312] genl_rcv+0x28/0x40 [ 924.258144][T19312] netlink_unicast+0x585/0x850 [ 924.258205][T19312] ? __pfx_netlink_unicast+0x10/0x10 [ 924.258273][T19312] ? netlink_sendmsg+0x691/0xda0 [ 924.258332][T19312] netlink_sendmsg+0x8b0/0xda0 [ 924.258395][T19312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.258454][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.258500][T19312] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 924.258567][T19312] ____sys_sendmsg+0x9e1/0xb70 [ 924.258617][T19312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.258676][T19312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.258749][T19312] ___sys_sendmsg+0x190/0x1e0 [ 924.258802][T19312] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.258849][T19312] ? find_held_lock+0x2b/0x80 [ 924.258904][T19312] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 924.258971][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.259053][T19312] __sys_sendmsg+0x170/0x220 [ 924.259095][T19312] ? __pfx___sys_sendmsg+0x10/0x10 [ 924.259134][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.259182][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.259248][T19312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.259303][T19312] ? rcu_is_watching+0x12/0xc0 [ 924.259366][T19312] do_syscall_64+0x10b/0xf80 [ 924.259420][T19312] ? irqentry_exit+0x117/0x790 [ 924.259478][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.259518][T19312] RIP: 0033:0x7efe5ff9cdd9 [ 924.259616][T19312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.259654][T19312] RSP: 002b:00007efe60e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.259706][T19312] RAX: ffffffffffffffda RBX: 00007efe60216090 RCX: 00007efe5ff9cdd9 [ 924.259733][T19312] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 924.259757][T19312] RBP: 00007efe60032d69 R08: 0000000000000000 R09: 0000000000000000 [ 924.259781][T19312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.259804][T19312] R13: 00007efe60216128 R14: 00007efe60216090 R15: 00007ffc25a88578 [ 924.259855][T19312] [ 924.962024][T17411] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 925.967396][T17411] usb 9-1: Using ep0 maxpacket: 32 [ 926.886320][T17411] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 926.896209][T17411] usb 9-1: config 0 has no interface number 0 [ 928.487936][T17411] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 928.497158][T17411] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.883741][T17411] usb 9-1: config 0 descriptor?? [ 928.894292][T18881] veth0_vlan: entered promiscuous mode [ 928.908705][T18881] veth1_vlan: entered promiscuous mode [ 928.965940][T17411] usb 9-1: can't set config #0, error -71 [ 928.996300][T17411] usb 9-1: USB disconnect, device number 10 [ 929.192505][T18881] veth0_macvtap: entered promiscuous mode [ 929.241615][T18881] veth1_macvtap: entered promiscuous mode [ 929.411548][T18881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.454701][T18881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.503861][ T5899] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.550894][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.370952][T18210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.517891][T18210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.337256][T19390] syzkaller0: entered promiscuous mode [ 931.520996][T19390] syzkaller0: entered allmulticast mode [ 933.730677][T19397] syz.7.3923 (19397) used obsolete PPPIOCDETACH ioctl [ 935.352498][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.360495][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.686821][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.698112][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.418967][ T4935] Bluetooth: hci5: command 0x0406 tx timeout [ 939.416265][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 939.562958][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.741067][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.258927][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.266706][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.706174][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.733645][T19434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.309001][T18806] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.373466][T18806] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.583066][T18806] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.684954][T18806] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.828966][T19484] syzkaller0: entered promiscuous mode [ 942.834514][T19484] syzkaller0: entered allmulticast mode [ 943.137399][T19493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3777'. [ 944.490849][T19500] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3945'. [ 944.577293][T19505] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3945'. [ 944.696267][T19511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3948'. [ 944.733005][T19511] netlink: 'syz.2.3948': attribute type 1 has an invalid length. [ 947.117008][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 947.229653][T19550] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3963'. [ 947.430689][T19550] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3963'. [ 948.029374][T19555] program syz.2.3961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.687693][T19561] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3965'. [ 948.743114][T19561] netlink: 'syz.7.3965': attribute type 1 has an invalid length. [ 948.875627][T19564] syzkaller0: entered promiscuous mode [ 948.904683][T19564] syzkaller0: entered allmulticast mode [ 949.098963][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3968'. [ 949.477430][T19581] tipc: Started in network mode [ 949.482376][T19581] tipc: Node identity 9290d91c0a81, cluster identity 4711 [ 949.578164][T19581] tipc: Enabled bearer , priority 0 [ 949.656847][T19578] syzkaller0: entered promiscuous mode [ 949.662481][T19578] syzkaller0: entered allmulticast mode [ 950.510500][T19576] tipc: Resetting bearer [ 950.587799][T19599] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3978'. [ 951.188541][T19605] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3978'. [ 951.464460][T19576] tipc: Disabling bearer [ 951.633829][T19469] tipc: Node number set to 2551306524 [ 951.896998][T19621] syz.3.3984 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 952.538070][T19622] macvtap1: entered promiscuous mode [ 952.662635][T19622] macvtap1: entered allmulticast mode [ 956.208851][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3998'. [ 956.318094][T19668] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4000'. [ 956.355703][T19658] tipc: Enabled bearer , priority 0 [ 956.428364][T19672] syzkaller0: entered promiscuous mode [ 956.434305][T19668] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4000'. [ 956.455472][T19672] syzkaller0: entered allmulticast mode [ 957.809282][T19657] tipc: Resetting bearer [ 957.959523][T19657] tipc: Disabling bearer [ 958.094181][T19686] macvtap1: entered promiscuous mode [ 958.099565][T19686] macvtap1: entered allmulticast mode [ 958.178905][ T5935] unregister_netdevice: waiting for bond2 to become free. Usage count = 2 [ 958.585305][T18901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 958.640666][T19467] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 959.267346][T19467] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 959.838151][T19467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.872741][T19467] usb 1-1: Product: syz [ 959.878260][T19467] usb 1-1: Manufacturer: syz [ 959.883400][T19467] usb 1-1: SerialNumber: syz [ 959.928045][T19467] usb 1-1: config 0 descriptor?? [ 959.949181][T19467] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 013 [ 960.155472][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 960.170463][ T5638] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 960.421636][T18901] usb 4-1: Using ep0 maxpacket: 8 [ 960.584734][T19467] i2c i2c-1: failure reading functionality [ 960.599183][T19467] i2c i2c-1: connected i2c-tiny-usb device [ 960.614110][T19467] usb 1-1: USB disconnect, device number 13 [ 961.098732][T18901] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 961.106408][T18901] usb 4-1: can't read configurations, error -71 [ 962.225189][ T5638] Bluetooth: hci3: command 0x0406 tx timeout