last executing test programs: 18m55.185951786s ago: executing program 32 (id=1013): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xd, 0x1c, {0x1c, 0xc, "c978dc6cdc61f2f01a8e7c5f4e52532804b7cc18323ee04e436f"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0xc87226f2f5d88d70, 0x31, 0xe9, "5a7b4cab4a84c7b769a68344307b1d46dd2515683ca4887332cc5f488909032c4537236fab07c3b90e0ac8161ddfa89d478a9f2f1f854e47315f7df31be5f0f8de294b0cc141ddee88013e775bb612d0bcaa1bee3d06afbbada4510998b0b130dfd2c0a8769659a2f82a18def47d57f2a156450628739c8c463290498ada7a5f7cae6b7aa92490b168c0e392cd9517afdf11786a16e30e960584fc3a1b2d61f02832771c4f09572b40418ddd251a7e1630e447bfc3834cc3cc3794a3d9fd0f105fedd1c3740ffbabde4aa0db11e088700282eaf406ba6fb1b71e76bb30b8e5cf425b6d3430cf5980b5"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "2a2ad6b5f58d16169cf3d2418dfa68b00e6940fd16422cbb557d4f9b4d0287392da5459260c9c7aee85bf813bb79de"}}) 15m56.407100954s ago: executing program 33 (id=1577): capget(0x0, &(0x7f0000000040)={0x7ff, 0x1, 0x6, 0x40, 0x51, 0x749d6600}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) move_pages(0x0, 0x200000000000019a, &(0x7f0000000000)=[&(0x7f0000002000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) mlockall(0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 14m30.014582946s ago: executing program 34 (id=1841): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x640, 0x1dd, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1}, {0x4, 0x39}}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xa5}, 'port1\x00', 0xe3, 0x91c07, 0x2, 0x6ebe, 0x6, 0x3, 0xfff, 0x0, 0x7, 0xf7}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r4 = gettid() tkill(r4, 0x12) getpgrp(r4) close(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x7, 0x1, 0x2, 0x1, 0x7ff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) 13m34.023826107s ago: executing program 1 (id=1966): chroot(&(0x7f0000000300)='.\x00') r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3a}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 13m30.821828235s ago: executing program 1 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x94, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x94}, 0x1, 0x0, 0x0, 0x40044}, 0x20008040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r7, 0x211, 0xfffffffe, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 13m28.951079848s ago: executing program 1 (id=1973): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) chroot(&(0x7f0000000300)='.\x00') r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) getcwd(&(0x7f0000000180)=""/164, 0xa4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe8}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000f00)=ANY=[@ANYBLOB="90040000", @ANYRESHEX=r1, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x10000}, 0x44014) syz_clone(0x20000000, &(0x7f0000000740)="0a71e14c770f667fa36286cc6af476cdfaab170d607884493b3b852bf69fe13f2c23af769add4e25dab7135306436dd2ab73311275306b0d0f6f9f6826060fbe58752984aff871e99a7e69e46ccebe17f469a0ece5634b911c8ac86c6f8a1131f22c446c80417e10ce4332452b8cb8b72fe238df4ac37db49185e5fe91ad40e63e06b4e8aa5e18502e091cea424765b470c0694a7232b69141578516aee792301e8008bd32380ce6f2ccaa832280139b1add8cef", 0xb4, &(0x7f0000000140), &(0x7f0000000440), &(0x7f00000013c0)="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") r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3a}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 13m20.92997126s ago: executing program 1 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x89b}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a", 0x1f}, {&(0x7f0000000680)="cc18101d6bec7dadde", 0x9}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x5c, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d30"}, &(0x7f0000000700)=0x64) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13m20.447264055s ago: executing program 1 (id=1982): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x66847000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsmount(r6, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000200)="71937cd5a5b42ea76db78d16843daace1eb7d8ac1cddf20a7d0614796f0be06ce4a8651deaf25655cda8957ea5ee880ee8e158372894ad", 0x37, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000000380)={0x6, &(0x7f00000006c0)=[{0x6, 0xd6, &(0x7f0000000080)="db7bb2bc7013091cd447ad35bf19c5ae080995e9152f45f179ed28df81c9104981a324833c42c135adb303cccb9f881c042c180e43566f99a8559bae9077d90719851be9eb8431d670b93847ed2791ab455543ff3e4029d66c308ba506bdb6df1e3a9f22ed38dda85816ce7a401d4948c366ff283b0aded111ea7f7153fd139d2ffb5d73211a15966f2d8902fc51850d8e0cc2d3aa258e4e4fbe079e243642adcaef72d71d301e80fe565f4ee2824afb5ce2955dc62f631c968ee6a3db3faaf45fbf0162fc75138f7177e5d21c7ef93c7eb65088278d"}, {0x5, 0x34, &(0x7f0000000180)="3fb4354f0f391653f0b724c5181d5b9b0b231c46e8ce9913a7fd48fd3dd44cc2e8be97b00a8b1d335b0e26def668ce455c025768", 0x1}, {0x2, 0x5f, &(0x7f0000000300)="dc95a5fdf85b3d20494dd1766e5d0a93de0197c5f60d404a6b52f71497a4e1e2c060778b39b3294c7d69617f61ee9f6206415a36d0b4b90232fbca5774d053084fa592a32cb753425de9a2d9fc2e63579b8921e281fad8c9605c8d7e5301bd", 0x0, 0x1}, {0x9, 0x1b, &(0x7f0000000240)="9ab1c2411308785621ff5eae82e08abf5cddea61b71e2f1e3c5946", 0x1, 0x1}, {0x10000, 0x82, &(0x7f0000000500)="344d95b2cb2b964b104cbc8fdebe5f5f6402d4e38c7cae70e7e530719cfbed311a4552c173105a209a44ef659c1956c7f1d2c7e904508cb80793aba3b8b860db8d31bb54df91f63b805b660400d01bc9dea273bbec4ffb6cdb20bac2a9ff4b8e1ae4aa19c881893fc0716d7aeec6a5df26e47627b1430490b83579891e4af64e2504", 0x1}, {0xd9fa, 0xe5, &(0x7f00000005c0)="47f02519fa61152edc08ee7d6a9c36364d97c55b20e5d8be4eec472b1048edbe7ce8d06fa3edad5b78c69a2b630ea9e166246628a9ff8627f0d7a3b3fd17fb5659c7cde57b66ae215dab74fb9cf7d2d4d3f8af68a5b4beac64fe9cefacb7f6efe782f11f6efe4d59db7c3459a4861eef8a4a7c7a2eb993f91921e58c131fa69d4b9cea4823eaec8b3c32817979984310157faac16df2bf7d5fcf9856a894a17f7bae7f57ddf2ba540ff073f71052c540639e6f3b518e08864d15270bf04e52e2c535d17b2b50c6c40232173ef232e533d22118ebd55d3878f988731c2d46370d97568480aa"}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, &(0x7f00000004c0)="efd2", 0x0}, 0x20) syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4cb032021042302bdb10102030109022e00010000000009040000030202ff00052406"], 0x0) 13m16.552620432s ago: executing program 1 (id=1985): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fdatasync(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 13m3.041887711s ago: executing program 35 (id=1983): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r4, {0x9}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000023c0)='attr/fscreate\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000140)=""/113, 0x71}, {&(0x7f0000000200)=""/72, 0x48}, {0x0}, {&(0x7f0000002400)=""/42, 0x2a}, {&(0x7f0000002440)=""/224, 0xe0}, {&(0x7f0000002540)=""/68, 0x44}, {&(0x7f0000002600)=""/238, 0xee}], 0x7, 0x1, 0x7) 13m0.950010061s ago: executing program 36 (id=1985): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fdatasync(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 3m55.579006084s ago: executing program 0 (id=4637): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x758a, &(0x7f00000002c0)={0x0, 0xf657, 0x1, 0x9, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 3m55.503907904s ago: executing program 6 (id=4639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a3c000000120a09000000000000000000020000000900020073797a31000000000800044000000000"], 0x64}}, 0x0) 3m55.376139564s ago: executing program 3 (id=4640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000100)=0x10) 3m55.223748498s ago: executing program 0 (id=4642): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='7', 0x1, 0x4}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m55.163677893s ago: executing program 6 (id=4644): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 3m55.044244387s ago: executing program 3 (id=4646): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m55.00002946s ago: executing program 0 (id=4647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) 3m54.796428002s ago: executing program 3 (id=4649): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff4002}]}) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) 3m54.770712845s ago: executing program 6 (id=4650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xcc, r1, 0x1, 0x0, 0x200, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m54.691556832s ago: executing program 0 (id=4652): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000336000/0x3000)=nil, 0x3000) 3m54.61996032s ago: executing program 6 (id=4653): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 3m54.537403485s ago: executing program 3 (id=4654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a3c000000120a09000000000000000000020000000900020073797a31000000000800044000000000"], 0x64}}, 0x0) 3m54.159930341s ago: executing program 3 (id=4657): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}], 0x1}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m53.927823991s ago: executing program 3 (id=4659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 3m53.500336663s ago: executing program 0 (id=4662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) 3m53.31245996s ago: executing program 6 (id=4665): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000080)) 3m53.198872688s ago: executing program 0 (id=4666): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x38, r0, 0xc47bd6264ba386c1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x80) 3m53.179862074s ago: executing program 6 (id=4667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff0200000000000000"], 0xfdef) 3m38.048393106s ago: executing program 37 (id=4666): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x38, r0, 0xc47bd6264ba386c1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x80) 3m37.943034701s ago: executing program 38 (id=4659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 3m37.859900582s ago: executing program 39 (id=4667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff0200000000000000"], 0xfdef) 2m19.527743912s ago: executing program 5 (id=5123): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10001}}, @TCA_NETEM_DELAY_DIST={0x14, 0x2, "ea14d8dc4ff979c3ba9e51dafb9f9580"}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x8, 0x2, 0xf, 0x6, 0x7}}]}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) 2m18.992801147s ago: executing program 5 (id=5126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 2m16.172378242s ago: executing program 5 (id=5137): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m15.896565735s ago: executing program 5 (id=5138): r0 = syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000015c0)='./file0/../file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r0, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m15.612838436s ago: executing program 5 (id=5140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m14.407818309s ago: executing program 5 (id=5145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m13.623555048s ago: executing program 40 (id=5145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 10.302614558s ago: executing program 2 (id=5607): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad0, 0x10, 0x1, 0x7}, &(0x7f00000000c0)=0x0, &(0x7f0000000480)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28980) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @local, 0x6}, 0x1c) read(r1, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000002500)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32=r1], &(0x7f0000000440)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, r3}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)={0x287, 0x7, 0xfffffffc, 0xd, 0x6, 0xebc4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) 9.802557352s ago: executing program 8 (id=5608): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @enum={0x3}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 9.266116602s ago: executing program 8 (id=5611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1b8, r2, 0x800, 0x1, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xca}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x27}, {0x6, 0x11, 0x88e2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8041) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010007, 0x0, 0x3}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x80000000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) 9.087882351s ago: executing program 2 (id=5613): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.842043456s ago: executing program 9 (id=5614): socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) 8.761509531s ago: executing program 2 (id=5615): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7, 0x13e, 0x89, 0x7ff, 0x2}) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x7f) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) read(r7, &(0x7f0000000340)=""/209, 0xd1) 8.51519153s ago: executing program 7 (id=5616): r0 = socket(0x1e, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) 8.346219339s ago: executing program 7 (id=5618): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) r2 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 8.289630569s ago: executing program 2 (id=5619): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 8.108077969s ago: executing program 9 (id=5621): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @enum={0x3}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 7.275675895s ago: executing program 8 (id=5622): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 7.06121703s ago: executing program 2 (id=5623): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x80000001}]}}]}, 0x62}}, 0x400c) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@deltclass={0x480, 0x29, 0x8, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {0xe046b45be2e24f5, 0x10}, {0xa, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x448, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x342, 0x9, 0xf, 0x3f, 0x4, 0x8, 0x9, 0x1, 0x6, 0xfffff9d8, 0x4, 0xa9b2, 0x2, 0x7, 0xfff, 0x9, 0x6, 0x4, 0xa077, 0x0, 0x2, 0xd, 0x0, 0x0, 0x100, 0x3, 0xffff, 0x50, 0x4, 0xef9, 0xfffeffff, 0x8, 0x6, 0x1, 0x400, 0x264, 0x7, 0x10001, 0x1, 0x0, 0x6, 0xffffffff, 0x9, 0x3ff, 0x1, 0x4, 0x6, 0x2, 0x83e, 0x7, 0x4000000, 0xfffffffc, 0x2, 0xa31, 0x6a0, 0x0, 0x9, 0x8, 0x4, 0x0, 0x2, 0x8, 0x6, 0x8dd, 0x2, 0xe, 0x1, 0x9, 0x2, 0x1, 0x3e4, 0x2, 0xa56, 0x7, 0x4, 0x5, 0x3, 0x0, 0x3, 0xff, 0x4, 0xb47, 0x3, 0x3bd4, 0x3, 0x2, 0xffff, 0x95, 0x5, 0x2, 0x9, 0x8000, 0x2, 0xff, 0x2, 0x4, 0xab65, 0xfff, 0xe8, 0x75f, 0x3ff, 0xf2, 0x9, 0x6a4, 0x3, 0x7fff, 0x10001, 0x9, 0x4, 0x3ff, 0x60000000, 0x21, 0x3, 0x1000, 0xb, 0x9, 0x101, 0x6, 0x7, 0x6, 0xb, 0x6, 0x1, 0x6, 0x1d, 0x4, 0xfffffffe, 0x4, 0x8, 0x9, 0x8000, 0x61b1, 0xfffffff9, 0x4, 0x4, 0x618, 0xc0d, 0x8001, 0xfffffff9, 0x8, 0x1, 0x1, 0x8000, 0xfffffff9, 0x5a51, 0x4cf4, 0xffffffff, 0xff, 0x7, 0x100, 0x10001, 0xfffff140, 0x3, 0xffa, 0xffff7fff, 0x2, 0x94ca, 0x7f, 0x1, 0xff, 0x75c, 0xf7, 0x7, 0x6ecc50e7, 0xc06, 0xa1, 0xffff, 0x5, 0x4, 0x6, 0x2a, 0x9, 0x3ff, 0x2, 0x5, 0x2, 0x48, 0x8, 0x2, 0x2, 0x6, 0x40, 0x1, 0x9, 0x2, 0x1, 0x70c7, 0x8000, 0x40, 0x7fffffff, 0x0, 0x5, 0xfff, 0x7800000, 0x0, 0xf, 0x0, 0x3d61, 0x5, 0x6, 0x7, 0x4, 0x3, 0x5, 0x8, 0x6, 0x21c, 0x7, 0xcd26, 0x9, 0x9, 0x9, 0x6, 0x6, 0x2, 0xf8, 0xb, 0x1, 0x6, 0x6, 0x7, 0x0, 0xfffe0000, 0xfffffffc, 0x5, 0x3, 0x64, 0x4f5, 0xffffffff, 0x0, 0x7, 0x2, 0x7, 0xf, 0xa35, 0x87dc2800, 0x33c3, 0x6, 0xe96, 0x7, 0x100, 0x7fffffff, 0x1ff, 0x3, 0x0, 0x1, 0x361c, 0x9, 0x5, 0xffff, 0x6, 0xa, 0x8, 0x2, 0xa, 0x3]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xf9, 0x2, 0x6, 0xc, 0x0, 0x9}, {0x2, 0x0, 0x5, 0x49, 0x1}, 0x6, 0x831, 0x5, 0x1, 0x200}}, @TCA_HTB_RATE64={0xc, 0x6, 0x2}]}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x480}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x16}, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x12}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r9 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) 6.931783875s ago: executing program 9 (id=5625): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x80, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r5, 0x1) flock(r4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f2096", 0x6}, {0x0}], 0x2) 6.832021865s ago: executing program 7 (id=5626): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000300)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x50b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x77cc, &(0x7f00000008c0)={0x0, 0x6429, 0x10000, 0x1, 0x196}, &(0x7f00000002c0), &(0x7f0000000280)) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2186a, 0x0) 5.657210845s ago: executing program 2 (id=5627): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xb, 0x84, {0x84, 0x22, "3927bf8847fe34f05d50bd755f5b2dfe5b5721b50967f928eff2d0356082e3d212203b295a5a65be4036866cc2763548db806416549ea012a1dc9d5986cd02f0432866038a7df1eb6d98ed6b4b1060dc4fcdf075262b6aa615e26e26ec3114d594e3e33642cf8fefe4c1323356a530c94ef6e00690c46e8a59f86f3f96c9f51aa73e"}}, &(0x7f0000000100)={0x0, 0x3, 0x74, @string={0x74, 0x3, "e8d4ce0153da9843344e634d142854717f9dc44ef36c9dc06ba57c9e0589025ff97db2e390269e186f65dcfdce50f6201e1d3635ce0debaf51469beb1b05f0ef1d9a93718273343254ce5c9b0a0a7bac6a5013705a219c41fee101f1ead34fc3fa9cab55b261925993fd70c7babd4d51bf80"}}}, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x7a, "6a39264e712139e8d2979f839ac1f2caee1c1c6c9c5417dbd9db0435135388f5550c731c8f50997b3c922f04af16fd89d646f0a6b2ff90301d00235c870de59845922e7801a5c016991012ca605f964fbdf836ac8c4a0606bf126561907929f47e63e4c1cf23a5ba3e938d127b06927517dfb5a78805000a3fe9"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0xd7}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "c11382f13f137c8465d407679724a493b82506823c1e34179162a6f9e4ad32543bd7e8c0c9d74d0da48f188b44bd5b"}}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000400)) r1 = memfd_secret(0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x3, 0x0, [{0x4f32f3a6d39964d7, 0xb8, &(0x7f0000000440)=""/184}, {0xf000, 0x6c, &(0x7f0000000500)=""/108}, {0x5000, 0x6a, &(0x7f0000000580)=""/106}]}) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect(0x1, 0xf56, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0xb5, 0x2e, 0xd1, 0x40, 0x10fd, 0x513, 0xb843, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf44, 0x4, 0x8, 0x10, 0xc0, 0x2, [{{0x9, 0x4, 0x25, 0x9, 0x1, 0x8b, 0x7e, 0x6b, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xa11, 0x6}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x2, "32c15ba9"}]}, @hid_hid={0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x4fd}}], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0xcd, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x3, 0xff71}]}}]}}, {{0x9, 0x4, 0x78, 0x0, 0x8, 0x32, 0x33, 0x88, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x9}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x5, "bd5fab17a8b8"}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x6, 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0xc8b, 0x1, "5f39e4"}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x54, "a5b3aa"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x2, 0x8, "476230b0"}]}], [{{0x9, 0x5, 0x5, 0x4, 0x200, 0x9, 0x2, 0x2, [@generic={0x4d, 0x22, "5a9f76e3f73a8a77dfc3b89ee70fa5b275f6232bcd81099be168b7063e1b84cc00417e3eb9aefe2178fdc021d461a79ec4a53da307774e2d5c1b9c2a548168ac77a4c3eb3737d2b1be8ba9"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x6, 0x6, [@generic={0xfa, 0xc, "318eb4999a903ccada76523dfe1584baf6016779d21ebc5291ecb445580429cb67509797b86df1edcce5607a7d704d129d2aefb341effd61366f7ec262e13d25c68cb7f7add492cf245f8c454203b88d919e12566b842618d7d4c21109ebc216bc677e874aaea7b3d8836a14ef8f5cde5ad0306cc14b38f3b4ef0d0f4d42f1d851e7551ddb1f6f9608bde8dcce56d769d1712f8a0f05fb6284875fc57c21ec40d44a918a424979084c5003d620be43e7b962e552f2478247c8f03e27174075693f83823d42257bc15afccb46627febc9269cb4519faf828f4f33ab3de3a2c9ca4f625bb9eaeab373c0ce2d2fe380e6520eb3a473bfcf878d"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x240, 0x4, 0x3, 0x6, [@generic={0xc9, 0x1, "675ad7252cf34d2b5efd0d9a7f8a61f9457d166cfabc96f23330fc263d653f63487c785d65a21069b4a4a07da8d238e8dab722ae406918464408773e06a6fb18d099d0b6169ccfd065104c7d53de3640ef37be7074122279982cb9c1757cd2f0b99fcfea74976ec085c7bc9e01b2d204f83d89d5bbc1ced0ec59ab3a3be2a20c3b52d6f041e6321fc3074bde57c6a0eb0fbff2920a3f595ac80d2fb242c7b89437c17dcf54bfc9aaf8a00dc09932f632587e8f7ebe4abf435f6c7bec6d7aa9ca4c20982cde059b"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x2, 0x4, 0x5, [@generic={0x38, 0x6, "5a7f67844bbdbfb816d44a27e3382e0382917bcb23009e0ae4e29b99810913d17be8182a84fd10bc9943e0e781e7ed82e44ee19a5482"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x1}]}}, {{0x9, 0x5, 0x3, 0x1d, 0x8, 0x7, 0x9, 0x7, [@generic={0xa7, 0x1, "27785fbbefeb5d688ae62d5c319caff2c873411e92be5a1759be06e1d41137a16d8207699609a039bd17ddc5dcfdbe0f212189c5a483c8084774b9b707ee50b17183de887559afed55527c2c3c3ad1c4d74c1afad72f9d27418a222e21b1deb278092038ea6bffd16919fbb12065ca3584d83146075862ec2ac3454d7c8d9d76af139e5f0089cad641c18117032238019e70c3978aceb20420caffce3d81adadaceafcdcc2"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x10, 0x0, 0x8, [@generic={0x54, 0x23, "4f0931c725119485a11494067ac72a7796bdb43c62c777d2c3620457576e98e2bf948cb99345e8db08188b04eef3eae7f8531337d639e78f4eec627a58cb4560f8408282dfc5d170140f5317de9e2cc680d1"}, @generic={0x38, 0x2, "44daee48d4f7e62923162d526515d7ae723f28077eb35b37af097e9d723be211db28948ef8607607f98074a6ef0384767c1c114b1570"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x8, 0x3, 0xd, [@generic={0xd0, 0x6, "91ee1810f2c4d7ac22b6d4bbe65b3d26cf6de16b1cef7e4714968421ed92ef90b2ab68bce330b6adb8a0ee27348b03b8e282544a25921b5e89db0a233ebe1e915d4ef7a30140c5904dc2ea83eb2c1bb0dcebfb8ee01534af815e9bc6f1803be5deac844dc30afc58a642babe524746a9126c446b1829d257b10c44919c762c88c8c289ff7887d342cc824dd5f072cb9574af19ac906b687d90f37f4c80ee12e55474dcacc8699189370a0e6aab3c603464f3eb608e46ddbb3d25a2afce7f7ef9845b5e86fa2f5369df936211c2b2"}]}}, {{0x9, 0x5, 0x825b5aad01d267f9, 0x0, 0x400, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x800}]}}]}}, {{0x9, 0x4, 0x4a, 0x7, 0x9, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xef39, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x1, 0x6, 0x33}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x4], 0x7}]}, @generic={0x8d, 0xc, "b83c834f6f1cd891bd0178714288fcd4f5f456fd68202e16e502b38905f6bd90b4ad1eb85eaf5a25d9401dfaf81df05c7a9bb3404a8a86bf8642cc99244671918397866908e3268f930820f5be4bcc73b433f7c7f842b7fddec07ad2b15c42136859029ce66275ed193b6233a69ae7fb9a37fbe7b75a49144eb36f10b1d625077c839726cffa100a343633"}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0xc0, 0xf1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x52c7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x1, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @generic={0x73, 0xe, "174c1b422e4672028207c5688ecbee933d9f99fe415ba74a0eb1f5a17565cd45baa56be7ec0c524c8e3e76a267987614ff8dd777ab478eb349746eddbead44b4dc2111fb165b5ff020b52602087de34a0c0c5687afcf2aa0bb6e08a1686016c6ac7762440bb6cbed23e8394bdab3119213"}]}}, {{0x9, 0x5, 0x7, 0x1b, 0x200, 0xe, 0x82, 0x8, [@generic={0x5d, 0x0, "d24280f9c8cf1e3e4768a233f6ee6e2522d7ab95c849204713747bc8c4b009742fa4cbd8a8c5ba3e1baa42d19a13eddb2a57413b6febe02b651244175b103ddd3ec24ea25e5e3b4d929691b42a47eb66376161b56c85663a272014"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x35, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x90, 0x400}]}}, {{0x9, 0x5, 0x80, 0x3, 0x488, 0xf9, 0xc, 0x4, [@generic={0x7a, 0x32, "8da89f10e90c42ca8538f6a78f9910f9c5e5475e4870c108392083e184827bba0f63c35ee8045be6fe15ecf7792a4ecd8167d916978402fa525145a322149de63299f971ee94fda9453f055e810240f80d0128cb0e648bd2fa566cd40578a52e311c9e6017bdef5e5a7e3f577cb7f7ebc91bf987eda047bb"}, @generic={0xe2, 0x23, "9daf9794c08959f1df83fce86aa37c4b531b2a4c8ebc52c99cf12b26174ec795941709345873658eed5789c15a3bfe01f8d4bcfbad9cada2b9546d457568d4b04e60e5cfead1e7bd06731d9b21c6c8430478af725f7e1e0a9610aa9bbf6ac6c71669fd009918d045da2d1639e88a565e9a170500ded6f31f5c40d5755595c6d9e2fc7b3bab147ef1cb441d0f31f68e141020bbbcd7884875daf1c34b375b5773479855e38f64fd5c672368b3c8433184521c16546ed019ef2ec5c77ed52019ab00479fc6e78ff8d592b6f4d80f625678138f500eecc0d67ea20e0e249cc96be3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xc8c}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x14, 0x3ff, 0x7, 0x2, 0x9, [@generic={0x90, 0xc, "e193254c94c1e9a91f9597dcf62ba36d25e8fd7ef0c09bd4a016e1040d7b65365dc7a58027f04271db84f1c4f6a8c3309b91a5d601425053512e0c952520719e78df3953ece6f101a8fafe7e46a36599bd01b9083512bcdc4eed4e7ac4906f39218f4fcfbaad9f8c7062e420b3a03a1b2e8b5bb699b69dbeacc230c873623808b1397556eaa4240f97d4fc84ba54"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x57, 0x2}]}}]}}, {{0x9, 0x4, 0xd0, 0x3, 0x10, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x3ff}, {0x6, 0x24, 0x1a, 0xe771, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0xfff8, 0x8, 0x80, 0x2a, 0xb44, 0x7}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7f, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x401, 0x80, 0x9, 0xd, 0x3}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x89, 0xa5, 0x1, 0x9, 0x2}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "7305dc6f77"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x7, 0x101}, {0x6, 0x24, 0x1a, 0x4, 0x2c}, [@network_terminal={0x7, 0x24, 0xa, 0xed, 0xcd, 0x7, 0x20}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0x8, 0x2, 0x0, 0x5, 0x40, 0x1, [@generic={0x17, 0x22, "4aca29ddd99c9d938af5685427fdcb65604b3f376c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x57, 0x5979}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0x7}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x6, 0xfb, 0xf7, [@generic={0xfb, 0x23, "2dddc75b37984b5e9282842e3bba1b0c4a69ad9fa01254097a678fc9383f2722b62fe990f56a7c3e618c7fb09e1462409a6dbc00a880877f289137547d1eca8c0a2abab19684e5b3095daf6ea145fb9a0c0b17794085fa9ba4e356937ce5f0d62394ad38c8eadb2ccae97ece889369f4aa1fec7bcbe0e083c5df85f0e9a961e890f6bb2adb0a29cdde8681cbf3c9d827ea081e1848b972bac4733801cd01ebb06450463ce09de35741581e3a4f421b4075b40a1a88b6ad57ffc585c762c97315f83b8d7e0ba2c7c1f6f2f9c55d6fe0da4ccf81181cf0011410d38f9e55d115b4ef9297e6fb1d1810eedeba7a9216398eb696771d63fc0b9e11"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8d, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x2, 0x2, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xa, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}, @generic={0x8e, 0x6, "d5cdf97bc68a86ea36caaf8f0c462eaf0191ff3da85d8155cd2739c613d2531e803f44cdcfad9b5663a9b4309e292d758787a7bd5ab931712e735b0cfc64107fde9612e231ebd119cf486880d83bd3bacdabab69e233894ac367b8d3575cac32968ea6127c8b8650589c69d48eb5afcbe345cddbb0ad661994be253db2bbf7f7313a548450ac22f628329277"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x50, 0x1, 0x1, 0xff, [@generic={0x53, 0x0, "2c541e58d1836cfb1c8dd7986be1bc95e459cb5d7b655faf2bb1b60bb43e37f93386cc20823c3ee4ff82964568e662c0ba35337fbca60fa374779e5b618f80ad2ac3cb25624920c815d74e881ba191ada2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xf, 0x1, 0x4, [@generic={0xbc, 0x21, "ff7497b343f0cd83eaa265f24e2b7e1c3d9b5f44c13bb5a36dfa82234ba1b04cad571e497ea1a99dd86ab9c3ddcbafb959ad383c139fc4b79e9aae2e7049682373f3244f48c91286873dc05b8599fd577a1931c453ddaccdf7855500914ee9af341b7f6e8a8df8f7d795159196dc6ee772384473082cc77ee6acf18b0acb7b3d02828ac733fc77570a4753503a0a393178bfdb7817edf82a7264ea5bbb00e3bcaea39921ebaf25bd9389facd84c21345f0919fed65c229d36fb0"}, @generic={0x7d, 0x31, "4bde3f7c00b0ad3856299d02ba24fde5ffdd698b32ccedb6439a255a09625cd723c43fd4a904690b590c6c9ece0a6c53db214e057f2beb443389b027bb93681b1b8f5f67b007840c8e6e8b2d0b7e581fbb328b431bc4b83939a53944520d22f966cde4a9b644e01123e30b6969f4d93f5d18e8bf8c4973a6633589"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x458, 0x9, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4000}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x9, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x1bec}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0xc, 0x3c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x99, 0x144d}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0xbd, 0xc3, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0xb, 0xc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x5, 0x4, [@generic={0x37, 0x12, "903284c3723c0735eef7b46410fa9d1dfac1c8a4d661c9b924ba8326311630e7aef473ffcb1d0ba3bcd97d8cb39b944963b8c314f6"}, @generic={0xfb, 0xe, "9e7eb2045f755c8b185843b2952c43724807ca0a2ec61d48beb668b1116a08406f84ec908eb678a33b95cafa13c80a4da6540b9f911d70d100617d7feabeef77d3009edff32501797debdb10b867c9fbd880e5b4f9487a3b8ee1391b863f9713a75b5144106a4b5ee3a9ad23452bbbdcf68c3397d30bbd7168c68d7907014f4d369bdc3f7e2b637a8ebebc53af4320c29b7cb2875062e7f9620b93b4188d0e751a25b133b0cdeec536d8e9edbbd9b2f7f5563f0c11f2150bb6726b55e74c39535d02893ebbaee11e00716d1015dab5ba5e001d46c6bbec150c2c2b91b6410e3284b3ceb7e598966f945264e50f1d9e43621ef6683b1fa6341f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x0, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x5, 0xe, [@generic={0x4c, 0xf, "84eb0e00276231ea1af023a105c6c92d20b52b70264f5811b8e398cdb37a75686902445e409aa79e83acc19507c24f704c4e9060b95a17bc631bc27d7de5635fc4ff89bf5a824831f605"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x1, 0x3, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x310, 0x2, 0x3, 0x8, 0x10, 0x1}, 0x2e, &(0x7f0000001680)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x5, 0x0, 0x800, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "15d082847036cd313b5a17c50179949e"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x448}}, {0xc, &(0x7f0000001700)=@string={0xc, 0x3, "2cf1ba9d6f3fc79ea42c"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$sierra_net(r2, &(0x7f0000001900)={0x14, &(0x7f0000001840)={0x20, 0x7, 0x6a, {0x6a, 0x9, "33fd58274be84df38e4c53b2789350d2cacd7b1fa9d1ebbc01fbb5a37f5ee14ba00f4227247e20b2dcba9939689b6f10714d39d4673d2b17e04d1ce8c7b270453c7e86d8d941fadda7e163322dec60454e86bc2f21d9b4070283f37468e2c1f145ccb0a64a19e6c2"}}, &(0x7f00000018c0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "feed9a215bcce846f06fd4875ca5de68"}}}, &(0x7f0000001e80)={0x1c, &(0x7f0000001940)={0x20, 0x3, 0x9d, "14070d3a46b9ce986bccdbcad5a0603eda744da70d761eaeca75f3817a07b8a0adf2f8c579c42fd83a4731f42846744541a0c06ccea1234fd08fd8100de594b3777fefdbbccd7802a0c44ee9c5b03e53ab15869cadc9108a075fee6d961c45052c756dd5e07a25b37f698302364a77a827a772bdf3f901ffcbb1f1394e62a29f112339843f66af8a7d5ac6fa66e3cd5aa037a5590e9810d67dc0600296"}, &(0x7f0000001a00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001e40)={0x21, 0x0, 0x2, "36c8"}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001f40)={0x14, &(0x7f0000001ec0)={0x40, 0xb, 0x2f, {0x2f, 0x24, "a7a1e2ca7417176df4c7e31303876fec9819c6994aeab9e1b4bf021439dfd24a92e066c57ea7d3f5e443781cf1"}}, &(0x7f0000001f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000002140)={0x34, &(0x7f0000001f80)={0x40, 0xc, 0x7a, "ddd54b95e18416bf2e841b73f21ffa203de54d9444a4c456601f8635cadb0abec5dde017fc755a49e2d58fd60c0d27e4c4fa77c8ad536880adfc54c8c7e1672acef278d93bfae0b370e7a5f48fd133f75237e039fe1f8002d80f37c6dc7d6b382c40ca199fad432834ce6c2b41792568296e4eddea4847ab6d8c"}, &(0x7f0000002000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002040)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002080)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000020c0)={0x40, 0xa0, 0x4}, &(0x7f0000002100)={0xc0, 0xa2, 0x2f, "a7f12cdb7c3b4e1a9c9beb7bbf5ea6a546179545190f721301cdc16a35b594124beb74715aed66553b0289745a29cf"}}) r3 = socket(0x18, 0x2, 0x5c6) syz_usb_control_io$uac1(r2, &(0x7f0000002280)={0x14, &(0x7f0000002180)={0x40, 0x22, 0xb1, {0xb1, 0xf, "607b70532a3a5eb21712f4a02ce880305ef7645f112c603de5ce1675ec635d4d1954cafbc8cdd2dcb6e5ef92d740c155c469bccc10c759804ce38256519d1164c76301470b6564d99ecca07c543bad2963981853d8e6e756144716bde62728cda315e6816d7863545a9f6c2a8dbf7c653184c9af20160bf37f4c062886fe56e20b0fea094141f485f955226fb4c04c3678964f8134eb95c755ae19364923d5386cacbfc971616323627e5e1ffe688c"}}, &(0x7f0000002240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f00000024c0)={0x44, &(0x7f00000022c0)={0x0, 0x13, 0xe, "068b40b7a1b06a11d70c9ae147a9"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002380)={0x20, 0x81, 0x1, "bb"}, &(0x7f00000023c0)={0x20, 0x82, 0x1, 'y'}, &(0x7f0000002400)={0x20, 0x83, 0x2, "29a4"}, &(0x7f0000002440)={0x20, 0x84, 0x4, "ded28f54"}, &(0x7f0000002480)={0x20, 0x85, 0x3, "0ab0b2"}}) r4 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000002540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000002600)={0x14, &(0x7f0000002580)={0x20, 0x24, 0x24, {0x24, 0x10, "8dd86f9f1c8e4527c2306c38f090b1e6df3e55dc2af0065ba0af229e80d0c96db92b"}}, &(0x7f00000025c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3730d8315056737a}}}, &(0x7f0000002800)={0x34, &(0x7f0000002640)={0x40, 0x14, 0x6b, "fd00b83ff72ea1eec1bb0e65e85a62f69abb72bdae282ca5b0f194d6477a998d68730c11a9d6482010409c41be5a57c4ee63df6ede806a34ec17d0ca92067d0633ae3715e4cbffcf2e31405e8e361644043c9baf74668d733a580658b333b156713649c64055bd11895dd6"}, &(0x7f00000026c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002700)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002740)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000002780)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000027c0)={0xc0, 0xa2, 0x2f, "61c8af417abe00fd37afb8b34c6a7262eab3a2c87f571eb64622cce34489f1492b85c3bb3090e14bbea64c9db56065"}}) syz_usb_control_io$lan78xx(r4, &(0x7f0000002980)={0x14, &(0x7f0000002840)={0x0, 0xf, 0xc9, {0xc9, 0x6, "813a6d76484b8845c114d1af7516ab12552983d19ad167f70e9aec3f7178057b58310aa758fe06b62009a474b755565f7a122670a54b33645153c261318a01f492bf519bfe7e3016375b8db21b21f9f333fecf4e5af7088b127924f57382ce4abb360c71ce29c8d17b65a258e769c0e82440b0a862ffc8a6d2e0c8769950f06e963283d142e1d89badfc1fd7b6158755a6a5f4fc6b2c093fc55ae8faeb9dad60f8205e3f15ee9b7b4a0a05de279550562289e88d9322342f6610d65770b4951d231353eb00823f"}}, &(0x7f0000002940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000002b80)={0x34, &(0x7f00000029c0)={0x20, 0x12, 0x6a, "b424032ba2ba9c156620346f86c02f58dcd362cad7d27da75db8a5da3c803774e1cd3b887c46f4694ad0740cc040d72236564de283a959d1cb755108869301bf655af1ef1c06692f53283caa3f12d6e02940531776a88609e344475ec4b7fd8d5a2b368b7482944015d3"}, &(0x7f0000002a40)={0x0, 0xa, 0x1, 0x51}, &(0x7f0000002a80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002ac0)={0xc0, 0xa1, 0x4, 0xfff}, &(0x7f0000002b00)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000002b40)={0xc0, 0xa2, 0x2f, "a39eecdda01fcbbc7fb115862469ad8910133761d48569809e042329b1d77914d90d98da66d6ac1509d8f4c576d0bc"}}) r5 = getpid() ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002bc0)={'ip6erspan0\x00'}) r6 = socket(0x2c, 0x6, 0x83d1) sendmsg$nl_route_sched(r1, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)=@delqdisc={0x2c, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x9, 0xd}, {0xfff3, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sched_setscheduler(r5, 0x3, &(0x7f0000002d00)=0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000002d40)={'\x00', 0x39}) syz_usb_control_io$lan78xx(r4, &(0x7f0000002ec0)={0x14, &(0x7f0000002d80)={0x20, 0x31, 0xbc, {0xbc, 0x0, "2c5681faa7c3320e8a1141f6126e06c0cbd3d9ea899df4e5e91482db818f2620927ec673515f3266b74ce46974ae5bb0507438be44972d65a8be228e8b9fc1df93b86b35688ba6722512bb788011518b3a49b2e30dca2800d86a097fc76a637b71a046ff0311582c560206028bb9ae6e7f57f586c16afd318ce7721bbaca302be7037cf07bf37aaaf4eb127fdeacfb4e6123b0d5ba1963f37948dd135faf155aa7725c6873d3442093936a26b530db763fc3c79e3fb7fe5426a7"}}, &(0x7f0000002e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000030c0)={0x34, &(0x7f0000002f00)={0x0, 0x8, 0x79, "8ec2e37b12cf4c3ef9977224a61455737c79817e17aa02184aee39849d6c4f122092984e01660947929a0a32d965597c03aae9b2ac30a6f286cbe1193005b048b77769c5e5fc5b3628fba7ef584cca725862700b9b47e5abc975161c3f61655e2be9f8ec08cfcff9e461f2cb123ed3867a188b0378b1e2fe56"}, &(0x7f0000002f80)={0x0, 0xa, 0x1}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x92}, &(0x7f0000003000)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000003040)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000003080)={0xc0, 0xa2, 0x2f, "b9914be531ee2f7324ad906bfa9969607055f7f59baacba3081286520d6c3495a68c267ce3a16e97846854413f1e65"}}) fadvise64(r6, 0x227, 0x21f, 0x1) r7 = openat(r1, &(0x7f0000003440)='./file0\x00', 0x200340, 0x271efe23d87f7f25) clock_gettime(0x0, &(0x7f0000003480)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000034c0)={0x9, 0xb, 0x4, 0x70000, 0x6, {r8, r9/1000+60000}, {0x0, 0x8, 0x81, 0x1, 0x3, 0x0, "2cb99007"}, 0x8, 0x4, {}, 0xd07, 0x0, r1}) poll(&(0x7f0000003540)=[{r7, 0x400}, {r1, 0x882}, {r10, 0xa468}, {r3, 0x2}, {r3, 0x8080}, {r1, 0x2000}, {r6, 0x1}], 0x7, 0x4) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000003640)={0x14, &(0x7f0000003580)={0x0, 0x5, 0x5a, {0x5a, 0x31, "6a517267c663885da557436a7a9861e66eb632eab58320aea2216c6d51c67a162af16f84e96b344c740d50b81612b61a806a8cc38205b6bb43c7b3fd0757a626caf3b027847e9c6905f9346c1a2bc7b853ef2d8ab545292f"}}, &(0x7f0000003600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000037c0)={0x1c, &(0x7f0000003680)={0x40, 0xe, 0xb3, "f67646f8a7d55028e42ca245d31fafa13df99a38a57e5a819777a56821ad2785c76107eadfc626f744dbe90137e980ac0835f4820e760034efa7af626594f7144574fbcaae334f92a1027a1d79953230d066715beb9fff02fe9d451262b34bbfb94c5c51739d52e9df0b3c580f1a8cb1a107e4854769e6f6e7cbcfbd063d127e4095a4ff076c36a048ce96f7a485f9e6a9a6af02c0c0497968d9a88b9186e67e94a7272817c0829718b7dadb4408793d1472ae"}, &(0x7f0000003740)={0x0, 0xa, 0x1, 0x90}, &(0x7f0000003780)={0x0, 0x8, 0x1, 0x9}}) 5.3214499s ago: executing program 8 (id=5628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, r4}) sendmmsg$unix(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x4048891) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000000d0a010800000000000000000a020009"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0xffffffff, 0xc29, {{0x19, 0x4, 0x1, 0x1b, 0x64, 0x68, 0x0, 0xfb, 0x29, 0x0, @local, @loopback, {[@noop, @ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x20, 0x6, 0x0, 0x3, [0x57, 0x0, 0x7, 0x7cf, 0xff, 0xfffffffb, 0x8]}, @timestamp={0x44, 0x18, 0x32, 0x0, 0x7, [0x7fffffff, 0x7, 0x5, 0x3, 0x3]}, @end, @generic={0x94, 0x10, "53db25aefe9f5eed82a7782ebb6d"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x0, 0x8, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x65, 0x0, 0x6f, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x34, 0x0, 0x9, [0xfffffffc]}, @lsrr={0x83, 0xb, 0xea, [@multicast1, @multicast2]}, @ssrr={0x89, 0x7, 0x2c, [@loopback]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x7, [{@multicast1, 0x7}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0xa, 0x101, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0x5, 0x28}}) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0xfff3}, {0xffff, 0xffe0}, {0x4, 0x6}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004001}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x1, 0x9, 0x20, @remote, @empty, 0x700, 0x7800, 0x3, 0xae1}}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@rand_addr, 0x0}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4863a49c", @ANYRES16=0x0, @ANYBLOB="080e28bd7000fddbdf25110000001c0001800800030002000000080003000200000008000100", @ANYRES32=r6, @ANYBLOB="280001801400020074657468305f746f5f6299000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300020000001c00018008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000300020000002000018008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f687372000000004c00018008000300010000000800030002000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020069703667726574617030000000000000280001801400020076657468315f766c616e000000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="18000180140002006e723000000000000000000000000000280001801400020076657468305f746f5f626f6e6400000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x85) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) 5.320099679s ago: executing program 4 (id=5629): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7, 0x13e, 0x89, 0x7ff, 0x2}) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x7f) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) read(r7, &(0x7f0000000340)=""/209, 0xd1) 5.075131622s ago: executing program 8 (id=5630): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x970, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x944, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x491d52ad}, @TCA_FW_MASK={0x8, 0x5, 0xf}, @TCA_FW_POLICE={0x478, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x5, 0xfffffff9, 0x1ff, 0x6, {0x40, 0x0, 0x81, 0x9, 0x5, 0x5}, {0x6, 0x2, 0x1, 0xfff7, 0x9}, 0x2, 0x80000000, 0x7fffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x0, 0x3c6, 0xffff, 0x9cc, 0x8, 0x3, 0x7, 0x7, 0x2, 0x7fffffff, 0x200, 0x7, 0x8, 0xfb9, 0x7, 0x1, 0x3, 0x0, 0x7, 0x9, 0x5, 0x4, 0x0, 0x1, 0x11df4f6c, 0x8001, 0x5, 0xac9, 0x8, 0x0, 0x80, 0x10000, 0x9, 0x844, 0x4, 0x1, 0x8, 0x31, 0x6, 0x6, 0x8, 0xef40, 0x6, 0x100, 0x1, 0x0, 0x5, 0x7, 0x2, 0x9, 0x4, 0x1, 0x1, 0x1e3, 0xffff, 0x10001, 0x80000001, 0x1ff, 0x4, 0x4, 0x7, 0xac0, 0x2, 0x0, 0xa, 0x7f, 0x0, 0x739d, 0x4, 0x8, 0x5, 0x8000, 0xff, 0xfff, 0xa4, 0x2, 0x7, 0x10, 0x2, 0x7, 0x421a7adb, 0xfffffffb, 0x0, 0x0, 0x7, 0x9, 0x4, 0x5, 0x1, 0x7, 0x3, 0x4, 0x2, 0x800000, 0xffffffff, 0xd65e, 0x13b5376b, 0x5, 0x1fcf6fc3, 0x5, 0x0, 0xfffffff9, 0x7fff, 0x8537, 0x1000, 0x56, 0x8, 0x2, 0x0, 0x54ff, 0x3, 0x400, 0x4, 0x1, 0x4, 0x7, 0x7a7, 0x7f, 0x9077, 0x1200, 0x2, 0x9, 0xcf, 0xffffee0b, 0x1, 0x7, 0xffffffff, 0x7, 0xe, 0x4, 0x6, 0x3, 0xb807, 0xf403, 0x5, 0x12ac, 0x8, 0xb, 0xfffffffa, 0x8000, 0x5, 0x81, 0xa, 0x40, 0x9c7, 0x4, 0x5, 0x4, 0x7fffffff, 0x9, 0x1, 0x2, 0x8, 0x0, 0x6, 0x5, 0x7, 0x3e, 0x6, 0x5, 0x5, 0x9, 0x7, 0x0, 0xc46, 0xd, 0x5, 0x2, 0x6, 0x5e3, 0xad, 0x400, 0x1, 0x7, 0x6, 0x112b, 0x1ff, 0x7fff, 0x1, 0x5, 0xfffffffe, 0x8, 0x4, 0x7, 0x77, 0x3ff, 0xfffffffc, 0x5, 0xfffff378, 0x8, 0x80000001, 0x5, 0x80, 0x7ff, 0x5, 0x5, 0x81, 0x40, 0x7, 0x6, 0x100, 0x8, 0x6, 0x4, 0x1, 0x8ed, 0x8, 0x1ff, 0x5, 0x5, 0x2, 0xdab1, 0x8, 0x3, 0x96f6, 0xfffffff7, 0x336e, 0xfffff8dd, 0x9, 0x6, 0xffff7fff, 0x5, 0x10001, 0x7fffffff, 0x101, 0xdae3, 0x7, 0xcad6, 0x6, 0x5, 0x7, 0x8, 0x6, 0xf563, 0x5, 0xab38, 0x7, 0x30000, 0xaef4, 0x45, 0x0, 0x0, 0xaceb9800, 0x1, 0x7, 0x2, 0x4, 0x0, 0x4, 0xfffffffd, 0x6, 0x1, 0x6, 0x7cd5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6a0e}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x4a8, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x800, 0x9, 0x0, {0xff, 0x0, 0x0, 0x9, 0x1, 0x81}, {0x9, 0x2, 0x1, 0x2, 0x2, 0xf7cb}, 0x9, 0x400, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x4, 0xd39, 0xb0cb, 0x306, 0x8, 0x9, 0x8, 0x2, 0x3, 0x0, 0x4, 0xfffffffa, 0x5, 0xffffffff, 0xfffffffb, 0x401, 0x2, 0xff, 0x1, 0x2, 0x6, 0x4d26, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x6, 0x7f, 0x7, 0x3, 0xfffffffc, 0x11, 0xfff, 0xec3, 0xfffffff9, 0x5f1, 0x7f80000, 0x8, 0x7, 0x7, 0x10001, 0x7fff, 0x8c, 0x10000, 0x4, 0xff, 0x3, 0xd59b, 0x3ff, 0x9, 0x8, 0x6, 0x1, 0x9, 0xffff8001, 0x8, 0x0, 0x3, 0x4, 0x0, 0x5, 0x2, 0x8, 0x3, 0x7fffffff, 0x6, 0x39f, 0x37a, 0x81, 0x7fff, 0x1e2e, 0x4, 0xffff5999, 0x8, 0xc8f, 0x4, 0x1, 0x82, 0x6, 0x2, 0x6, 0x4, 0xe9b8, 0x2, 0x2, 0x6, 0xe4, 0x80, 0x8, 0x2ad8, 0x2, 0x7, 0xec3, 0x78, 0x7f, 0x1ff, 0x150e, 0x7, 0x3, 0x4, 0x8, 0x4, 0xffff, 0xffe00000, 0x7f, 0x7, 0x44, 0x5, 0x6, 0x0, 0x7, 0xc, 0x3, 0x4, 0x500, 0x9, 0x1, 0xa, 0x3, 0x6, 0x2, 0xffffb64e, 0x7, 0x3, 0x2d9, 0x10, 0x4, 0x0, 0x8, 0x6, 0x8, 0x94, 0x88f, 0x6, 0x7fffffff, 0x8, 0x3, 0x80000000, 0x8, 0x3, 0xb, 0x2, 0x1, 0x4, 0x9, 0x8001, 0x5, 0x6, 0x4, 0x200, 0x4, 0x8, 0x2, 0x9, 0xdac9, 0x5, 0x3, 0xfffffffc, 0x4, 0x9, 0x800, 0x0, 0x9, 0xf95, 0xb03, 0x6, 0x9e, 0x2, 0x8, 0x2, 0x6, 0x413, 0x8, 0x7, 0x4, 0x100, 0x4, 0x6, 0x1b6, 0x62, 0x3, 0x7, 0x7f, 0x9, 0x2, 0x636, 0x1, 0x79, 0x5b, 0x5, 0x6f, 0xfff, 0x3, 0x1, 0x1, 0x7, 0x5, 0x0, 0x0, 0x3, 0x5, 0x67, 0x612e, 0x200, 0x1, 0x9, 0x8001, 0x3, 0x28abf0f5, 0x5, 0x6, 0x3, 0x8000800, 0x2, 0x0, 0x4, 0x10, 0x5ad9, 0x6, 0x6, 0x0, 0x100, 0x2, 0x7, 0xe, 0xa, 0x6, 0x9, 0xffffffff, 0x7, 0x69, 0x2, 0xc2c, 0x40, 0x6, 0x9, 0x6, 0x1, 0xfffffff7, 0x4, 0xea, 0x401, 0xd, 0x200, 0x9, 0x1, 0x2, 0x8001, 0xb61, 0x9, 0x0, 0x7fffffff, 0x1]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x17, 0x3, 0x7, {0xf3, 0x2, 0x3, 0xc00, 0x5, 0x4}, {0x5, 0x0, 0x6, 0x5, 0x1, 0x30}, 0x2, 0x2, 0x400}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}]}, 0x970}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.056381443s ago: executing program 4 (id=5631): socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) 4.795108619s ago: executing program 8 (id=5632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1b8, r2, 0x800, 0x1, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xca}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x27}, {0x6, 0x11, 0x88e2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8041) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x80000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) 4.794042004s ago: executing program 4 (id=5633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) shutdown(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r4, 0x9}, 0x8) 4.594967245s ago: executing program 9 (id=5634): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x140, 0xb, 0xd0e0011, 0x0, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1, 0x0, 0x3b}, 0x0, 0x70, 0xd8, 0x2000000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x101, 0x0, 0xc, 'netbios-ns\x00', 'syz1\x00', {0x27ff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, 0x0, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000dc0)=""/197, 0xc5}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0xffffffff, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5f3}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) socket$kcm(0x11, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000300)) 4.47879634s ago: executing program 7 (id=5635): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) unshare(0x20000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)=0xffffffffffffff23) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000180)=r4, 0xffffff0d) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) syz_io_uring_setup(0x3dad, &(0x7f0000000200)={0x0, 0x5634, 0x8, 0x0, 0x20}, &(0x7f0000000280), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x41) 4.404157818s ago: executing program 4 (id=5636): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) r2 = syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2.451649465s ago: executing program 7 (id=5637): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x80000001}]}}]}, 0x62}}, 0x400c) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@deltclass={0x480, 0x29, 0x8, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {0xe046b45be2e24f5, 0x10}, {0xa, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x448, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x342, 0x9, 0xf, 0x3f, 0x4, 0x8, 0x9, 0x1, 0x6, 0xfffff9d8, 0x4, 0xa9b2, 0x2, 0x7, 0xfff, 0x9, 0x6, 0x4, 0xa077, 0x0, 0x2, 0xd, 0x0, 0x0, 0x100, 0x3, 0xffff, 0x50, 0x4, 0xef9, 0xfffeffff, 0x8, 0x6, 0x1, 0x400, 0x264, 0x7, 0x10001, 0x1, 0x0, 0x6, 0xffffffff, 0x9, 0x3ff, 0x1, 0x4, 0x6, 0x2, 0x83e, 0x7, 0x4000000, 0xfffffffc, 0x2, 0xa31, 0x6a0, 0x0, 0x9, 0x8, 0x4, 0x0, 0x2, 0x8, 0x6, 0x8dd, 0x2, 0xe, 0x1, 0x9, 0x2, 0x1, 0x3e4, 0x2, 0xa56, 0x7, 0x4, 0x5, 0x3, 0x0, 0x3, 0xff, 0x4, 0xb47, 0x3, 0x3bd4, 0x3, 0x2, 0xffff, 0x95, 0x5, 0x2, 0x9, 0x8000, 0x2, 0xff, 0x2, 0x4, 0xab65, 0xfff, 0xe8, 0x75f, 0x3ff, 0xf2, 0x9, 0x6a4, 0x3, 0x7fff, 0x10001, 0x9, 0x4, 0x3ff, 0x60000000, 0x21, 0x3, 0x1000, 0xb, 0x9, 0x101, 0x6, 0x7, 0x6, 0xb, 0x6, 0x1, 0x6, 0x1d, 0x4, 0xfffffffe, 0x4, 0x8, 0x9, 0x8000, 0x61b1, 0xfffffff9, 0x4, 0x4, 0x618, 0xc0d, 0x8001, 0xfffffff9, 0x8, 0x1, 0x1, 0x8000, 0xfffffff9, 0x5a51, 0x4cf4, 0xffffffff, 0xff, 0x7, 0x100, 0x10001, 0xfffff140, 0x3, 0xffa, 0xffff7fff, 0x2, 0x94ca, 0x7f, 0x1, 0xff, 0x75c, 0xf7, 0x7, 0x6ecc50e7, 0xc06, 0xa1, 0xffff, 0x5, 0x4, 0x6, 0x2a, 0x9, 0x3ff, 0x2, 0x5, 0x2, 0x48, 0x8, 0x2, 0x2, 0x6, 0x40, 0x1, 0x9, 0x2, 0x1, 0x70c7, 0x8000, 0x40, 0x7fffffff, 0x0, 0x5, 0xfff, 0x7800000, 0x0, 0xf, 0x0, 0x3d61, 0x5, 0x6, 0x7, 0x4, 0x3, 0x5, 0x8, 0x6, 0x21c, 0x7, 0xcd26, 0x9, 0x9, 0x9, 0x6, 0x6, 0x2, 0xf8, 0xb, 0x1, 0x6, 0x6, 0x7, 0x0, 0xfffe0000, 0xfffffffc, 0x5, 0x3, 0x64, 0x4f5, 0xffffffff, 0x0, 0x7, 0x2, 0x7, 0xf, 0xa35, 0x87dc2800, 0x33c3, 0x6, 0xe96, 0x7, 0x100, 0x7fffffff, 0x1ff, 0x3, 0x0, 0x1, 0x361c, 0x9, 0x5, 0xffff, 0x6, 0xa, 0x8, 0x2, 0xa, 0x3]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xf9, 0x2, 0x6, 0xc, 0x0, 0x9}, {0x2, 0x0, 0x5, 0x49, 0x1}, 0x6, 0x831, 0x5, 0x1, 0x200}}, @TCA_HTB_RATE64={0xc, 0x6, 0x2}]}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x480}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x16}, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x12}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r9 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) 2.097077672s ago: executing program 4 (id=5638): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a000006090002007379"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.096414376s ago: executing program 9 (id=5639): syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x80102) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 389.65974ms ago: executing program 7 (id=5640): socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xcf}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 322.458373ms ago: executing program 9 (id=5641): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7, 0x13e, 0x89, 0x7ff, 0x2}) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x7f) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) read(r7, &(0x7f0000000340)=""/209, 0xd1) 0s ago: executing program 4 (id=5642): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x970, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x944, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x491d52ad}, @TCA_FW_MASK={0x8, 0x5, 0xf}, @TCA_FW_POLICE={0x478, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x5, 0xfffffff9, 0x1ff, 0x6, {0x40, 0x0, 0x81, 0x9, 0x5, 0x5}, {0x6, 0x2, 0x1, 0xfff7, 0x9}, 0x2, 0x80000000, 0x7fffffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x0, 0x3c6, 0xffff, 0x9cc, 0x8, 0x3, 0x7, 0x7, 0x2, 0x7fffffff, 0x200, 0x7, 0x8, 0xfb9, 0x7, 0x1, 0x3, 0x0, 0x7, 0x9, 0x5, 0x4, 0x0, 0x1, 0x11df4f6c, 0x8001, 0x5, 0xac9, 0x8, 0x0, 0x80, 0x10000, 0x9, 0x844, 0x4, 0x1, 0x8, 0x31, 0x6, 0x6, 0x8, 0xef40, 0x6, 0x100, 0x1, 0x0, 0x5, 0x7, 0x2, 0x9, 0x4, 0x1, 0x1, 0x1e3, 0xffff, 0x10001, 0x80000001, 0x1ff, 0x4, 0x4, 0x7, 0xac0, 0x2, 0x0, 0xa, 0x7f, 0x0, 0x739d, 0x4, 0x8, 0x5, 0x8000, 0xff, 0xfff, 0xa4, 0x2, 0x7, 0x10, 0x2, 0x7, 0x421a7adb, 0xfffffffb, 0x0, 0x0, 0x7, 0x9, 0x4, 0x5, 0x1, 0x7, 0x3, 0x4, 0x2, 0x800000, 0xffffffff, 0xd65e, 0x13b5376b, 0x5, 0x1fcf6fc3, 0x5, 0x0, 0xfffffff9, 0x7fff, 0x8537, 0x1000, 0x56, 0x8, 0x2, 0x0, 0x54ff, 0x3, 0x400, 0x4, 0x1, 0x4, 0x7, 0x7a7, 0x7f, 0x9077, 0x1200, 0x2, 0x9, 0xcf, 0xffffee0b, 0x1, 0x7, 0xffffffff, 0x7, 0xe, 0x4, 0x6, 0x3, 0xb807, 0xf403, 0x5, 0x12ac, 0x8, 0xb, 0xfffffffa, 0x8000, 0x5, 0x81, 0xa, 0x40, 0x9c7, 0x4, 0x5, 0x4, 0x7fffffff, 0x9, 0x1, 0x2, 0x8, 0x0, 0x6, 0x5, 0x7, 0x3e, 0x6, 0x5, 0x5, 0x9, 0x7, 0x0, 0xc46, 0xd, 0x5, 0x2, 0x6, 0x5e3, 0xad, 0x400, 0x1, 0x7, 0x6, 0x112b, 0x1ff, 0x7fff, 0x1, 0x5, 0xfffffffe, 0x8, 0x4, 0x7, 0x77, 0x3ff, 0xfffffffc, 0x5, 0xfffff378, 0x8, 0x80000001, 0x5, 0x80, 0x7ff, 0x5, 0x5, 0x81, 0x40, 0x7, 0x6, 0x100, 0x8, 0x6, 0x4, 0x1, 0x8ed, 0x8, 0x1ff, 0x5, 0x5, 0x2, 0xdab1, 0x8, 0x3, 0x96f6, 0xfffffff7, 0x336e, 0xfffff8dd, 0x9, 0x6, 0xffff7fff, 0x5, 0x10001, 0x7fffffff, 0x101, 0xdae3, 0x7, 0xcad6, 0x6, 0x5, 0x7, 0x8, 0x6, 0xf563, 0x5, 0xab38, 0x7, 0x30000, 0xaef4, 0x45, 0x0, 0x0, 0xaceb9800, 0x1, 0x7, 0x2, 0x4, 0x0, 0x4, 0xfffffffd, 0x6, 0x1, 0x6, 0x7cd5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6a0e}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x4a8, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x800, 0x9, 0x0, {0xff, 0x0, 0x0, 0x9, 0x1, 0x81}, {0x9, 0x2, 0x1, 0x2, 0x2, 0xf7cb}, 0x9, 0x400, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x4, 0xd39, 0xb0cb, 0x306, 0x8, 0x9, 0x8, 0x2, 0x3, 0x0, 0x4, 0xfffffffa, 0x5, 0xffffffff, 0xfffffffb, 0x401, 0x2, 0xff, 0x1, 0x2, 0x6, 0x4d26, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x6, 0x7f, 0x7, 0x3, 0xfffffffc, 0x11, 0xfff, 0xec3, 0xfffffff9, 0x5f1, 0x7f80000, 0x8, 0x7, 0x7, 0x10001, 0x7fff, 0x8c, 0x10000, 0x4, 0xff, 0x3, 0xd59b, 0x3ff, 0x9, 0x8, 0x6, 0x1, 0x9, 0xffff8001, 0x8, 0x0, 0x3, 0x4, 0x0, 0x5, 0x2, 0x8, 0x3, 0x7fffffff, 0x6, 0x39f, 0x37a, 0x81, 0x7fff, 0x1e2e, 0x4, 0xffff5999, 0x8, 0xc8f, 0x4, 0x1, 0x82, 0x6, 0x2, 0x6, 0x4, 0xe9b8, 0x2, 0x2, 0x6, 0xe4, 0x80, 0x8, 0x2ad8, 0x2, 0x7, 0xec3, 0x78, 0x7f, 0x1ff, 0x150e, 0x7, 0x3, 0x4, 0x8, 0x4, 0xffff, 0xffe00000, 0x7f, 0x7, 0x44, 0x5, 0x6, 0x0, 0x7, 0xc, 0x3, 0x4, 0x500, 0x9, 0x1, 0xa, 0x3, 0x6, 0x2, 0xffffb64e, 0x7, 0x3, 0x2d9, 0x10, 0x4, 0x0, 0x8, 0x6, 0x8, 0x94, 0x88f, 0x6, 0x7fffffff, 0x8, 0x3, 0x80000000, 0x8, 0x3, 0xb, 0x2, 0x1, 0x4, 0x9, 0x8001, 0x5, 0x6, 0x4, 0x200, 0x4, 0x8, 0x2, 0x9, 0xdac9, 0x5, 0x3, 0xfffffffc, 0x4, 0x9, 0x800, 0x0, 0x9, 0xf95, 0xb03, 0x6, 0x9e, 0x2, 0x8, 0x2, 0x6, 0x413, 0x8, 0x7, 0x4, 0x100, 0x4, 0x6, 0x1b6, 0x62, 0x3, 0x7, 0x7f, 0x9, 0x2, 0x636, 0x1, 0x79, 0x5b, 0x5, 0x6f, 0xfff, 0x3, 0x1, 0x1, 0x7, 0x5, 0x0, 0x0, 0x3, 0x5, 0x67, 0x612e, 0x200, 0x1, 0x9, 0x8001, 0x3, 0x28abf0f5, 0x5, 0x6, 0x3, 0x8000800, 0x2, 0x0, 0x4, 0x10, 0x5ad9, 0x6, 0x6, 0x0, 0x100, 0x2, 0x7, 0xe, 0xa, 0x6, 0x9, 0xffffffff, 0x7, 0x69, 0x2, 0xc2c, 0x40, 0x6, 0x9, 0x6, 0x1, 0xfffffff7, 0x4, 0xea, 0x401, 0xd, 0x200, 0x9, 0x1, 0x2, 0x8001, 0xb61, 0x9, 0x0, 0x7fffffff, 0x1]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x17, 0x3, 0x7, {0xf3, 0x2, 0x3, 0xc00, 0x5, 0x4}, {0x5, 0x0, 0x6, 0x5, 0x1, 0x30}, 0x2, 0x2, 0x400}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}]}, 0x970}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): oc_cache_noprof+0x84/0x690 [ 1157.917629][T16444] ? alloc_pipe_info+0xe8/0x4d0 [ 1157.917665][T16444] alloc_pipe_info+0xe8/0x4d0 [ 1157.917699][T16444] splice_direct_to_actor+0xa19/0xc80 [ 1157.917738][T16444] ? __pfx_direct_splice_actor+0x10/0x10 [ 1157.917765][T16444] ? get_pid_task+0x20/0x1f0 [ 1157.917792][T16444] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1157.917817][T16444] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.917849][T16444] do_splice_direct+0x19b/0x2a0 [ 1157.917878][T16444] ? __pfx_do_splice_direct+0x10/0x10 [ 1157.917904][T16444] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1157.917939][T16444] ? rw_verify_area+0x25b/0x4e0 [ 1157.917973][T16444] do_sendfile+0x547/0x7e0 [ 1157.917996][T16444] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1157.918031][T16444] ? __pfx_do_sendfile+0x10/0x10 [ 1157.918070][T16444] __se_sys_sendfile64+0x144/0x1a0 [ 1157.918096][T16444] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1157.918132][T16444] do_syscall_64+0x14d/0xf80 [ 1157.918158][T16444] ? trace_irq_disable+0x3b/0x150 [ 1157.918183][T16444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.918206][T16444] ? clear_bhb_loop+0x40/0x90 [ 1157.918233][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.918255][T16444] RIP: 0033:0x7ff9fb13c629 [ 1157.918286][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.918306][T16444] RSP: 002b:00007ff9f9396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1157.918331][T16444] RAX: ffffffffffffffda RBX: 00007ff9fb3b5fa0 RCX: 00007ff9fb13c629 [ 1157.918348][T16444] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1157.918362][T16444] RBP: 00007ff9f9396090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.918376][T16444] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.918390][T16444] R13: 00007ff9fb3b6038 R14: 00007ff9fb3b5fa0 R15: 00007ffdc7719f38 [ 1157.918425][T16444] [ 1158.433534][T14147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.469061][T11486] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1158.497524][T14147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.549115][T14147] bond0 (unregistering): Released all slaves [ 1158.577725][T14147] bond1 (unregistering): Released all slaves [ 1158.611282][T14147] bond2 (unregistering): Released all slaves [ 1158.620377][T11486] usb 10-1: Using ep0 maxpacket: 32 [ 1158.622997][T11486] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.623262][T11486] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.626581][T11486] usb 10-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1158.626611][T11486] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.626631][T11486] usb 10-1: Product: syz [ 1158.626645][T11486] usb 10-1: Manufacturer: syz [ 1158.626657][T11486] usb 10-1: SerialNumber: syz [ 1158.749860][T11486] usb 10-1: config 0 descriptor?? [ 1158.763435][T11486] usb 10-1: bad CDC descriptors [ 1158.776339][T11486] cdc_acm 10-1:0.0: Control and data interfaces are not separated! [ 1158.776356][T11486] cdc_acm 10-1:0.0: This needs exactly 3 endpoints [ 1158.776376][T11486] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22 [ 1158.964682][T11486] usb 10-1: USB disconnect, device number 26 [ 1160.258116][T16475] FAULT_INJECTION: forcing a failure. [ 1160.258116][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.258157][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.6.3111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1160.258190][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.258204][T16475] Call Trace: [ 1160.258213][T16475] [ 1160.258221][T16475] dump_stack_lvl+0xe8/0x150 [ 1160.258254][T16475] should_fail_ex+0x46b/0x600 [ 1160.258289][T16475] should_failslab+0xa8/0x100 [ 1160.258321][T16475] __kmalloc_noprof+0xdf/0x7b0 [ 1160.258349][T16475] ? kfree+0x4d/0x6c0 [ 1160.258375][T16475] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1160.258409][T16475] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1160.258449][T16475] ? tomoyo_path_number_perm+0x219/0x630 [ 1160.258471][T16475] tomoyo_path_number_perm+0x246/0x630 [ 1160.258500][T16475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1160.258525][T16475] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.258579][T16475] ? __fget_files+0x2a/0x420 [ 1160.258600][T16475] ? __fget_files+0x2a/0x420 [ 1160.258613][T16475] ? __fget_files+0x3a6/0x420 [ 1160.258625][T16475] ? __fget_files+0x2a/0x420 [ 1160.258640][T16475] security_file_ioctl+0xc3/0x2a0 [ 1160.258658][T16475] __se_sys_ioctl+0x47/0x170 [ 1160.258676][T16475] do_syscall_64+0x14d/0xf80 [ 1160.258691][T16475] ? trace_irq_disable+0x3b/0x150 [ 1160.258704][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.258717][T16475] ? clear_bhb_loop+0x40/0x90 [ 1160.258732][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.258744][T16475] RIP: 0033:0x7ff9fb13c629 [ 1160.258757][T16475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.258768][T16475] RSP: 002b:00007ff9f9396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.258783][T16475] RAX: ffffffffffffffda RBX: 00007ff9fb3b5fa0 RCX: 00007ff9fb13c629 [ 1160.258792][T16475] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000005 [ 1160.258800][T16475] RBP: 00007ff9f9396090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.258808][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.258815][T16475] R13: 00007ff9fb3b6038 R14: 00007ff9fb3b5fa0 R15: 00007ffdc7719f38 [ 1160.258850][T16475] [ 1160.259337][T16475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.601159][T14147] IPVS: stopping backup sync thread 11084 ... [ 1164.129038][T14448] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1164.279261][T14448] usb 4-1: Using ep0 maxpacket: 32 [ 1164.311742][T14448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.311803][T14448] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.318778][T14448] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1164.318813][T14448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.352871][T14448] usb 4-1: Product: syz [ 1164.352894][T14448] usb 4-1: Manufacturer: syz [ 1164.352909][T14448] usb 4-1: SerialNumber: syz [ 1164.392891][T14448] usb 4-1: config 0 descriptor?? [ 1164.419530][T14448] usb 4-1: bad CDC descriptors [ 1164.420675][T14448] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 1164.420695][T14448] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 1164.420728][T14448] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1164.613258][T11486] usb 4-1: USB disconnect, device number 109 [ 1165.359094][T14147] hsr_slave_0: left promiscuous mode [ 1165.484100][T16545] program syz.8.3129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1165.560054][T14147] hsr_slave_1: left promiscuous mode [ 1165.561923][T14147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.561951][T14147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.784567][T14147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.784590][T14147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.239046][T14147] veth1_macvtap: left promiscuous mode [ 1166.239285][T14147] veth0_macvtap: left promiscuous mode [ 1166.239444][T14147] veth1_vlan: left promiscuous mode [ 1166.239546][T14147] veth0_vlan: left promiscuous mode [ 1167.981644][T16589] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1167.981684][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1168.787546][T14147] team0 (unregistering): Port device team_slave_1 removed [ 1170.672639][T14147] team0 (unregistering): Port device team_slave_0 removed [ 1171.821437][T16131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1171.923364][T16131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1172.038549][T16131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1172.347115][T16131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1173.060588][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.126489][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.198706][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.199178][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.201523][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.201648][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.795869][T14147] IPVS: stop unused estimator thread 0... [ 1174.618698][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.822249][T16131] veth0_vlan: entered promiscuous mode [ 1174.832701][T16699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.837854][T16699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.935296][T16131] veth1_vlan: entered promiscuous mode [ 1175.025669][T16131] veth0_macvtap: entered promiscuous mode [ 1175.048745][T16131] veth1_macvtap: entered promiscuous mode [ 1175.098149][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.137122][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.202065][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.213259][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.221157][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.247213][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.825953][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.828346][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.025107][ T3518] Bluetooth: hci3: Frame reassembly failed (-84) [ 1176.027404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.027430][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.102676][ T5794] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1179.173991][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.174083][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.041276][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1180.041303][T16825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1181.302755][T16865] syzkaller0: entered promiscuous mode [ 1181.302786][T16865] syzkaller0: entered allmulticast mode [ 1183.571741][T16926] syzkaller0: entered promiscuous mode [ 1183.571770][T16926] syzkaller0: entered allmulticast mode [ 1184.262620][T16941] tipc: Started in network mode [ 1184.262657][T16941] tipc: Node identity ac14140f, cluster identity 4711 [ 1184.303765][T16941] tipc: Enabled bearer , priority 10 [ 1185.902119][T14448] tipc: Node number set to 2886997007 [ 1186.446471][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1186.449205][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1186.450825][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1186.452056][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1186.452755][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1186.750917][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3331'. [ 1186.750945][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3331'. [ 1186.750971][T17001] netlink: 'syz.9.3331': attribute type 13 has an invalid length. [ 1186.751036][T17001] netlink: 'syz.9.3331': attribute type 14 has an invalid length. [ 1187.851620][T17027] bridge0: port 3(gretap0) entered blocking state [ 1187.851761][T17027] bridge0: port 3(gretap0) entered disabled state [ 1187.852103][T17027] gretap0: entered allmulticast mode [ 1187.870145][T17027] gretap0: entered promiscuous mode [ 1188.331875][T17033] lo: entered promiscuous mode [ 1188.331905][T17033] lo: entered allmulticast mode [ 1188.360186][T17033] tunl0: entered promiscuous mode [ 1188.360217][T17033] tunl0: entered allmulticast mode [ 1188.370254][T17033] gre0: entered promiscuous mode [ 1188.370278][T17033] gre0: entered allmulticast mode [ 1188.371156][T17033] gretap0: entered promiscuous mode [ 1188.371174][T17033] gretap0: entered allmulticast mode [ 1188.371956][T17033] erspan0: entered promiscuous mode [ 1188.371974][T17033] erspan0: entered allmulticast mode [ 1188.372635][T17033] ip_vti0: entered promiscuous mode [ 1188.372651][T17033] ip_vti0: entered allmulticast mode [ 1188.378188][T17033] ip6_vti0: entered promiscuous mode [ 1188.378211][T17033] ip6_vti0: entered allmulticast mode [ 1188.386662][T17033] sit0: entered promiscuous mode [ 1188.386687][T17033] sit0: entered allmulticast mode [ 1188.387540][T17033] ip6tnl0: entered promiscuous mode [ 1188.387558][T17033] ip6tnl0: entered allmulticast mode [ 1188.388419][T17033] ip6gre0: entered promiscuous mode [ 1188.388437][T17033] ip6gre0: entered allmulticast mode [ 1188.408645][T17033] ip6gretap0: entered promiscuous mode [ 1188.408671][T17033] ip6gretap0: entered allmulticast mode [ 1188.440123][T17033] bridge0: entered promiscuous mode [ 1188.440152][T17033] bridge0: entered allmulticast mode [ 1188.456515][T17033] vcan0: entered promiscuous mode [ 1188.456665][T17033] vcan0: entered allmulticast mode [ 1188.457446][T17033] bond0: entered promiscuous mode [ 1188.457461][T17033] bond_slave_0: entered promiscuous mode [ 1188.457659][T17033] bond_slave_1: entered promiscuous mode [ 1188.457975][T17033] bond0: entered allmulticast mode [ 1188.457989][T17033] bond_slave_0: entered allmulticast mode [ 1188.458006][T17033] bond_slave_1: entered allmulticast mode [ 1188.461081][T17033] team0: entered promiscuous mode [ 1188.461100][T17033] team_slave_0: entered promiscuous mode [ 1188.461292][T17033] team_slave_1: entered promiscuous mode [ 1188.461504][T17033] team0: entered allmulticast mode [ 1188.461517][T17033] team_slave_0: entered allmulticast mode [ 1188.461534][T17033] team_slave_1: entered allmulticast mode [ 1188.477155][T17033] dummy0: entered promiscuous mode [ 1188.477181][T17033] dummy0: entered allmulticast mode [ 1188.487850][T17033] nlmon0: entered promiscuous mode [ 1188.487875][T17033] nlmon0: entered allmulticast mode [ 1188.559271][ T5113] Bluetooth: hci3: command tx timeout [ 1188.615161][T17033] caif0: entered promiscuous mode [ 1188.615182][T17033] caif0: entered allmulticast mode [ 1188.615203][T17033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.210518][T16990] chnl_net:caif_netlink_parms(): no params data found [ 1190.639105][ T5113] Bluetooth: hci3: command tx timeout [ 1190.985292][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1191.379447][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.379661][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.379921][T16990] bridge_slave_0: entered allmulticast mode [ 1191.382961][T16990] bridge_slave_0: entered promiscuous mode [ 1191.445105][ T13] bridge_slave_1: left allmulticast mode [ 1191.445138][ T13] bridge_slave_1: left promiscuous mode [ 1191.445407][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.521384][ T13] bridge_slave_0: left allmulticast mode [ 1191.521416][ T13] bridge_slave_0: left promiscuous mode [ 1191.521723][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.566153][ T37] kauditd_printk_skb: 91 callbacks suppressed [ 1191.566174][ T37] audit: type=1326 audit(1771676897.956:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17106 comm="syz.9.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58d050c629 code=0x0 [ 1192.469751][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.530049][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.572098][ T13] bond0 (unregistering): Released all slaves [ 1192.609556][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.609705][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.609961][T16990] bridge_slave_1: entered allmulticast mode [ 1192.611894][T16990] bridge_slave_1: entered promiscuous mode [ 1192.719421][ T5113] Bluetooth: hci3: command tx timeout [ 1192.865243][T16990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.914088][T16990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.065555][T16990] team0: Port device team_slave_0 added [ 1193.073065][T16990] team0: Port device team_slave_1 added [ 1193.342857][T16990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.342878][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.342908][T16990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.395111][T16990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.395133][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.395164][T16990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.728851][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1194.798986][ T5113] Bluetooth: hci3: command tx timeout [ 1195.317078][T16990] hsr_slave_0: entered promiscuous mode [ 1195.318643][T16990] hsr_slave_1: entered promiscuous mode [ 1195.329996][T16990] debugfs: 'hsr0' already exists in 'hsr' [ 1195.330024][T16990] Cannot create hsr debugfs directory [ 1195.924859][ T13] hsr_slave_0: left promiscuous mode [ 1195.974870][ T13] hsr_slave_1: left promiscuous mode [ 1195.975723][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.066060][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.097775][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1197.217949][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1197.683390][ T13] team0 (unregistering): Port device dummy0 removed [ 1200.159241][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 1204.452884][T17363] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1204.452917][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1204.453029][T17363] vhci_hcd vhci_hcd.0: Device attached [ 1204.468635][T17363] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1204.468671][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1204.468724][T17363] vhci_hcd vhci_hcd.0: Device attached [ 1205.538506][T17363] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 1205.538541][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1205.548967][T17363] vhci_hcd vhci_hcd.0: Device attached [ 1205.618510][T16990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1205.776900][T17373] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 1205.776931][T17373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1205.776985][T17373] vhci_hcd vhci_hcd.0: Device attached [ 1205.826275][T17364] vhci_hcd: connection closed [ 1205.843743][T17374] vhci_hcd: connection closed [ 1205.855288][T17366] vhci_hcd: connection closed [ 1205.884514][T17372] vhci_hcd: connection closed [ 1205.893347][T11536] vhci_hcd vhci_hcd.0: stop threads [ 1205.893373][T11536] vhci_hcd vhci_hcd.0: release socket [ 1205.893441][T11536] vhci_hcd vhci_hcd.0: disconnect device [ 1205.909100][T11536] vhci_hcd vhci_hcd.0: stop threads [ 1205.909121][T11536] vhci_hcd vhci_hcd.0: release socket [ 1205.909190][T11536] vhci_hcd vhci_hcd.0: disconnect device [ 1205.938972][T13460] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1205.939060][T13460] usb 33-1: enqueue for inactive port 0 [ 1205.939064][T11536] vhci_hcd vhci_hcd.0: stop threads [ 1205.939085][T11536] vhci_hcd vhci_hcd.0: release socket [ 1205.939162][T11536] vhci_hcd vhci_hcd.0: disconnect device [ 1205.939545][T11536] vhci_hcd vhci_hcd.0: stop threads [ 1205.939555][T11536] vhci_hcd vhci_hcd.0: release socket [ 1205.939576][T11536] vhci_hcd vhci_hcd.0: disconnect device [ 1206.009037][T13460] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1206.076739][T16990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1206.133413][T16990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1206.179565][T16990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1206.747953][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.792559][T16990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.839694][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.840050][T11299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.854774][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1206.854801][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.854891][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1206.893023][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.893176][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.894086][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1206.894112][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.894172][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1206.920367][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1206.920398][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1206.920455][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1206.949076][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1206.949104][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.949154][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1206.999058][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1206.999090][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.999146][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1207.004302][T17416] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 1207.004331][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1207.004389][T17416] vhci_hcd vhci_hcd.0: Device attached [ 1207.006215][T17425] vhci_hcd: connection closed [ 1207.006540][T17418] vhci_hcd: connection closed [ 1207.006814][T17422] vhci_hcd: connection closed [ 1207.008985][T17420] vhci_hcd: connection closed [ 1207.027354][T17427] vhci_hcd: connection closed [ 1207.045909][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1207.045936][ T43] vhci_hcd vhci_hcd.3: release socket [ 1207.046013][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1207.050803][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1207.050824][ T43] vhci_hcd vhci_hcd.3: release socket [ 1207.050898][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1207.054951][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1207.054971][ T43] vhci_hcd vhci_hcd.3: release socket [ 1207.055047][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1207.058604][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1207.058622][ T43] vhci_hcd vhci_hcd.3: release socket [ 1207.058694][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1207.064504][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1207.064523][ T43] vhci_hcd vhci_hcd.3: release socket [ 1207.064605][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1207.163572][T17431] vhci_hcd: connection closed [ 1207.208270][T11299] vhci_hcd vhci_hcd.3: stop threads [ 1207.208289][T11299] vhci_hcd vhci_hcd.3: release socket [ 1207.208342][T11299] vhci_hcd vhci_hcd.3: disconnect device [ 1208.523005][T16990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.688960][T17473] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1208.688990][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1208.689097][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1208.710502][T17473] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1208.710530][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1208.710586][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1208.738475][T17473] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1208.738503][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1208.738568][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1208.795924][T17473] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1208.795956][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1208.796013][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1208.820263][T17489] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1208.820294][T17489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1208.928938][T14448] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1208.938749][T17489] vhci_hcd vhci_hcd.0: Device attached [ 1208.961986][T17473] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 1208.962018][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1208.962120][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1208.972633][T17490] vhci_hcd: connection closed [ 1208.973011][T17487] vhci_hcd: connection closed [ 1208.975766][T17497] vhci_hcd: connection closed [ 1208.978398][T14147] vhci_hcd vhci_hcd.3: stop threads [ 1208.978424][T14147] vhci_hcd vhci_hcd.3: release socket [ 1208.978494][T14147] vhci_hcd vhci_hcd.3: disconnect device [ 1208.978784][T14147] vhci_hcd vhci_hcd.3: stop threads [ 1208.978798][T14147] vhci_hcd vhci_hcd.3: release socket [ 1208.979352][T14147] vhci_hcd vhci_hcd.3: disconnect device [ 1208.979666][T14147] vhci_hcd vhci_hcd.3: stop threads [ 1208.979680][T14147] vhci_hcd vhci_hcd.3: release socket [ 1208.979714][T14147] vhci_hcd vhci_hcd.3: disconnect device [ 1208.982138][T17479] vhci_hcd: connection closed [ 1208.982404][T17482] vhci_hcd: connection closed [ 1209.011571][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.011598][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.011683][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.013820][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.013835][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.013901][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.021065][T17475] vhci_hcd: connection reset by peer [ 1209.025799][T14147] vhci_hcd vhci_hcd.3: stop threads [ 1209.025819][T14147] vhci_hcd vhci_hcd.3: release socket [ 1209.031431][T14147] vhci_hcd vhci_hcd.3: disconnect device [ 1209.760837][T17511] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1209.760870][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1209.787386][T17511] vhci_hcd vhci_hcd.0: Device attached [ 1209.802695][T17511] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1209.802726][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1209.802829][T17511] vhci_hcd vhci_hcd.0: Device attached [ 1209.813196][T17511] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1209.813222][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1209.813306][T17511] vhci_hcd vhci_hcd.0: Device attached [ 1209.863309][T17511] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1209.863340][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1209.863443][T17511] vhci_hcd vhci_hcd.0: Device attached [ 1209.864890][T17516] vhci_hcd: connection closed [ 1209.869230][T17520] vhci_hcd: connection closed [ 1209.869535][T17522] vhci_hcd: connection closed [ 1209.869765][T17524] vhci_hcd: connection closed [ 1209.873896][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.873924][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.874003][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.876188][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.876205][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.876244][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.890136][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.890160][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.890230][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.892299][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1209.892316][ T12] vhci_hcd vhci_hcd.3: release socket [ 1209.892382][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1209.933244][T16990] veth0_vlan: entered promiscuous mode [ 1209.997953][T16990] veth1_vlan: entered promiscuous mode [ 1210.119075][T16990] veth0_macvtap: entered promiscuous mode [ 1210.183164][T16990] veth1_macvtap: entered promiscuous mode [ 1210.252254][T16990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.312574][T16990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.409481][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.410974][ T1138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.439888][ T1138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.442784][ T1138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.434609][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.434635][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.581062][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.581089][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.083139][T17584] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1212.083159][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.083264][T17584] vhci_hcd vhci_hcd.0: Device attached [ 1212.105443][T17585] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3528'. [ 1212.119473][T17584] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 1212.119503][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.119565][T17584] vhci_hcd vhci_hcd.0: Device attached [ 1212.124918][T17584] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 1212.124946][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1212.124998][T17584] vhci_hcd vhci_hcd.0: Device attached [ 1212.148922][T17584] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 1212.148949][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.149001][T17584] vhci_hcd vhci_hcd.0: Device attached [ 1212.159919][T17584] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 1212.159949][T17584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.160005][T17584] vhci_hcd vhci_hcd.0: Device attached [ 1212.163904][T17594] vhci_hcd: connection closed [ 1212.164221][T17596] vhci_hcd: connection closed [ 1212.164536][T17592] vhci_hcd: connection closed [ 1212.170066][ T1138] vhci_hcd vhci_hcd.6: stop threads [ 1212.170091][ T1138] vhci_hcd vhci_hcd.6: release socket [ 1212.170132][ T1138] vhci_hcd vhci_hcd.6: disconnect device [ 1212.176983][ T1138] vhci_hcd vhci_hcd.6: stop threads [ 1212.177003][ T1138] vhci_hcd vhci_hcd.6: release socket [ 1212.177041][ T1138] vhci_hcd vhci_hcd.6: disconnect device [ 1212.177187][ T1138] vhci_hcd vhci_hcd.6: stop threads [ 1212.177200][ T1138] vhci_hcd vhci_hcd.6: release socket [ 1212.177233][ T1138] vhci_hcd vhci_hcd.6: disconnect device [ 1212.194896][T17589] vhci_hcd: connection closed [ 1212.198045][T17587] vhci_hcd: connection closed [ 1212.198556][ T43] vhci_hcd vhci_hcd.6: stop threads [ 1212.198642][ T43] vhci_hcd vhci_hcd.6: release socket [ 1212.198732][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 1212.203152][ T43] vhci_hcd vhci_hcd.6: stop threads [ 1212.203170][ T43] vhci_hcd vhci_hcd.6: release socket [ 1212.203240][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 1212.283522][T13460] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1212.722646][T17617] tipc: Enabling of bearer rejected, failed to enable media [ 1212.825348][T17622] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3541'. [ 1212.873228][T17627] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1212.873257][T17627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.873743][T17627] vhci_hcd vhci_hcd.0: Device attached [ 1212.888739][T17627] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 1212.888765][T17627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.890402][T17627] vhci_hcd vhci_hcd.0: Device attached [ 1212.902538][T17627] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 1212.902564][T17627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.902934][T17627] vhci_hcd vhci_hcd.0: Device attached [ 1212.907664][T17627] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 1212.907688][T17627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.908357][T17627] vhci_hcd vhci_hcd.0: Device attached [ 1212.911449][T17633] vhci_hcd: connection closed [ 1212.912113][T14703] vhci_hcd vhci_hcd.6: stop threads [ 1212.912135][T14703] vhci_hcd vhci_hcd.6: release socket [ 1212.912210][T14703] vhci_hcd vhci_hcd.6: disconnect device [ 1212.912664][T17631] vhci_hcd: connection closed [ 1212.916778][T17629] vhci_hcd: connection closed [ 1212.917415][T17635] vhci_hcd: connection closed [ 1212.918743][ T43] vhci_hcd vhci_hcd.6: stop threads [ 1212.918762][ T43] vhci_hcd vhci_hcd.6: release socket [ 1212.943769][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 1212.944621][ T43] vhci_hcd vhci_hcd.6: stop threads [ 1212.944640][ T43] vhci_hcd vhci_hcd.6: release socket [ 1212.944699][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 1212.946123][ T43] vhci_hcd vhci_hcd.6: stop threads [ 1212.946137][ T43] vhci_hcd vhci_hcd.6: release socket [ 1212.946716][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 1213.510863][T17659] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.3554'. [ 1213.722419][T17666] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3556'. [ 1214.271722][ T37] audit: type=1326 audit(1771676920.436:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.271942][ T37] audit: type=1326 audit(1771676920.446:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.272184][ T37] audit: type=1326 audit(1771676920.446:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.272392][ T37] audit: type=1326 audit(1771676920.456:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feca774c392 code=0x7ffc0000 [ 1214.272784][ T37] audit: type=1326 audit(1771676920.476:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feca774c392 code=0x7ffc0000 [ 1214.272991][ T37] audit: type=1326 audit(1771676920.506:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.278155][ T37] audit: type=1326 audit(1771676920.506:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.286930][ T37] audit: type=1326 audit(1771676920.536:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.295006][ T37] audit: type=1326 audit(1771676920.536:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.295407][ T37] audit: type=1326 audit(1771676920.536:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17664 comm="syz.8.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca774c629 code=0x7ffc0000 [ 1214.789035][T14448] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1215.021095][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3564'. [ 1215.170388][T17693] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1215.319581][T17698] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3571'. [ 1215.319615][T17698] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3571'. [ 1215.708170][T17717] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1216.222363][T17732] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3587'. [ 1217.211478][T17772] __nla_validate_parse: 4 callbacks suppressed [ 1217.211501][T17772] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3606'. [ 1218.813991][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1218.814022][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1218.814041][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1218.868592][T17803] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3620'. [ 1219.125138][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1219.125170][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1219.125189][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1219.314853][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3626'. [ 1219.314883][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3626'. [ 1220.230778][T17857] random: crng reseeded on system resumption [ 1222.562218][T17948] __nla_validate_parse: 17 callbacks suppressed [ 1222.562241][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1222.562265][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1222.895074][T17961] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1222.895105][T17961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1222.918481][T17961] vhci_hcd vhci_hcd.0: Device attached [ 1222.931944][T17961] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1222.931974][T17961] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1222.932032][T17961] vhci_hcd vhci_hcd.0: Device attached [ 1222.963266][T17961] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1222.963296][T17961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1222.963354][T17961] vhci_hcd vhci_hcd.0: Device attached [ 1222.965925][T17961] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1222.965953][T17961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1222.966003][T17961] vhci_hcd vhci_hcd.0: Device attached [ 1222.968211][T17961] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1222.968238][T17961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1222.968291][T17961] vhci_hcd vhci_hcd.0: Device attached [ 1222.973367][T17966] vhci_hcd: connection closed [ 1222.973895][T14147] vhci_hcd vhci_hcd.3: stop threads [ 1222.973917][T14147] vhci_hcd vhci_hcd.3: release socket [ 1222.973954][T14147] vhci_hcd vhci_hcd.3: disconnect device [ 1222.981801][T17968] vhci_hcd: connection closed [ 1222.982166][T17970] vhci_hcd: connection closed [ 1222.985777][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1222.985797][T11536] vhci_hcd vhci_hcd.3: release socket [ 1222.985834][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1222.986099][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1222.986112][T11536] vhci_hcd vhci_hcd.3: release socket [ 1222.986145][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1222.986213][T17964] vhci_hcd: connection closed [ 1222.988113][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1222.988129][T11536] vhci_hcd vhci_hcd.3: release socket [ 1222.988164][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1222.990155][T17962] vhci_hcd: connection closed [ 1222.990640][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1222.990660][T11536] vhci_hcd vhci_hcd.3: release socket [ 1222.990694][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1223.202028][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3691'. [ 1223.471190][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1223.670500][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3700'. [ 1223.776440][T17996] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1223.776471][T17996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1223.777589][T17996] vhci_hcd vhci_hcd.0: Device attached [ 1223.836841][T17996] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1223.836872][T17996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1223.836928][T17996] vhci_hcd vhci_hcd.0: Device attached [ 1223.851132][T17996] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 1223.851161][T17996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1223.851212][T17996] vhci_hcd vhci_hcd.0: Device attached [ 1223.852259][T18000] vhci_hcd: connection closed [ 1223.852583][T18002] vhci_hcd: connection closed [ 1223.853541][T14147] vhci_hcd vhci_hcd.0: stop threads [ 1223.853563][T14147] vhci_hcd vhci_hcd.0: release socket [ 1223.853599][T14147] vhci_hcd vhci_hcd.0: disconnect device [ 1223.853870][T14147] vhci_hcd vhci_hcd.0: stop threads [ 1223.853883][T14147] vhci_hcd vhci_hcd.0: release socket [ 1223.853916][T14147] vhci_hcd vhci_hcd.0: disconnect device [ 1223.853971][T17998] vhci_hcd: connection closed [ 1223.872095][T14147] vhci_hcd vhci_hcd.0: stop threads [ 1223.872120][T14147] vhci_hcd vhci_hcd.0: release socket [ 1223.872158][T14147] vhci_hcd vhci_hcd.0: disconnect device [ 1224.280213][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3707'. [ 1224.348061][T18021] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1224.348093][T18021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1224.348201][T18021] vhci_hcd vhci_hcd.0: Device attached [ 1224.420536][T18021] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1224.420567][T18021] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1224.420626][T18021] vhci_hcd vhci_hcd.0: Device attached [ 1224.473281][T18021] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1224.473312][T18021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1224.473596][T18021] vhci_hcd vhci_hcd.0: Device attached [ 1224.481509][T18032] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1224.481538][T18032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1224.492023][T18032] vhci_hcd vhci_hcd.0: Device attached [ 1224.524592][T18021] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1224.524623][T18021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1224.524916][T18021] vhci_hcd vhci_hcd.0: Device attached [ 1224.525528][T18038] vhci_hcd: connection closed [ 1224.528619][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1224.528641][T11536] vhci_hcd vhci_hcd.3: release socket [ 1224.528694][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1224.553532][T18025] vhci_hcd: connection closed [ 1224.559122][T18028] vhci_hcd: connection closed [ 1224.563029][T18033] vhci_hcd: connection closed [ 1224.563282][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1224.563304][T11536] vhci_hcd vhci_hcd.3: release socket [ 1224.563383][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1224.569115][T18022] vhci_hcd: connection closed [ 1224.574811][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1224.574833][T11536] vhci_hcd vhci_hcd.3: release socket [ 1224.574924][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1224.582658][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1224.582682][T11536] vhci_hcd vhci_hcd.3: release socket [ 1224.582758][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1224.599925][T11536] vhci_hcd vhci_hcd.3: stop threads [ 1224.599953][T11536] vhci_hcd vhci_hcd.3: release socket [ 1224.600040][T11536] vhci_hcd vhci_hcd.3: disconnect device [ 1224.600720][T13460] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1224.600809][T13460] usb 39-1: enqueue for inactive port 0 [ 1224.719135][T13460] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1225.153808][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3725'. [ 1225.467177][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3733'. [ 1225.566288][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1225.566315][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1225.566344][T18080] netlink: 'syz.3.3734': attribute type 13 has an invalid length. [ 1229.191077][T18156] __nla_validate_parse: 1 callbacks suppressed [ 1229.191101][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3769'. [ 1229.524233][T18165] netem: change failed [ 1229.843224][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 1232.400082][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1232.895569][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1233.150477][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3811'. [ 1233.277575][T18262] Unsupported ieee802154 address type: 0 [ 1233.572125][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3823'. [ 1234.180219][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3833'. [ 1234.676249][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1236.371873][T18338] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 1238.465742][ T31] IPVS: starting estimator thread 0... [ 1238.580088][T18380] IPVS: using max 7 ests per chain, 16800 per kthread [ 1239.242525][T18408] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1240.853161][T18460] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3902'. [ 1246.007418][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.008746][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.700728][T18524] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.3929'. [ 1246.902887][T18532] syzkaller0: entered promiscuous mode [ 1246.902918][T18532] syzkaller0: entered allmulticast mode [ 1249.302724][T13460] hid-generic 0004:00A9:0000.0034: unknown main item tag 0x0 [ 1249.302801][T13460] hid-generic 0004:00A9:0000.0034: unknown main item tag 0x2 [ 1249.302827][T13460] hid-generic 0004:00A9:0000.0034: reserved main item tag 0xe [ 1249.309874][T13460] hid-generic 0004:00A9:0000.0034: hidraw0: HID v1.01 Device [syz1] on syz0 [ 1249.813698][T18584] fido_id[18584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1251.175887][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3972'. [ 1252.057118][T18648] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1252.228561][T18656] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1252.559010][T18674] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3995'. [ 1252.805309][T18687] pim6reg: entered allmulticast mode [ 1252.923273][T18687] pim6reg: left allmulticast mode [ 1253.122456][T18697] netlink: 'syz.0.4005': attribute type 4 has an invalid length. [ 1253.137869][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'. [ 1253.137895][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4004'. [ 1255.064590][T18723] netlink: 'syz.9.4016': attribute type 4 has an invalid length. [ 1255.086603][T18729] sctp: [Deprecated]: syz.3.4019 (pid 18729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1255.086603][T18729] Use struct sctp_sack_info instead [ 1255.856083][T18758] netlink: 'syz.0.4032': attribute type 4 has an invalid length. [ 1256.479280][T18706] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.743216][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4041'. [ 1256.968490][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4044'. [ 1256.968518][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4044'. [ 1257.168696][T18791] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4047'. [ 1257.831447][T18822] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4061'. [ 1258.718506][T18860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1259.262243][T18886] syzkaller0: entered promiscuous mode [ 1259.262273][T18886] syzkaller0: entered allmulticast mode [ 1259.268763][T18886] tipc: Enabled bearer , priority 0 [ 1259.340393][T18882] tipc: Resetting bearer [ 1259.460476][T18894] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4093'. [ 1259.633288][T18882] tipc: Disabling bearer [ 1259.991921][T18919] pim6reg: entered allmulticast mode [ 1260.007642][T18919] pim6reg: left allmulticast mode [ 1261.802284][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1261.802316][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1261.926096][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4128'. [ 1261.926135][T18979] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4128'. [ 1262.744680][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4141'. [ 1262.744713][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4141'. [ 1263.977344][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4162'. [ 1264.459310][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1264.459346][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1264.560317][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4170'. [ 1264.670040][ T37] audit: type=1326 audit(1771676971.056:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19076 comm="syz.9.4171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58d050c629 code=0x0 [ 1272.107979][T19313] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4275'. [ 1272.957574][T19340] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4286'. [ 1273.805841][T19365] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4297'. [ 1274.640617][T19393] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4308'. [ 1275.394272][T19421] pim6reg: entered allmulticast mode [ 1277.190423][T19471] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4341'. [ 1277.550323][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4347'. [ 1278.509184][T19513] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4359'. [ 1278.659130][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4362'. [ 1285.857236][T19681] syzkaller0: entered promiscuous mode [ 1285.857256][T19681] syzkaller0: entered allmulticast mode [ 1287.757029][ T37] audit: type=1326 audit(1771676994.136:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19740 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc87c629 code=0x7ffc0000 [ 1287.757093][ T37] audit: type=1326 audit(1771676994.136:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19740 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc87c629 code=0x7ffc0000 [ 1287.779199][ T37] audit: type=1326 audit(1771676994.146:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19740 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fb2fc87c629 code=0x7ffc0000 [ 1287.779265][ T37] audit: type=1326 audit(1771676994.146:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19740 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fc87c629 code=0x7ffc0000 [ 1291.141540][T19820] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4487'. [ 1292.187440][T19855] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4504'. [ 1293.016016][T19894] 9pnet_fd: Insufficient options for proto=fd [ 1293.629948][T19909] syzkaller0: entered promiscuous mode [ 1293.629978][T19909] syzkaller0: entered allmulticast mode [ 1294.395425][T19944] 9pnet_fd: Insufficient options for proto=fd [ 1294.890487][T14448] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1295.056659][T14448] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1295.056695][T14448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.103957][T14448] usb 4-1: config 0 descriptor?? [ 1295.233912][T14448] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1295.341376][T14448] gspca_sn9c2028: read1 error -71 [ 1295.341791][T14448] gspca_sn9c2028: read1 error -71 [ 1295.342206][T14448] gspca_sn9c2028: read1 error -71 [ 1295.342304][T14448] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1295.399146][T14448] usb 4-1: USB disconnect, device number 110 [ 1295.995070][T19996] 9pnet_fd: Insufficient options for proto=fd [ 1298.494966][T20054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1299.754032][T20076] tipc: Started in network mode [ 1299.754068][T20076] tipc: Node identity ac1414aa, cluster identity 4711 [ 1299.755262][T20076] tipc: Enabled bearer , priority 10 [ 1299.815560][T20076] tipc: Enabled bearer , priority 0 [ 1299.875102][T20080] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4600'. [ 1299.980966][T20084] syzkaller0: entered promiscuous mode [ 1299.980995][T20084] syzkaller0: entered allmulticast mode [ 1299.985834][T20084] tipc: Enabled bearer , priority 0 [ 1300.028541][T20083] tipc: Resetting bearer [ 1300.431873][T20083] tipc: Disabling bearer [ 1301.063790][ T31] tipc: Node number set to 2886997162 [ 1301.191242][T20107] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4613'. [ 1301.220955][T20106] bridge1: entered promiscuous mode [ 1302.229160][T20124] syzkaller0: entered promiscuous mode [ 1302.229190][T20124] syzkaller0: entered allmulticast mode [ 1302.258371][T20124] tipc: Enabled bearer , priority 0 [ 1302.632458][T20145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4626'. [ 1302.739559][T20122] tipc: Resetting bearer [ 1302.941496][T20122] tipc: Disabling bearer [ 1303.662146][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4639'. [ 1303.991044][T20185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4644'. [ 1303.991072][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4644'. [ 1304.328937][ T808] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1304.481674][ T808] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1304.481709][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.514971][ T808] usb 9-1: config 0 descriptor?? [ 1304.545363][ T808] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1304.711987][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4654'. [ 1304.789071][ T808] gspca_sn9c2028: read1 error -71 [ 1304.796594][ T808] gspca_sn9c2028: read1 error -71 [ 1304.797027][ T808] gspca_sn9c2028: read1 error -71 [ 1304.797134][ T808] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1304.811616][ T808] usb 9-1: USB disconnect, device number 31 [ 1305.188106][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4660'. [ 1305.188134][T20225] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4660'. [ 1305.808447][T20231] syzkaller0: entered promiscuous mode [ 1305.808479][T20231] syzkaller0: entered allmulticast mode [ 1305.853036][T20244] tipc: Enabling of bearer rejected, failed to enable media [ 1307.088358][T20279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.740556][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.740626][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.808606][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 1321.414885][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1321.420462][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1321.429735][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1321.441848][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1321.442597][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1321.542962][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1321.560225][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1321.578601][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1321.588583][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1321.602008][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1321.942847][T18706] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1321.966860][T18706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1321.967327][T18706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1321.968535][T18706] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1321.972035][T18706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1323.519011][T18706] Bluetooth: hci0: command tx timeout [ 1323.659109][T13460] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1323.681275][T18706] Bluetooth: hci6: command tx timeout [ 1323.830906][T13460] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1323.830938][T13460] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.835156][T13460] usb 9-1: config 0 descriptor?? [ 1323.874806][T13460] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1324.082132][T18706] Bluetooth: hci7: command tx timeout [ 1324.082579][T13460] gspca_sn9c2028: read1 error -71 [ 1324.083039][T13460] gspca_sn9c2028: read1 error -71 [ 1324.083447][T13460] gspca_sn9c2028: read1 error -71 [ 1324.083546][T13460] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1324.087131][T13460] usb 9-1: USB disconnect, device number 32 [ 1324.152116][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.195900][T20384] netlink: 'syz.9.4725': attribute type 1 has an invalid length. [ 1324.252172][T20384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1324.359616][T20386] bond0: (slave dummy0): Releasing backup interface [ 1324.391888][T20386] bond2: (slave dummy0): making interface the new active one [ 1324.393335][T20386] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1324.601152][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.992489][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.092015][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4731'. [ 1325.599078][T18706] Bluetooth: hci0: command tx timeout [ 1325.759044][T18706] Bluetooth: hci6: command tx timeout [ 1325.815037][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.159082][T18706] Bluetooth: hci7: command tx timeout [ 1326.311097][T20337] chnl_net:caif_netlink_parms(): no params data found [ 1326.377584][T20335] chnl_net:caif_netlink_parms(): no params data found [ 1326.524029][T20346] chnl_net:caif_netlink_parms(): no params data found [ 1326.648660][ T13] bridge_slave_1: left allmulticast mode [ 1326.648692][ T13] bridge_slave_1: left promiscuous mode [ 1326.649145][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.723232][ T13] bridge_slave_0: left allmulticast mode [ 1326.723255][ T13] bridge_slave_0: left promiscuous mode [ 1326.723419][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.678962][T18706] Bluetooth: hci0: command tx timeout [ 1327.829675][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.838995][T18706] Bluetooth: hci6: command tx timeout [ 1327.889570][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.928929][ T7602] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1327.936011][ T13] bond0 (unregistering): Released all slaves [ 1328.082202][T20337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.082367][T20337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.082579][T20337] bridge_slave_0: entered allmulticast mode [ 1328.084991][T20337] bridge_slave_0: entered promiscuous mode [ 1328.105427][ T7602] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1328.105458][ T7602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.141465][ T7602] usb 9-1: config 0 descriptor?? [ 1328.186693][ T7602] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1328.238898][T18706] Bluetooth: hci7: command tx timeout [ 1328.273600][ T13] tipc: Disabling bearer [ 1328.280220][ T13] tipc: Left network mode [ 1328.282415][T20337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.282680][T20337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.283080][T20337] bridge_slave_1: entered allmulticast mode [ 1328.291472][T20337] bridge_slave_1: entered promiscuous mode [ 1328.322222][T20335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.322364][T20335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.322612][T20335] bridge_slave_0: entered allmulticast mode [ 1328.325628][T20335] bridge_slave_0: entered promiscuous mode [ 1328.414459][ T7602] gspca_sn9c2028: read1 error -71 [ 1328.419998][ T7602] gspca_sn9c2028: read1 error -71 [ 1328.420429][ T7602] gspca_sn9c2028: read1 error -71 [ 1328.420524][ T7602] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1328.489939][ T7602] usb 9-1: USB disconnect, device number 33 [ 1328.521212][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.521340][T20335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.521517][T20335] bridge_slave_1: entered allmulticast mode [ 1328.524355][T20335] bridge_slave_1: entered promiscuous mode [ 1328.694699][T20337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.047015][T20337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.047329][T20346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.047450][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.047587][T20346] bridge_slave_0: entered allmulticast mode [ 1329.066109][T20346] bridge_slave_0: entered promiscuous mode [ 1329.088365][T20335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.088729][T20448] tipc: Enabling of bearer rejected, failed to enable media [ 1329.183639][T20346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.183770][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.183982][T20346] bridge_slave_1: entered allmulticast mode [ 1329.188110][T20346] bridge_slave_1: entered promiscuous mode [ 1329.244256][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4747'. [ 1329.536301][T20335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.769015][T18706] Bluetooth: hci0: command tx timeout [ 1329.940291][T18706] Bluetooth: hci6: command tx timeout [ 1330.318937][T18706] Bluetooth: hci7: command tx timeout [ 1330.351667][T20337] team0: Port device team_slave_0 added [ 1330.380003][T20337] team0: Port device team_slave_1 added [ 1330.382809][T20346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.417210][T20335] team0: Port device team_slave_0 added [ 1330.421797][T20346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.436931][T20335] team0: Port device team_slave_1 added [ 1330.534990][T20337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.535010][T20337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.535039][T20337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.606795][T20337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.606810][T20337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.606826][T20337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.610803][T20346] team0: Port device team_slave_0 added [ 1330.612995][T20335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.613011][T20335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.613036][T20335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.630137][T20346] team0: Port device team_slave_1 added [ 1330.860871][ T13] hsr_slave_0: left promiscuous mode [ 1330.899315][ T13] hsr_slave_1: left promiscuous mode [ 1330.900573][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.900600][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.960319][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.960350][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.090889][ T13] veth1_macvtap: left promiscuous mode [ 1331.090962][ T13] veth0_macvtap: left promiscuous mode [ 1331.389415][ T13] pim6reg (unregistering): left allmulticast mode [ 1331.771950][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1331.843525][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1332.261459][T20335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.261480][T20335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.261509][T20335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.602880][T20482] tipc: Enabling of bearer rejected, failed to enable media [ 1332.786888][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4763'. [ 1332.919247][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4765'. [ 1333.040112][T20346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.040134][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.040236][T20346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.360355][T20346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.360369][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.360386][T20346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.367051][T20337] hsr_slave_0: entered promiscuous mode [ 1333.368093][T20337] hsr_slave_1: entered promiscuous mode [ 1333.468746][T20335] hsr_slave_0: entered promiscuous mode [ 1333.470193][T20335] hsr_slave_1: entered promiscuous mode [ 1333.470957][T20335] debugfs: 'hsr0' already exists in 'hsr' [ 1333.470975][T20335] Cannot create hsr debugfs directory [ 1333.776820][T20346] hsr_slave_0: entered promiscuous mode [ 1333.778552][T20346] hsr_slave_1: entered promiscuous mode [ 1333.779742][T20346] debugfs: 'hsr0' already exists in 'hsr' [ 1333.779768][T20346] Cannot create hsr debugfs directory [ 1334.650382][T20522] tipc: Enabling of bearer rejected, failed to enable media [ 1335.649701][T20539] tipc: Enabled bearer , priority 0 [ 1335.650868][T20540] syzkaller0: entered promiscuous mode [ 1335.650896][T20540] syzkaller0: entered allmulticast mode [ 1335.690147][T20547] tipc: Resetting bearer [ 1336.311300][T20536] tipc: Resetting bearer [ 1336.439793][T20536] tipc: Disabling bearer [ 1337.234304][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.826439][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.978973][T11486] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1338.057608][T20604] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.4794'. [ 1338.131953][T11486] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1338.131996][T11486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.137791][T11486] usb 9-1: config 0 descriptor?? [ 1338.144995][T11486] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1338.306892][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.370261][T11486] gspca_sn9c2028: read1 error -71 [ 1338.377343][T11486] gspca_sn9c2028: read1 error -71 [ 1338.377805][T11486] gspca_sn9c2028: read1 error -71 [ 1338.377903][T11486] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1338.392579][T11486] usb 9-1: USB disconnect, device number 34 [ 1339.011539][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.618231][T20633] netlink: 'syz.9.4801': attribute type 1 has an invalid length. [ 1339.618247][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4801'. [ 1340.089298][T20627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.906090][T14703] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.062481][T20638] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.4802'. [ 1341.149563][T11536] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.159558][T11536] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.159605][T11536] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.241512][ T31] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1341.400975][ T31] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1341.401011][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.405903][ T31] usb 9-1: config 0 descriptor?? [ 1341.451651][ T31] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1341.642515][ T31] gspca_sn9c2028: read1 error -71 [ 1341.642961][ T31] gspca_sn9c2028: read1 error -71 [ 1341.644686][ T31] gspca_sn9c2028: read1 error -71 [ 1341.644783][ T31] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1341.654015][ T31] usb 9-1: USB disconnect, device number 35 [ 1341.998692][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4804'. [ 1342.150320][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.595237][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.640870][T20665] netlink: 'syz.8.4810': attribute type 1 has an invalid length. [ 1342.640896][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4810'. [ 1342.984088][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.401014][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.533009][T20723] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4823'. [ 1344.789363][ T13] bridge_slave_1: left allmulticast mode [ 1344.789396][ T13] bridge_slave_1: left promiscuous mode [ 1344.789685][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.882987][ T13] bridge_slave_0: left allmulticast mode [ 1344.883019][ T13] bridge_slave_0: left promiscuous mode [ 1344.883294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.983734][ T13] bridge_slave_1: left allmulticast mode [ 1344.983768][ T13] bridge_slave_1: left promiscuous mode [ 1344.984048][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.102023][ T13] bridge_slave_0: left allmulticast mode [ 1345.102056][ T13] bridge_slave_0: left promiscuous mode [ 1345.102323][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.500362][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.560688][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.582468][ T13] bond0 (unregistering): Released all slaves [ 1348.020242][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.070357][ T13] bond_slave_0: left promiscuous mode [ 1348.070587][ T13] bond_slave_0: left allmulticast mode [ 1348.129892][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.169510][ T13] bond_slave_1: left promiscuous mode [ 1348.169654][ T13] bond_slave_1: left allmulticast mode [ 1348.171275][ T13] bond0 (unregistering): Released all slaves [ 1348.680388][ T13] tipc: Disabling bearer [ 1348.680634][ T13] tipc: Disabling bearer [ 1349.670211][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4855'. [ 1349.740824][ T13] tipc: Left network mode [ 1349.890631][T20844] tipc: Enabled bearer , priority 0 [ 1349.891433][T20844] syzkaller0: entered promiscuous mode [ 1349.891460][T20844] syzkaller0: entered allmulticast mode [ 1350.023506][ T13] IPVS: stopping master sync thread 18338 ... [ 1350.143389][T20848] tipc: Resetting bearer [ 1350.499545][T20843] tipc: Resetting bearer [ 1350.646874][T20843] tipc: Disabling bearer [ 1351.891768][T20337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1352.040396][T20337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1352.112261][T20913] tipc: Enabling of bearer rejected, failed to enable media [ 1353.602121][T20337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1353.753913][T20932] ieee802154 phy0 wpan0: encryption failed: -22 [ 1353.968320][T20337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1354.382085][ T13] hsr_slave_0: left promiscuous mode [ 1354.418999][ T13] hsr_slave_1: left promiscuous mode [ 1354.420181][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.420209][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.480276][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.480307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.690027][ T13] hsr_slave_0: left promiscuous mode [ 1354.738938][ T13] hsr_slave_1: left promiscuous mode [ 1354.744157][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.744189][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.810061][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.810093][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.988564][ T13] veth1_macvtap: left promiscuous mode [ 1354.988698][ T13] veth0_macvtap: left promiscuous mode [ 1354.997019][ T13] veth1_vlan: left promiscuous mode [ 1354.997196][ T13] veth0_vlan: left promiscuous mode [ 1355.164039][ T13] veth1_macvtap: left promiscuous mode [ 1355.164156][ T13] veth0_macvtap: left promiscuous mode [ 1355.164427][ T13] veth1_vlan: left promiscuous mode [ 1355.164657][ T13] veth0_vlan: left promiscuous mode [ 1356.489914][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1356.549673][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1357.222032][T21015] ieee802154 phy0 wpan0: encryption failed: -22 [ 1357.748463][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1357.748498][ T13] team_slave_1 (unregistering): left allmulticast mode [ 1357.822551][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1357.885614][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1357.885648][ T13] team_slave_0 (unregistering): left allmulticast mode [ 1357.926307][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1358.988175][T20963] tipc: Enabling of bearer rejected, failed to enable media [ 1359.248995][T20335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1359.417028][T20335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1359.514311][T20335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1359.652727][T20335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1360.475088][T20346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1360.598341][T20346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1360.695338][T20346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1360.752329][T20346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1361.561877][T20337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.871628][T20335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.878542][T20337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.988456][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.988638][T11299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.174557][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.174717][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.413279][T20335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.486741][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.488488][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.652917][T20346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.680996][ T13] IPVS: stop unused estimator thread 0... [ 1362.686931][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.704310][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.914316][T20346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.969284][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.969434][T14147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.150897][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.151025][T11299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.873497][T21114] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.430786][T20337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.872851][T20335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.177681][T20346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.559310][T20346] veth0_vlan: entered promiscuous mode [ 1365.631053][T20346] veth1_vlan: entered promiscuous mode [ 1365.892762][T20346] veth0_macvtap: entered promiscuous mode [ 1365.944401][T20346] veth1_macvtap: entered promiscuous mode [ 1366.151653][T20346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.226952][T20346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.317306][T14703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.342021][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.373158][T20337] veth0_vlan: entered promiscuous mode [ 1366.374549][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.390398][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.537054][T20337] veth1_vlan: entered promiscuous mode [ 1366.912782][T20335] veth0_vlan: entered promiscuous mode [ 1367.057478][T20335] veth1_vlan: entered promiscuous mode [ 1367.110318][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.110343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.138018][T20337] veth0_macvtap: entered promiscuous mode [ 1367.224902][T20337] veth1_macvtap: entered promiscuous mode [ 1367.407906][T20337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.408522][T20335] veth0_macvtap: entered promiscuous mode [ 1367.460373][T20335] veth1_macvtap: entered promiscuous mode [ 1367.464316][T20337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.499792][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.499817][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.539526][ T3518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.559925][ T3518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.562378][ T3518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.567146][ T3518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.625784][T20335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.743349][T20335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.826878][T21176] tipc: Enabled bearer , priority 0 [ 1367.847146][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.872195][T21176] syzkaller0: entered promiscuous mode [ 1367.872225][T21176] syzkaller0: entered allmulticast mode [ 1367.950713][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.959784][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.020723][T21175] tipc: Resetting bearer [ 1368.182182][T21175] tipc: Disabling bearer [ 1368.391572][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.617867][T14703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.617891][T14703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.127901][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.127926][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.333000][T11536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.333024][T11536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.757217][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.757242][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.828884][T21259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.212207][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.212298][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.473758][T14448] IPVS: starting estimator thread 0... [ 1373.589345][T21295] IPVS: using max 6 ests per chain, 14400 per kthread [ 1374.275848][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1374.302607][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1374.303084][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1374.334722][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1374.335966][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1374.469510][T21306] syzkaller0: entered promiscuous mode [ 1374.469542][T21306] syzkaller0: entered allmulticast mode [ 1375.723347][T21346] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4958'. [ 1376.206495][T21312] chnl_net:caif_netlink_parms(): no params data found [ 1376.400917][T18706] Bluetooth: hci1: command tx timeout [ 1376.683406][T21374] syzkaller0: entered promiscuous mode [ 1376.683436][T21374] syzkaller0: entered allmulticast mode [ 1376.788990][T21374] tipc: Started in network mode [ 1376.789025][T21374] tipc: Node identity 9269099db7d1, cluster identity 4711 [ 1376.790388][T21374] tipc: Enabled bearer , priority 0 [ 1377.098439][T21373] tipc: Resetting bearer [ 1378.395673][T21373] tipc: Disabling bearer [ 1378.478949][T18706] Bluetooth: hci1: command tx timeout [ 1378.616468][T21312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.616624][T21312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.616891][T21312] bridge_slave_0: entered allmulticast mode [ 1378.627526][T21312] bridge_slave_0: entered promiscuous mode [ 1378.631172][T21063] tipc: Node number set to 632818077 [ 1379.109401][T21312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.109541][T21312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.109893][T21312] bridge_slave_1: entered allmulticast mode [ 1379.116421][T21312] bridge_slave_1: entered promiscuous mode [ 1379.632888][T21458] netlink: 'syz.4.4993': attribute type 1 has an invalid length. [ 1379.703355][T21312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.829724][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4993'. [ 1379.922668][T21459] bond1 (unregistering): Released all slaves [ 1380.047885][T21312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.408484][T21469] vlan2: entered promiscuous mode [ 1380.408510][T21469] veth1_to_bond: entered promiscuous mode [ 1380.558903][T18706] Bluetooth: hci1: command tx timeout [ 1380.868289][ T1160] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.875928][ T1160] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.064878][T21503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 1381.065220][T21503] ip6erspan0: entered promiscuous mode [ 1381.695674][ T1160] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.695709][ T1160] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.822451][T21312] team0: Port device team_slave_0 added [ 1381.846509][T21312] team0: Port device team_slave_1 added [ 1381.968580][T21526] syzkaller0: entered promiscuous mode [ 1381.968612][T21526] syzkaller0: entered allmulticast mode [ 1382.344396][ T1160] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.344435][ T1160] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.392377][T21312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.392391][T21312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.392409][T21312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.638887][T18706] Bluetooth: hci1: command tx timeout [ 1382.855558][T21312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.855577][T21312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.855608][T21312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.150389][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5020'. [ 1383.216661][ T1160] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1383.216698][ T1160] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.831010][T21312] hsr_slave_0: entered promiscuous mode [ 1383.832476][T21312] hsr_slave_1: entered promiscuous mode [ 1383.833473][T21312] debugfs: 'hsr0' already exists in 'hsr' [ 1383.833510][T21312] Cannot create hsr debugfs directory [ 1385.021171][ T1160] gretap0: left allmulticast mode [ 1385.021202][ T1160] gretap0: left promiscuous mode [ 1385.021481][ T1160] bridge0: port 3(gretap0) entered disabled state [ 1385.156510][ T1160] bridge_slave_1: left allmulticast mode [ 1385.156533][ T1160] bridge_slave_1: left promiscuous mode [ 1385.156704][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.455315][ T1160] bridge_slave_0: left allmulticast mode [ 1385.455348][ T1160] bridge_slave_0: left promiscuous mode [ 1385.455616][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.687112][T21623] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5045'. [ 1387.336225][T21645] netlink: 'syz.5.5053': attribute type 4 has an invalid length. [ 1387.460852][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.527224][T21652] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5055'. [ 1387.539597][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.571696][ T1160] bond0 (unregistering): Released all slaves [ 1387.577843][ T1160] bond1 (unregistering): Released all slaves [ 1387.629964][ T1160] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1387.671380][ T1160] bond2 (unregistering): Released all slaves [ 1389.429727][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5073'. [ 1389.545848][T21705] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1394.229093][ T1160] hsr_slave_0: left promiscuous mode [ 1394.307669][ T1160] hsr_slave_1: left promiscuous mode [ 1394.314009][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.314040][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.360576][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.360608][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.490495][ T1160] veth1_macvtap: left promiscuous mode [ 1394.490604][ T1160] veth0_macvtap: left promiscuous mode [ 1394.490799][ T1160] veth1_vlan: left promiscuous mode [ 1394.490901][ T1160] veth0_vlan: left promiscuous mode [ 1396.458510][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 1396.559756][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 1398.615963][T21312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1398.650513][T21863] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.5117'. [ 1398.665447][T21312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1398.760736][T21312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1398.819378][T21312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1399.105184][T21878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5119'. [ 1399.407461][T21312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.514188][T21312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.557389][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.568996][T11536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.609700][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.609868][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.806189][T21924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1400.875626][T21312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.003137][T21928] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.5131'. [ 1402.491414][T21312] veth0_vlan: entered promiscuous mode [ 1402.520578][T21312] veth1_vlan: entered promiscuous mode [ 1402.658563][T21312] veth0_macvtap: entered promiscuous mode [ 1402.695170][T21312] veth1_macvtap: entered promiscuous mode [ 1402.788090][T21312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.828644][T21312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.892587][T14703] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.893353][T14703] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.894027][T14703] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.897734][T14703] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.461533][T11536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.461559][T11536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.682176][T21978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5141'. [ 1403.720473][T14147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.720498][T14147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.249015][ T808] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1404.425577][ T808] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1404.425613][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.484666][ T808] usb 5-1: config 0 descriptor?? [ 1404.503776][ T808] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1404.722954][ T808] gspca_sn9c2028: read1 error -71 [ 1404.729268][ T808] gspca_sn9c2028: read1 error -71 [ 1404.729673][ T808] gspca_sn9c2028: read1 error -71 [ 1404.729760][ T808] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1404.763440][ T808] usb 5-1: USB disconnect, device number 32 [ 1405.080864][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1405.113939][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1405.135394][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1405.147978][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1405.149160][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1407.171993][T18706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1407.178974][T18706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1407.190464][T18706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1407.193098][T18706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1407.194348][T18706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.218457][T22026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1407.793536][T18706] Bluetooth: hci2: command tx timeout [ 1408.999048][T22031] Can't find ip_set type hash [ 1409.104874][T22001] chnl_net:caif_netlink_parms(): no params data found [ 1409.838852][T22037] Bluetooth: hci2: command tx timeout [ 1409.882222][T22001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.883313][T22001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.883604][T22001] bridge_slave_0: entered allmulticast mode [ 1409.917228][T22001] bridge_slave_0: entered promiscuous mode [ 1409.979432][T22001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.979575][T22001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.979831][T22001] bridge_slave_1: entered allmulticast mode [ 1409.983033][T22001] bridge_slave_1: entered promiscuous mode [ 1410.207724][T22001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.242304][T22001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.358992][T11486] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1410.512170][T11486] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1410.512204][T11486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.517296][T11486] usb 5-1: config 0 descriptor?? [ 1410.527270][T11486] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1410.584371][T22001] team0: Port device team_slave_0 added [ 1410.610816][T22001] team0: Port device team_slave_1 added [ 1410.738035][T11486] gspca_sn9c2028: read1 error -71 [ 1410.738659][T11486] gspca_sn9c2028: read1 error -71 [ 1410.739137][T11486] gspca_sn9c2028: read1 error -71 [ 1410.739242][T11486] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1410.781295][T11486] usb 5-1: USB disconnect, device number 33 [ 1410.868428][T22001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.868448][T22001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.868479][T22001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.874655][T22001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.874671][T22001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.874696][T22001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.887938][T22025] chnl_net:caif_netlink_parms(): no params data found [ 1411.021890][T22001] hsr_slave_0: entered promiscuous mode [ 1411.023762][T22001] hsr_slave_1: entered promiscuous mode [ 1411.024843][T22001] debugfs: 'hsr0' already exists in 'hsr' [ 1411.024872][T22001] Cannot create hsr debugfs directory [ 1411.039596][T22037] Bluetooth: hci3: command tx timeout [ 1411.424558][T22025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.424694][T22025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.424910][T22025] bridge_slave_0: entered allmulticast mode [ 1411.428056][T22025] bridge_slave_0: entered promiscuous mode [ 1411.488477][T22025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.488650][T22025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.489430][T22025] bridge_slave_1: entered allmulticast mode [ 1411.498941][T22025] bridge_slave_1: entered promiscuous mode [ 1411.686278][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5160'. [ 1411.804280][T22025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.918968][T22037] Bluetooth: hci2: command tx timeout [ 1411.964276][T22025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.143626][T22025] team0: Port device team_slave_0 added [ 1413.214856][T22037] Bluetooth: hci3: command tx timeout [ 1413.218499][T22025] team0: Port device team_slave_1 added [ 1413.598672][T22025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.598692][T22025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.598721][T22025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.602098][T22025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.602115][T22025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.602140][T22025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.766211][T22125] vlan2: entered promiscuous mode [ 1413.766479][T22125] vlan2: entered allmulticast mode [ 1413.766496][T22125] hsr_slave_1: entered allmulticast mode [ 1413.806383][T22025] hsr_slave_0: entered promiscuous mode [ 1413.807898][T22025] hsr_slave_1: entered promiscuous mode [ 1413.834962][T22025] debugfs: 'hsr0' already exists in 'hsr' [ 1413.835003][T22025] Cannot create hsr debugfs directory [ 1413.866542][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5168'. [ 1413.959530][T22132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1413.998999][T22037] Bluetooth: hci2: command tx timeout [ 1415.003794][ T1804] IPVS: starting estimator thread 0... [ 1415.099023][T22166] IPVS: using max 13 ests per chain, 31200 per kthread [ 1415.279052][T22037] Bluetooth: hci3: command tx timeout [ 1415.789318][T22190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1415.834016][T22001] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1415.881924][T22001] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1416.358266][T22001] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1416.435942][T22001] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1416.992819][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'. [ 1417.359023][T22037] Bluetooth: hci3: command tx timeout [ 1417.495072][T22001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.561950][T22001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.613934][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.614285][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.663243][T14703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.663395][T14703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.181744][T22025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1418.195711][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1418.324878][T22025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1418.374363][T22025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1418.456506][T22025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1419.168695][T22025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.528394][T22025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.660073][T11535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.660365][T11535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.859177][T11535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.859387][T11535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.900771][T22001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.963558][T14448] IPVS: starting estimator thread 0... [ 1420.319304][T22301] IPVS: using max 7 ests per chain, 16800 per kthread [ 1420.610414][T22307] bridge1: entered promiscuous mode [ 1420.612779][T22307] bridge1: entered allmulticast mode [ 1421.839604][T22315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.854408][T22319] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1422.220310][T22025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.259680][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1422.276019][T22001] veth0_vlan: entered promiscuous mode [ 1422.354306][T22001] veth1_vlan: entered promiscuous mode [ 1422.788240][T22001] veth0_macvtap: entered promiscuous mode [ 1422.820713][T22001] veth1_macvtap: entered promiscuous mode [ 1423.763916][T22001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.817360][T22001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.867482][T11535] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.926232][T22353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1423.927708][T11535] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.154608][T22357] bond1: (slave dummy0): Releasing backup interface [ 1424.194699][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5232'. [ 1424.202288][T22357] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1424.202402][T11535] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.165001][T11535] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.786624][T22025] veth0_vlan: entered promiscuous mode [ 1425.872388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.872412][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.905521][T22025] veth1_vlan: entered promiscuous mode [ 1426.036505][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.036529][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.060627][T22025] veth0_macvtap: entered promiscuous mode [ 1426.110243][T22025] veth1_macvtap: entered promiscuous mode [ 1426.227665][T22025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.260526][T22025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.302119][ T1138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.304327][ T1138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.304757][ T1138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.328879][ T1138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.562621][T22386] netlink: 1832 bytes leftover after parsing attributes in process `syz.8.5143'. [ 1426.884505][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.884529][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.110398][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.110425][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.809936][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5243'. [ 1430.677297][T22443] overlayfs: failed to clone lowerpath [ 1430.774036][T22447] overlayfs: failed to clone lowerpath [ 1432.282590][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1433.617822][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.617892][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.643273][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5276'. [ 1434.836506][T22525] vlan2: entered promiscuous mode [ 1434.836773][T22525] vlan2: entered allmulticast mode [ 1434.836789][T22525] hsr_slave_1: entered allmulticast mode [ 1437.968415][T22550] Can't find ip_set type hash [ 1439.307700][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5290'. [ 1442.428910][ T808] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1442.728887][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 1442.729946][ T808] usb 8-1: device descriptor read/all, error -71 [ 1443.416105][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5307'. [ 1446.345213][T22631] Bluetooth: hci7: command 0x0406 tx timeout [ 1446.345257][T22631] Bluetooth: hci0: command 0x0406 tx timeout [ 1447.587759][T22665] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.5317'. [ 1448.356886][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1449.096834][T22690] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5324'. [ 1450.052249][T22719] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.5331'. [ 1450.109824][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5332'. [ 1451.150816][T22750] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1454.728471][T22792] netlink: 2088 bytes leftover after parsing attributes in process `syz.7.5349'. [ 1457.415723][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1457.840330][T22827] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.5362'. [ 1461.430579][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5372'. [ 1469.110283][T22939] Can't find ip_set type hash [ 1476.796339][T23017] Can't find ip_set type hash [ 1478.584286][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 1478.584490][T23049] netlink: zone id is out of range [ 1478.584501][T23049] netlink: zone id is out of range [ 1478.584510][T23049] netlink: zone id is out of range [ 1478.584519][T23049] netlink: zone id is out of range [ 1478.584552][T23049] netlink: zone id is out of range [ 1478.584561][T23049] netlink: zone id is out of range [ 1478.584570][T23049] netlink: zone id is out of range [ 1478.584602][T23049] netlink: zone id is out of range [ 1478.584611][T23049] netlink: zone id is out of range [ 1479.520592][T23064] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5417'. [ 1479.810592][T23073] 9p: Bad value for 'wfdno' [ 1480.186025][ T37] audit: type=1326 audit(1771677186.576:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.186084][ T37] audit: type=1326 audit(1771677186.576:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.239788][ T37] audit: type=1326 audit(1771677186.636:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.239991][ T37] audit: type=1326 audit(1771677186.636:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f72141d8aec code=0x7ffc0000 [ 1480.240300][ T37] audit: type=1326 audit(1771677186.636:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72141d8b4e code=0x7ffc0000 [ 1480.240611][ T37] audit: type=1326 audit(1771677186.636:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f721421c2bb code=0x7ffc0000 [ 1480.268831][ T37] audit: type=1326 audit(1771677186.646:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.268886][ T37] audit: type=1326 audit(1771677186.646:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.268925][ T37] audit: type=1326 audit(1771677186.646:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.268964][ T37] audit: type=1326 audit(1771677186.646:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23081 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721421c629 code=0x7ffc0000 [ 1480.608608][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 1480.608639][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 1480.643313][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5425'. [ 1480.643595][T23092] netlink: zone id is out of range [ 1483.032705][T23108] Can't find ip_set type hash [ 1485.633609][T23124] 9p: Bad value for 'wfdno' [ 1485.828901][T21063] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1485.995873][T21063] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1485.995910][T21063] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.995933][T21063] usb 9-1: Product: syz [ 1485.995949][T21063] usb 9-1: Manufacturer: syz [ 1485.995964][T21063] usb 9-1: SerialNumber: syz [ 1486.160425][T23140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1486.348931][T23136] vlan2: entered promiscuous mode [ 1486.349195][T23136] vlan2: entered allmulticast mode [ 1486.349213][T23136] hsr_slave_1: entered allmulticast mode [ 1486.556072][T23128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.557444][T23128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.559868][T23128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.560442][T23128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.678516][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1486.678592][ T37] audit: type=1326 audit(1771677193.066:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.715041][ T37] audit: type=1326 audit(1771677193.106:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.748359][ T37] audit: type=1326 audit(1771677193.106:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.785312][T21063] net_ratelimit: 8 callbacks suppressed [ 1486.785333][T21063] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1486.785367][T21063] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1486.786251][ T37] audit: type=1326 audit(1771677193.176:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.786308][ T37] audit: type=1326 audit(1771677193.166:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.786469][T21063] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1486.786503][T21063] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1486.854101][T21063] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1486.874006][ T37] audit: type=1326 audit(1771677193.226:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.874054][ T37] audit: type=1326 audit(1771677193.226:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.874094][ T37] audit: type=1326 audit(1771677193.226:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.874133][ T37] audit: type=1326 audit(1771677193.226:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1486.874172][ T37] audit: type=1326 audit(1771677193.226:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23142 comm="syz.7.5437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a290c629 code=0x7ffc0000 [ 1487.042360][T21063] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1487.153959][T21063] usb 9-1: USB disconnect, device number 36 [ 1487.632695][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5440'. [ 1487.632725][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5440'. [ 1489.537714][T23179] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5432'. [ 1489.771378][T23182] 9p: Bad value for 'wfdno' [ 1491.595549][T23191] Can't find ip_set type hash [ 1492.199105][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1492.199130][ T37] audit: type=1326 audit(1771677198.586:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.199184][ T37] audit: type=1326 audit(1771677198.586:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.199230][ T37] audit: type=1326 audit(1771677198.586:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.199275][ T37] audit: type=1326 audit(1771677198.586:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.206256][ T37] audit: type=1326 audit(1771677198.596:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.206314][ T37] audit: type=1326 audit(1771677198.596:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.206368][ T37] audit: type=1326 audit(1771677198.596:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.207678][ T37] audit: type=1326 audit(1771677198.596:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.434389][ T37] audit: type=1326 audit(1771677198.596:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1492.434449][ T37] audit: type=1326 audit(1771677198.826:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23194 comm="syz.4.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0de8ac629 code=0x7ffc0000 [ 1493.357222][T23203] vlan2: entered promiscuous mode [ 1493.357359][T23203] vlan2: entered allmulticast mode [ 1493.357368][T23203] hsr_slave_1: entered allmulticast mode [ 1493.383484][T23203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5451'. [ 1494.462719][T23226] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5458'. [ 1494.538324][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5456'. [ 1494.538352][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5456'. [ 1495.063320][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.063414][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.111734][T23244] Can't find ip_set type hash [ 1497.348823][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 1497.519057][T23254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1498.619497][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5469'. [ 1498.886566][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5474'. [ 1498.886597][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5474'. [ 1500.540344][T23304] bridge1: entered promiscuous mode [ 1500.540482][T23304] bridge1: entered allmulticast mode [ 1502.511531][T23327] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5485'. [ 1502.628627][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5486'. [ 1502.628863][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5486'. [ 1503.615756][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5489'. [ 1503.664404][T23350] bridge2: entered promiscuous mode [ 1503.664424][T23350] bridge2: entered allmulticast mode [ 1505.119562][T23380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5500'. [ 1505.170528][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5499'. [ 1505.170558][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5499'. [ 1505.616898][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5503'. [ 1505.739547][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5501'. [ 1505.739747][T23392] netlink: zone id is out of range [ 1505.739758][T23392] netlink: zone id is out of range [ 1505.739767][T23392] netlink: zone id is out of range [ 1505.739775][T23392] netlink: zone id is out of range [ 1505.739808][T23392] netlink: zone id is out of range [ 1505.739818][T23392] netlink: zone id is out of range [ 1505.739827][T23392] netlink: zone id is out of range [ 1505.739859][T23392] netlink: zone id is out of range [ 1505.739868][T23392] netlink: zone id is out of range [ 1507.651688][T23431] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5512'. [ 1507.904862][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1507.904890][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1508.705079][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 1510.487742][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'. [ 1510.487937][T23478] netlink: zone id is out of range [ 1510.775044][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1510.775076][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1512.540149][T23507] vlan2: entered promiscuous mode [ 1512.540399][T23507] vlan2: entered allmulticast mode [ 1512.540416][T23507] hsr_slave_1: entered allmulticast mode [ 1514.864312][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'. [ 1514.864499][T23531] net_ratelimit: 8 callbacks suppressed [ 1514.864514][T23531] netlink: zone id is out of range [ 1514.864523][T23531] netlink: zone id is out of range [ 1514.864533][T23531] netlink: zone id is out of range [ 1514.864541][T23531] netlink: zone id is out of range [ 1514.864573][T23531] netlink: zone id is out of range [ 1514.864583][T23531] netlink: zone id is out of range [ 1514.864592][T23531] netlink: zone id is out of range [ 1514.864624][T23531] netlink: zone id is out of range [ 1514.864634][T23531] netlink: zone id is out of range [ 1514.898505][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5543'. [ 1514.898530][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5543'. [ 1516.183785][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1516.933847][T23569] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5551'. [ 1516.955831][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5554'. [ 1516.955863][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5554'. [ 1518.821208][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5557'. [ 1518.821425][T23583] netlink: zone id is out of range [ 1520.223233][T23608] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5566'. [ 1520.396685][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1520.396713][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1523.405117][T23659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1523.939872][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1523.939900][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1525.116244][T23693] overlayfs: failed to clone lowerpath [ 1525.194633][T23696] overlayfs: failed to clone lowerpath [ 1525.555747][T23700] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5589'. [ 1526.969584][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5596'. [ 1526.969617][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5596'. [ 1527.851308][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 1527.959153][T23751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5602'. [ 1528.039767][T23751] bond2: (slave dummy0): Releasing backup interface [ 1528.044635][T23752] overlayfs: failed to clone lowerpath [ 1528.106974][T23754] overlayfs: failed to clone lowerpath [ 1528.485049][T23759] bridge1: entered promiscuous mode [ 1528.485088][T23759] bridge1: entered allmulticast mode [ 1529.530415][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5609'. [ 1529.530448][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5609'. [ 1531.396620][T23814] bridge3: entered promiscuous mode [ 1531.396651][T23814] bridge3: entered allmulticast mode [ 1532.152674][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5622'. [ 1532.152706][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5622'. [ 1533.319050][T18706] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.699018][T23879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1538.749677][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1538.749709][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1539.079708][ T1160] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 1539.080791][ T1160] ref_tracker: netdev@ffff88804cc946a0 has 1/2 users at [ 1539.080791][ T1160] dst_init+0xd9/0x480 [ 1539.080791][ T1160] dst_alloc+0x12a/0x170 [ 1539.080791][ T1160] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1539.080791][ T1160] ip_route_output_key_hash+0x18d/0x2a0 [ 1539.080791][ T1160] ip_route_output_flow+0x2a/0x150 [ 1539.080791][ T1160] sctp_v4_get_dst+0x3f8/0x12b0 [ 1539.080791][ T1160] sctp_transport_route+0x118/0x2f0 [ 1539.080791][ T1160] sctp_assoc_add_peer+0x650/0x13b0 [ 1539.080791][ T1160] sctp_connect_new_asoc+0x329/0x6b0 [ 1539.080791][ T1160] sctp_sendmsg+0x14c0/0x2990 [ 1539.080791][ T1160] ____sys_sendmsg+0x875/0xac0 [ 1539.080791][ T1160] ___sys_sendmsg+0x2a5/0x360 [ 1539.080791][ T1160] __sys_sendmmsg+0x282/0x4e0 [ 1539.080791][ T1160] __x64_sys_sendmmsg+0xa0/0xc0 [ 1539.080791][ T1160] do_syscall_64+0x14d/0xf80 [ 1539.080791][ T1160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.080791][ T1160] [ 1539.080999][ T1160] ref_tracker: netdev@ffff88804cc946a0 has 1/2 users at [ 1539.080999][ T1160] dst_init+0xd9/0x480 [ 1539.080999][ T1160] dst_alloc+0x12a/0x170 [ 1539.080999][ T1160] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1539.080999][ T1160] ip_route_output_key_hash+0x18d/0x2a0 [ 1539.080999][ T1160] ip_route_output_flow+0x2a/0x150 [ 1539.080999][ T1160] sctp_v4_get_dst+0x3f8/0x12b0 [ 1539.080999][ T1160] sctp_transport_route+0x118/0x2f0 [ 1539.080999][ T1160] sctp_assoc_add_peer+0x650/0x13b0 [ 1539.080999][ T1160] sctp_connect_new_asoc+0x329/0x6b0 [ 1539.080999][ T1160] __sctp_connect+0x5cb/0xdc0 [ 1539.080999][ T1160] sctp_getsockopt_connectx3+0x227/0x360 [ 1539.080999][ T1160] sctp_getsockopt+0x984/0xb90 [ 1539.080999][ T1160] do_sock_getsockopt+0x2d3/0x3f0 [ 1539.080999][ T1160] __x64_sys_getsockopt+0x1aa/0x250 [ 1539.080999][ T1160] do_syscall_64+0x14d/0xf80 [ 1539.080999][ T1160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.080999][ T1160]